triage-issues
Skill17k starsChanged 7 months agoApache-2.0View on GitHub
Triage GitHub issues in the googleapis/mcp-toolbox repo: propose the correct labels (type / priority / product / status), check for duplicates, verify a bug has enough info to act on, and draft a triage comment. Use whenever a maintainer asks you to triage, label, categorize, prioritize, or "look at" an issue (or a batch) in mcp-toolbox, e.g. "triage #3648", "what labels should this get", "is this a dup", triage a batch of issue numbers, or when they paste an mcp-toolbox issue link. PROPOSE-ONLY: delivers the triage in chat for the maintainer to apply; never edits labels, comments, closes, or assigns on its own.
We split this skill into the rules it gives an agent
5 rules. 0 are common, 1 is distinctive, and 4 are very specific to this project.
0
Common
Most of the 15 edited versions we read keep these.
1
Distinctive
This author's own choices. Worth a look.
4
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 77
Investigate before deferring (bugs): Before proposing waiting for response, try to reproduce by tracing the code, and check git log/git …
- Very specific: line 83
If you can root-cause it, include the file:line — it sharpens the priority call.
- Distinctive: line 94
Draft comment: Use the playbook's canonical templates verbatim ("Needs More Information" for a bug missing repro/details, "Acknowledging a …
- Very specific: line 104
Propose only: Never run gh issue edit/comment/close or assign.
- Very specific: line 105
Only real labels: every proposed label must appear in gh label list.
“Common” is measured: kept by at least 6 in 10 of the 15 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Triage Issues (mcp-toolbox)
Triage here is mostly manual labeling. The product: label auto-routes to the owning team
via .github/blunderbuss.yml. Propose only, never mutating the issue; when a call isn't obvious,
ask rather than guess.
Goal
Given an issue number (or several), deliver a triage the maintainer can apply in seconds: labels across the four axes (each with a one-line why), likely duplicates, missing bug info, and a draft comment when one adds value.
Prerequisites
ghauthenticated forgoogleapis/mcp-toolbox, plus the issue number(s). A GitHub MCP server substitutes forghif it isn't available: theghcommands below map to its read/list tools.
Guidance
Read source-of-truth live, not from memory (labels/routing drift):
gh label list --repo googleapis/mcp-toolbox --limit 200: the only valid label names. Never propose one not listed..github/blunderbuss.yml: whichproduct:labels route to which team..github/ISSUE_TEMPLATE/bug_report.yml: required bug fields (for the completeness check).- references/maintainer-playbook.md: the authoritative taxonomy, priority/status definitions, SLO targets, and comment templates. Read it to classify; this skill only adds how to apply them in a propose-only workflow.
Fetch the issue:
gh issue view <n> --repo googleapis/mcp-toolbox --json number,title,body,author,labels,comments,createdAtCheck bot-noise first. Automated reports (e.g. "Cloud Build Failure Reporter ... failed",
bot author) just need periodic-failure, so skip the rest of the workflow.
The four axes (the playbook has the definitions; below is only how to apply them here). Skip an axis when it doesn't apply: say so, don't force a label.
type:: the template pre-appliestype: bug/type: question; trust it, but correct it when the body disagrees (a "bug" asking for new behavior is a feature request) and say why.product:: one per data source; highest-leverage label, since it drives team routing. Infer from the source/tool named (e.g. "looker run_dashboard tool" →product: looker). Don't force one on core/product-agnostic issues; note it has no product owner. If a real data source has no matching label yet, say so and flag it for.github/labels.yamlrather than mis-routing.priority:: bugs are only ever p0 or p1 (never p2/p3); feature requests span p0-p3. Match the issue to the playbook's priority examples and SLO table, state the reason, and let the maintainer override.status:(optional):waiting for responsewhen a bug lacks info to act,feedback wantedwhen waiting on community/author,help wantedfor community-open work. See the playbook for exact semantics and the >60-day-silence close rule.
Community labels (standalone, not status:-prefixed): good first issue for well-scoped,
approachable issues; ready for work for triaged issues actionable now. Propose good first issue
alongside help wanted when the fix is small and self-contained.
Assignment (not a label): rarely needed, since product: auto-routes to the team. Propose an
assignee only when an external contributor volunteers (assign them, to avoid duplicate work) or a
maintainer is picking it up; otherwise leave it unassigned so contributors know it's open.
Duplicates. gh issue list --repo googleapis/mcp-toolbox --state all --search "<key terms>" --limit 20
with distinctive terms (tool name, error string). If it's a known issue, propose duplicate +
close: link and reference the original, and thank the reporter (template below).
Investigate before deferring (bugs). Before proposing waiting for response, try to reproduce
by tracing the code, and check git log/git blame for a fix that already landed silently. When
the call hinges on whether the bug is real, hand off to the reproduce-bug skill, which runs the
cheap discriminators (wrong tool type, version skew, client-side) and can reproduce most reports on
SQLite with no credentials; its verdict sharpens both priority: and status:. If
it's already fixed, propose duplicate + close referencing the commit rather than asking for info.
If you can root-cause it, include the file:line — it sharpens the priority call. Only fall back to
waiting for response when reproduction genuinely isn't possible, and then ask specific,
actionable questions, not "please provide more info". Compare against bug_report.yml required
fields (version, env, expected vs. current, repro) to list exactly what's missing; this feeds the
label and the draft comment.
Feature requests & questions. For a feature request, search the codebase for an existing or
partial implementation before drafting the acknowledgment — it may already be possible (answer and
close) or a duplicate. For a type: question, answer directly from the code with references rather
than only labeling it.
Draft comment. Use the playbook's canonical templates verbatim ("Needs More Information" for a bug missing repro/details, "Acknowledging a Feature Request" for an FR), filling in specifics like the exact missing fields; don't invent wording. For a duplicate:
Thanks for reporting this! This is a duplicate of #<original>, so I'm closing this in favor of that issue. Please follow along there for updates.Rules
- Propose only. Never run
gh issue edit/comment/closeor assign. Deliver in chat. - Only real labels: every proposed label must appear in
gh label list. - When type/product is a genuine toss-up, ask. A confident wrong
product:mis-routes. - Cite what backs a claim. Routing/label claims cite the config (e.g. "routes to
toolbox-looker-teamperblunderbuss.yml"); codebase claims (root cause, "already fixed", "already implemented") citefile:lineor a commit SHA, or are marked[UNVERIFIED].
Output format
## Issue #<n>: <title>
**Labels:**
- `type: <x>`: <why>
- `product: <x>`: <why + routing, or "no product owner: core/...">
- `priority: <x>`: <why>
- `status: <x>`: <why, if any>
**Duplicates:** <#nums, or "none for terms: ...">
**Completeness (bugs):** <what's missing, or "complete">
**Draft comment:** <paste-ready, or "none needed">
**Apply:** gh issue edit <n> --repo googleapis/mcp-toolbox --add-label "type: ...,product: ...,priority: ..."Include the ready-to-run gh issue edit line so the maintainer applies with one paste, but leave
running it to them. For a batch, one block per issue plus a one-line summary table.
Trending
Less talk lately.about the whole repository
Who's talking about googleapis/mcp-toolbox
- ИИ за минуту“3 бесплатных MCP для баз данных: read-only #shorts”YouTube · Oct 19, 2026 · 770 views
- Coding Is Art“Agent Tooling Is Eating GitHub 📈 #shorts”YouTube · Jul 30, 2026 · 445 views
- RepoShots“Conecte seus bancos ao Claude com mcp-toolbox #Claude #Shorts”YouTube · Jun 10, 2026 · 396 views
- RepoManiac“Connect AI to Your Database with Google's MCP Toolbox”YouTube · Sep 30, 2026 · 326 views
- Maven Tech“Google's MCP Toolbox for Databases”YouTube · Apr 12, 2026 · 166 views
The biggest 5 of 64 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 64
Talked about on GitHub, YouTube, Bluesky, the web and Hacker News (64 times).
On GitHub · 33
- May 22, 2026MCP OAuth flow ignores PRM authorization_servers and user is redirected to <mcp_host>/authorize → 404 — anthropics/claude-ai-mcp10 reactions · 4 comments
- Apr 30, 2026MCP Toolbox for Databases read-only SQL call is blocked by safety guard after explicit approval (interactive mode) — openai/codex2 reactions · 2 comments
- Jul 6, 2026feat(firestore): support firestore mongodb dialect — GoogleCloudPlatform/db-context-enrichment1 reaction · 4 comments
- Oct 23, 2026mcp-toolbox 1.15.0 — Homebrew/homebrew-core0 reactions · 1 comment
- Oct 19, 2026● relit: googleapis/mcp-toolbox — tests — fitzyracing1/darks0 reactions · 1 comment
28 more on GitHub
- Oct 19, 2026[Vulnerability] googleapis/mcp-toolbox: Information Disclosure — Danyw24/mcp-radar0 reactions
- Oct 17, 2026content: reconcile five search and automation guide pairs — MCPFind/mcp-find0 reactions · 1 comment
- Oct 13, 2026○ dark: googleapis/mcp-toolbox — CF: Deploy Dev Docs — fitzyracing1/darks0 reactions
- Oct 8, 2026mcp-toolbox 1.14.0 — Homebrew/homebrew-core0 reactions · 1 comment
- Oct 7, 2026[Vulnerability] googleapis/mcp-toolbox: Credential Exposure — Danyw24/mcp-radar0 reactions
- Oct 7, 202688 catalog URLs point to GitHub repositories that moved, were renamed, archived or are gone — archestra-ai/archestra0 reactions
- Oct 6, 2026[Vulnerability] googleapis/mcp-toolbox: Authorization Bypass / Information Disclosure — Danyw24/mcp-radar0 reactions
- Sep 25, 2026mcp-toolbox 1.13.1 — Homebrew/homebrew-core0 reactions · 1 comment
- Sep 25, 2026mcp-toolbox 1.13.0 — Homebrew/homebrew-core0 reactions · 1 comment
- Sep 17, 2026mcp-toolbox 1.12.0 — Homebrew/homebrew-core0 reactions · 1 comment
- Sep 17, 2026Security triage review: 2026-09-17 (part 10/10) — flatcar/security-triage0 reactions
- Sep 11, 2026mcp-toolbox 1.11.0 — Homebrew/homebrew-core0 reactions · 1 comment
- Sep 4, 2026x/vulndb: potential Go vuln in github.com/googleapis/mcp-toolbox: GHSA-vwxw-jrg6-9jxv — golang/vulndb0 reactions · 1 comment
- Aug 27, 2026mcp-toolbox 1.10.0 — Homebrew/homebrew-core0 reactions · 1 comment
- Aug 24, 2026x/vulndb: potential Go vuln in github.com/googleapis/mcp-toolbox: GHSA-76g7-m3xw-x9gr — golang/vulndb0 reactions · 2 comments
- Jul 23, 2026Update 147 repository links that have moved 🤖🤖🤖 — punkpeye/awesome-mcp-servers0 reactions · 1 comment
- Jul 19, 2026fix(ci): paginate issue listing in weekly sdk tier assessment — googleapis/mcp-toolbox-sdk-python0 reactions
- Jul 1, 2026x/vulndb: potential Go vuln in github.com/googleapis/mcp-toolbox: GHSA-7pf3-8xx7-rvhf — golang/vulndb0 reactions · 1 comment
- Jun 29, 2026[调研] 20+ 热门 MCP 项目机制清单与 hy-workflow 完美期望态 — voxServalG/hy-workflow-mcp0 reactions
- Jun 25, 2026x/vulndb: potential Go vuln in github.com/googleapis/mcp-toolbox: GHSA-wcpr-6g7x-p44r — golang/vulndb0 reactions · 1 comment
- Jun 24, 2026x/vulndb: potential Go vuln in github.com/googleapis/mcp-toolbox: GHSA-8fcc-w5hv-4gxv — golang/vulndb0 reactions · 1 comment
- Jun 24, 2026x/vulndb: potential Go vuln in github.com/googleapis/mcp-toolbox: GHSA-5gf6-gc35-xjpc — golang/vulndb0 reactions · 1 comment
- Jun 18, 2026Update stateless draft implementation to final `2026-07-28` specification — googleapis/mcp-toolbox-sdk-python0 reactions
- Jun 3, 2026Try a third-party PostgreSQL MCP — jabrena/plinth0 reactions · 2 comments
- May 31, 2026Article freshness: guides/ga4-with-claude.md — watsonrm/rmwcommerce0 reactions
- May 31, 2026Broken links detected (2026-06-14) — awesome-ai-tools/curated-mcp-servers0 reactions
- May 7, 2026Bolt: EXPLAIN/PROFILE plan missing from PULL SUCCESS metadata (breaks Neo4j drivers' summary.Plan()) — ArcadeData/arcadedb0 reactions · 1 comment
- Mar 17, 2026fix(adk): wrap tool execution errors into error output — googleapis/mcp-toolbox-sdk-python0 reactions · 11 comments
On YouTube · 22
- Oct 19, 20263 бесплатных MCP для баз данных: read-only #shorts — ИИ за минуту770 views
- Jul 30, 2026Agent Tooling Is Eating GitHub 📈 #shorts — Coding Is Art445 views
- Jun 10, 2026Conecte seus bancos ao Claude com mcp-toolbox #Claude #Shorts — RepoShots396 views · 1 comment
- Sep 30, 2026Connect AI to Your Database with Google's MCP Toolbox — RepoManiac326 views
- Apr 12, 2026Google's MCP Toolbox for Databases — Maven Tech166 views
17 more on YouTube
- Apr 10, 2026Supercharge Your Database Workflows with MCP Toolbox — Github Signals95 views
- Apr 13, 2026Connect AI agents directly to databases #Shorts — Repo Radar50 views · 1 comment
- Oct 10, 2026What Is MCP? Connect AI Agents to Databases & APIs Safely — CipherVibe36 views
- Oct 15, 2026Don't give your AI agent raw SQL #shorts — Michael Goldenberg34 views
- Sep 26, 2026Let Claude Use Your Files, Git and Database (MCP Setup) — The Agent Workshop33 views · 1 comment
- Oct 14, 2026You Sent One Prompt. Your Agent Gave Up Its Keys, Zenity Says #Shorts — Agent Breach Lab28 views
- Jun 25, 2026Critical AI Tooling CVEs: Patch Agent Workflows #Shorts — dailytechhackglobal14 views
- Jul 31, 2026Google MCP Toolbox Tool Invocation CVE #Shorts — dailytechhackglobal10 views
- Jul 5, 2026Critical Langflow + MCP Toolbox CVEs: Patch AI Tooling Now #Shorts — dailytechhackglobal10 views
- Jul 31, 2026Google MCP Toolbox Tool Invocation CVE #Shorts — dailytechhackglobal9 views
- Oct 14, 2026You Trust Your MCP Server. Your Agent Steers Where It Fetches #Shorts — Agent Breach Lab5 views
- Jul 31, 2026Google MCP Toolbox CVEs: Tool Invocation, SSRF, and OAuth Bypass Fixes — dailytechhackglobal5 views
- Jun 24, 2026Critical AI Tooling Token Risk #Shorts — dailytechhackglobal5 views
- Jun 24, 2026Gemini CLI Critical CVE: Patch AI Workflows Now #Shorts — dailytechhackglobal4 views
- Jul 31, 2026Google MCP Toolbox CVEs: Tool Invocation, SSRF, and OAuth Bypass Fixes — dailytechhackglobal2 views
- Jul 5, 2026Langflow and MCP Toolbox CVEs: Critical AI Tooling Risks Defenders Should Patch — dailytechhackglobal2 views
- Jul 6, 2026Patch containerd and MCP Toolbox: Critical CVEs in Cloud and AI Tooling — dailytechhackglobal1 view
On Bluesky · 5
- Oct 15, 2026mcp-toolbox (⭐️ 16664) MCP Toolbox for Databases is an open source MCP server for databases. #go — @golangoss.bsky.social1 likes and repost
- Aug 15, 2026mcp-toolbox (⭐️ 16179) MCP Toolbox for Databases is an open source MCP server for databases. #go — @golangoss.bsky.social1 likes and repost
- Aug 2, 2026mcp-toolbox (⭐️ 16096) MCP Toolbox for Databases is an open source MCP server for databases. #go — @golangoss.bsky.social1 likes and repost
- Jun 12, 2026mcp-toolbox (⭐️ 15594) MCP Toolbox for Databases is an open source MCP server for databases. #go — @golangoss.bsky.social0 likes and reposts · 1 reply
- May 6, 2026mcp-toolbox (⭐️ 14981) MCP Toolbox for Databases is an open source MCP server for databases. #go — @golangoss.bsky.social0 likes and reposts · 1 reply
On the web · 3
- Oct 22, 2026Cloud Run | MCP Toolbox for Databases — google.com
- Mar 11, 2026feat(bigquery): add maximumBytesBilled to source config ... — google.com
- Aug 25, 2025Add env var for optional fields in prebuilt configs for `cloud- ... — google.com
On Hacker News · 1
- Apr 10, 2026Google: MCP Toolbox2 points · 1 comment
Other versions16 projects use a version of this.
Word for word · 1
- googleapis/genai-toolbox★ 17k100% same
Edited · 0
None found.
Wrote their own version · 15
- microsoft/fluentui★ 20ksame name
- btriapitsyn/openchamber★ 12ksame name
- openchamber/openchamber★ 12ksame name
- agent-substrate/substrate★ 6ksame name
- kubernetes-sigs/agent-sandbox★ 4.5ksame name
- Nexus-Mods/Vortex★ 1.6ksame name
- allenhutchison/obsidian-gemini★ 534same name
- AGGIB/Stroq★ 19same name
- webpro/skills★ 16same name
- jlu-lujing/TaskHunter★ 4same name
5 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
Used alongsideProjects with it also use clack-cli-patterns, drag-to-reorder and 10 more.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
jlu-lujingSkillclack-cli-patterns
Use when creating or modifying TaskHunter CLI commands, prompts, terminal output, non-TTY behavior, `--quiet`, or `--json` behavior.
Also in 3 projects that use this
jlu-lujingSkilldrag-to-reorder
Use when implementing or modifying TaskHunter sortable or drag-to-reorder behavior, especially `@dnd-kit`, touch/mobile interactions, variable-width items, or wrapping layouts.
Also in 3 projects that use this
gabriellstSkilldesktop-shell
Work on the CODM desktop shell — the Tauri v2 host (packages/app/tauri), the react client-side services DI (packages/app/react/src/services — ports + platform services + Container/Token + ServicesProvider), sidecar supervision, or any OS-integration capability (folder picker, notifications, badge, secrets, autostart). Use whenever a task mentions Tauri, the desktop app, sidecars, or an OS capability the react console needs.
Also in 3 projects that use this
lossless-groupSkilltheme-system
The Lossless Group's theme and mode architecture — two-tier token system, three-mode contract (light/dark/vibrant), theme.css organization, and design system conventions. Use when setting up themes/modes for any Astro Knots site, debugging mode toggles, working with CSS tokens, or when the user mentions "vibrant mode", "two-tier tokens", "theme.css", or design system patterns.
Also in 3 projects that use this
mamachankoSkillcommunication-style
Communicate like a professional collaborator — concrete, direct, calibrated, low on filler. Use as the standing style for reports, summaries, reviews, PR text, and conversation, or when the user asks for a specific register such as terse.
Also in 3 projects that use this
malopezr7Skillserve-sim
Controls a running iOS, iPad, or Apple Watch Simulator via the serve-sim CLI (npx serve-sim) and streams it into the host agent's preview pane. Use whenever the user wants an AI agent to view or drive an Apple Simulator — streaming to preview, taps at normalized coordinates, multi-touch gestures, hardware buttons, rotation, memory warnings, CoreAnimation debug, synthetic camera injection, or media drag-drop. Triggers include "serve-sim", "iOS simulator", "Apple simulator", "iPad simulator", "Apple Watch simulator", "stream the simulator", "show the simulator in preview", "view the simulator here", "open simulator in preview", "simulator gestures", "tap on the simulator", "rotate the simulator", "inject camera feed", or any request to drive or display an Apple Simulator visually. Do NOT use for Android emulators, building/installing an iOS app (use xcodebuild), booting a simulator from scratch (use xcrun simctl boot), in-app React Native runtime debugging (use rn-debugger), or real iOS hardware.
Also in 3 projects that use this
- +5 more from jlu-lujing
In this repository5 other files it gives its agents.
- docsite-link-sweepSkill
- fix-failing-testsSkill
- reproduce-bugSkill
- review-prsSkill
- stale-sweepSkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

