index365 triage findings
Turn the latest run's findings into a prioritized, file-mapped plan. Planning only. Ideally you are inside the repository that serves the audited site, so findings can map to files.
Workflow
List findings worst-first (defaults to the latest run, no ids needed):
index365 findings --severity critical index365 findings --severity highFor a big report, save the full payload instead and rank over the file, never in context:
index365 report --savewrites it into the git-ignored.index365/dir; dispatch a subagent to rank findings from that file.Read the ones that matter.
index365 findings get <n> --jsonper candidate, using the ordinal from the table. Order by user impact and group bymarketingCategory.label. Do NOT group bycategory: it is a shared closed taxonomy with no Marketing Signal values, so it readsgeneralon every row.Map each finding to repo files. Use
affectedUrls+Glob/Grepto find the route/component/template that produces each affected URL. Note findings whoseaffectedUrlsdon't resolve to a file in this repo, those are out of scope for an in-repo fix.Output the plan (do not change code): an ordered list of finding ordinal +
findingId→ title → severity → target file(s) → the remediation from the finding. Cite the stablefindingIdin the plan, since ordinals are per-run positions whilefindingIdsurvives a re-scan for the after-fix comparison. Group into 1–3 reviewable batches, smallest safe diffs first. Flag anything that needs a human decision.
Shortcut via MCP prompts
If the index365 MCP server is connected, the triage_findings and prepare_pr_plan
prompts do steps 1–4 directly. Use them when you're in an MCP host; otherwise the CLI
flow above is equivalent.
Next
Apply the plan with index365-apply-fix (one finding at a time) or run the whole loop with index365-audit-and-fix.