/finding-triage
Triage open Blumira findings by severity, presenting a prioritized list for review
$ npx -y skills add wyre-technology/msp-claude-plugins --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/finding-triage
Context preview
What this command does when you run it.
Triage open Blumira findings by severity, presenting a prioritized list for review
Command definition
finding-triage.mddescription: Triage open Blumira findings by severity, presenting a prioritized list for review
argument-hint: "[severity] [limit]"
arguments: [severity, limit]
Finding Triage
Prerequisites
- Valid Blumira JWT token configured
- Access to the organization's findings
Steps
1. Call `blumira_findings_list` with `status.eq=10` (Open) and `order_by=-severity` to get open findings sorted by severity 2. If severity argument provided, add `severity.eq=<value>` filter 3. Group findings by severity level (CRITICAL → HIGH → MEDIUM → LOW) 4. Present a summary table with finding ID, severity, title, and creation date 5. Highlight CRITICAL and HIGH findings that need immediate attention 6. Show total counts per severity level
Parameters
| Parameter | Type | Required | Description | |-----------|------|----------|-------------| | severity | string | No | Filter to specific severity (CRITICAL, HIGH, MEDIUM, LOW) | | limit | number | No | Max findings to show (default 25) |
Examples
Basic Usage
/finding-triage
Filter to Critical Only
/finding-triage --severity CRITICAL
Show More Results
/finding-triage --limit 50
Error Handling
- **No open findings:** Report that all findings are resolved — clean slate
- **Authentication error:** Prompt to verify JWT token
- **Rate limited:** Retry with smaller page size
Related Commands
- `/investigate-finding` - Deep dive into a specific finding
- `/resolve-finding` - Resolve a finding after investigation
- `/security-posture` - Overall security posture review
Read more
description: Triage open Blumira findings by severity, presenting a prioritized list for review argument-hint: "[severity] [limit]" arguments: [severity, limit]
Finding Triage
Prerequisites
- Valid Blumira JWT token configured
- Access to the organization's findings
Steps
1. Call `blumira_findings_list` with `status.eq=10` (Open) and `order_by=-severity` to get open findings sorted by severity 2. If severity argument provided, add `severity.eq=<value>` filter 3. Group findings by severity level (CRITICAL → HIGH → MEDIUM → LOW) 4. Present a summary table with finding ID, severity, title, and creation date 5. Highlight CRITICAL and HIGH findings that need immediate attention 6. Show total counts per severity level
Parameters
| Parameter | Type | Required | Description | |-----------|------|----------|-------------| | severity | string | No | Filter to specific severity (CRITICAL, HIGH, MEDIUM, LOW) | | limit | number | No | Max findings to show (default 25) |
Examples
Basic Usage
/finding-triage
Filter to Critical Only
/finding-triage --severity CRITICAL
Show More Results
/finding-triage --limit 50
Error Handling
- **No open findings:** Report that all findings are resolved — clean slate
- **Authentication error:** Prompt to verify JWT token
- **Rate limited:** Retry with smaller page size
Related Commands
- `/investigate-finding` - Deep dive into a specific finding
- `/resolve-finding` - Resolve a finding after investigation
- `/security-posture` - Overall security posture review
One command to supercharge Claude Code for MSP workflows. Then restart Claude Code. That's it. Documentation: mcp.wyre.ai
Repo: wyre-technology/msp-claude-plugins
Other commands on msp-claude-plugins.
- /case-review
Review and triage abuse mailbox cases in Abnormal Security
Open command - /search-threats
Search for specific threat patterns in Abnormal Security by sender, recipient, attack type, or keywords
Open command - /threat-triage
Triage recent email threats detected by Abnormal Security by severity and attack type
Open command - /list-overdue-invoices
List open and overdue Alternative Payments invoices and optionally generate hosted payment links for them
Open command - /reconcile-payout
Reconcile an Alternative Payments payout by listing its transactions and matching them against invoices and customers
Open command - /eol-report
EOL/EOS risk report — devices, OS versions, and firmware approaching or past end-of-life/end-of-support, prioritized by criticality
Open command

