PluginBench
Skill
Official
Review
Audit score 70

ticket-triage

anthropics/knowledge-work-plugins

Categorize, prioritize, and route incoming support tickets with structured triage assessment.

What is ticket-triage?

Analyzes incoming support tickets or customer issues to assign priority levels (P1-P4), determine category (bug, billing, feature request, etc.), check for duplicates, and recommend routing to the appropriate team. Use when a new ticket arrives and needs initial assessment before assignment.

  • Parse issue details including core problem, symptoms, customer context, and urgency signals
  • Assign primary and optional secondary category from a taxonomy of 9 issue types
  • Assign priority level P1-P4 with justification based on impact and urgency
  • Check for duplicate or known issues in support platform and knowledge base
  • Generate structured triage output with routing recommendation and suggested initial response
  • Identify escalation triggers and internal notes for the handling team

How to install ticket-triage

npx skills add https://github.com/anthropics/knowledge-work-plugins --skill ticket-triage
Claude Code
Cursor
Windsurf
Cline

How to use ticket-triage

  1. 1.Run /ticket-triage followed by the ticket text, customer message, or issue description
  2. 2.Review the generated triage output including category, priority, and routing recommendation
  3. 3.Check the suggested initial response draft and customize if needed
  4. 4.Route the ticket to the recommended team or queue
  5. 5.Use offered next steps to search for context, draft full responses, or escalate as needed

Use cases

Good for
  • New support ticket arrives: quickly categorize and route to appropriate team queue
  • Customer reports production outage: assess impact scope and assign P1 priority for immediate response
  • Billing complaint received: categorize as billing issue and route to finance team with context
  • Duplicate detection: check if similar issue already exists before creating new ticket
  • Feature request triage: distinguish from bugs and route to product team for evaluation
Who it's for
  • Support team leads and frontline support agents
  • Customer success managers handling escalations
  • Operations teams managing ticket queues
  • Anyone triaging incoming customer issues or bug reports

ticket-triage FAQ

What priority should I assign if a customer is frustrated but the issue is minor?

Priority is based on impact and urgency, not emotional state. A frustrated customer with a cosmetic issue is still P4. However, if frustration signals an escalation or the customer is a key account, consider bumping priority one level.

How do I handle tickets that span multiple categories?

Assign a primary category based on the root cause or most critical aspect. If a customer can't log in due to a bug, it's Bug (primary), not Account. If they report both a bug and a feature request, the bug is primary.

What if I can't find a duplicate or known issue?

Document that you checked available sources and found no match. This is normal and doesn't delay routing. The handling team can investigate further if needed.

When should I escalate a ticket immediately?

Escalate P1 tickets (production down, data loss, security breach, all users affected) within 1 hour. Also escalate if a customer explicitly requests it or mentions executive involvement, regardless of initial priority.

Can I use this skill without access to a knowledge base or ticket system?

Yes. The skill will work with available sources. If you don't have access to a support platform or knowledge base, document that in the triage output and proceed with routing based on category and priority.

Full instructions (SKILL.md)

Source of truth, from anthropics/knowledge-work-plugins.


name: ticket-triage description: Triage and prioritize a support ticket or customer issue. Use when a new ticket comes in and needs categorization, assigning P1-P4 priority, deciding which team should handle it, or checking whether it's a duplicate or known issue before routing. argument-hint: "<ticket or issue description>"

/ticket-triage

If you see unfamiliar placeholders or need to check which tools are connected, see CONNECTORS.md.

Categorize, prioritize, and route an incoming support ticket or customer issue. Produces a structured triage assessment with a suggested initial response.

Usage

/ticket-triage <ticket text, customer message, or issue description>

Examples:

  • /ticket-triage Customer says their dashboard has been showing a blank page since this morning
  • /ticket-triage "I was charged twice for my subscription this month"
  • /ticket-triage User can't connect their SSO — getting a 403 error on the callback URL
  • /ticket-triage Feature request: they want to export reports as PDF

Workflow

1. Parse the Issue

Read the input and extract:

  • Core problem: What is the customer actually experiencing?
  • Symptoms: What specific behavior or error are they seeing?
  • Customer context: Who is this? Any account details, plan level, or history available?
  • Urgency signals: Are they blocked? Is this production? How many users affected?
  • Emotional state: Frustrated, confused, matter-of-fact, escalating?

2. Categorize and Prioritize

Using the category taxonomy and priority framework below:

  • Assign a primary category (bug, how-to, feature request, billing, account, integration, security, data, performance) and an optional secondary category
  • Assign a priority (P1–P4) based on impact and urgency
  • Identify the product area the issue maps to

3. Check for Duplicates and Known Issues

Before routing, check available sources:

  • ~~support platform: Search for similar open or recently resolved tickets
  • ~~knowledge base: Check for known issues or existing documentation
  • ~~project tracker: Check if there's an existing bug report or feature request

Apply the duplicate detection process below.

4. Determine Routing

Using the routing rules below, recommend which team or queue should handle this based on category and complexity.

5. Generate Triage Output

## Triage: [One-line issue summary]

**Category:** [Primary] / [Secondary if applicable]
**Priority:** [P1-P4] — [Brief justification]
**Product area:** [Area/team]

### Issue Summary
[2-3 sentence summary of what the customer is experiencing]

### Key Details
- **Customer:** [Name/account if known]
- **Impact:** [Who and what is affected]
- **Workaround:** [Available / Not available / Unknown]
- **Related tickets:** [Links to similar issues if found]
- **Known issue:** [Yes — link / No / Checking]

### Routing Recommendation
**Route to:** [Team or queue]
**Why:** [Brief reasoning]

### Suggested Initial Response
[Draft first response to the customer — acknowledge the issue,
set expectations, provide workaround if available.
Use the auto-response templates below as a starting point.]

### Internal Notes
- [Any additional context for the agent picking this up]
- [Reproduction hints if it's a bug]
- [Escalation triggers to watch for]

6. Offer Next Steps

After presenting the triage:

  • "Want me to draft a full response to the customer?"
  • "Should I search for more context on this issue?"
  • "Want me to check if this is a known bug in the tracker?"
  • "Should I escalate this? I can package it with /customer-escalation."

Category Taxonomy

Assign every ticket a primary category and optionally a secondary category:

CategoryDescriptionSignal Words
BugProduct is behaving incorrectly or unexpectedlyError, broken, crash, not working, unexpected, wrong, failing
How-toCustomer needs guidance on using the productHow do I, can I, where is, setting up, configure, help with
Feature requestCustomer wants a capability that doesn't existWould be great if, wish I could, any plans to, requesting
BillingPayment, subscription, invoice, or pricing issuesCharge, invoice, payment, subscription, refund, upgrade, downgrade
AccountAccount access, permissions, settings, or user managementLogin, password, access, permission, SSO, locked out, can't sign in
IntegrationIssues connecting to third-party tools or APIsAPI, webhook, integration, connect, OAuth, sync, third-party
SecuritySecurity concerns, data access, or compliance questionsData breach, unauthorized, compliance, GDPR, SOC 2, vulnerability
DataData quality, migration, import/export issuesMissing data, export, import, migration, incorrect data, duplicates
PerformanceSpeed, reliability, or availability issuesSlow, timeout, latency, down, unavailable, degraded

Category Determination Tips

  • If the customer reports both a bug and a feature request, the bug is primary
  • If they can't log in due to a bug, category is Bug (not Account) — root cause drives the category
  • "It used to work and now it doesn't" = Bug
  • "I want it to work differently" = Feature request
  • "How do I make it work?" = How-to
  • When in doubt, lean toward Bug — it's better to investigate than dismiss

Priority Framework

P1 — Critical

Criteria: Production system down, data loss or corruption, security breach, all or most users affected.

  • The customer cannot use the product at all
  • Data is being lost, corrupted, or exposed
  • A security incident is in progress
  • The issue is worsening or expanding in scope

SLA expectation: Respond within 1 hour. Continuous work until resolved or mitigated. Updates every 1-2 hours.

P2 — High

Criteria: Major feature broken, significant workflow blocked, many users affected, no workaround.

  • A core workflow is broken but the product is partially usable
  • Multiple users are affected or a key account is impacted
  • The issue is blocking time-sensitive work
  • No reasonable workaround exists

SLA expectation: Respond within 4 hours. Active investigation same day. Updates every 4 hours.

P3 — Medium

Criteria: Feature partially broken, workaround available, single user or small team affected.

  • A feature isn't working correctly but a workaround exists
  • The issue is inconvenient but not blocking critical work
  • A single user or small team is affected
  • The customer is not escalating urgently

SLA expectation: Respond within 1 business day. Resolution or update within 3 business days.

P4 — Low

Criteria: Minor inconvenience, cosmetic issue, general question, feature request.

  • Cosmetic or UI issues that don't affect functionality
  • Feature requests and enhancement ideas
  • General questions or how-to inquiries
  • Issues with simple, documented solutions

SLA expectation: Respond within 2 business days. Resolution at normal pace.

Priority Escalation Triggers

Automatically bump priority up when:

  • Customer has been waiting longer than the SLA allows
  • Multiple customers report the same issue (pattern detected)
  • The customer explicitly escalates or mentions executive involvement
  • A workaround that was in place stops working
  • The issue expands in scope (more users, more data, new symptoms)

Routing Rules

Route tickets based on category and complexity:

Route toWhen
Tier 1 (frontline support)How-to questions, known issues with documented solutions, billing inquiries, password resets
Tier 2 (senior support)Bugs requiring investigation, complex configuration, integration troubleshooting, account issues
EngineeringConfirmed bugs needing code fixes, infrastructure issues, performance degradation
ProductFeature requests with significant demand, design decisions, workflow gaps
SecurityData access concerns, vulnerability reports, compliance questions
Billing/FinanceRefund requests, contract disputes, complex billing adjustments

Duplicate Detection

Before creating a new ticket or routing, check for duplicates:

  1. Search by symptom: Look for tickets with similar error messages or descriptions
  2. Search by customer: Check if this customer has an open ticket for the same issue
  3. Search by product area: Look for recent tickets in the same feature area
  4. Check known issues: Compare against documented known issues

If a duplicate is found:

  • Link the new ticket to the existing one
  • Notify the customer that this is a known issue being tracked
  • Add any new information from the new report to the existing ticket
  • Bump priority if the new report adds urgency (more customers affected, etc.)

Auto-Response Templates by Category

Bug — Initial Response

Thank you for reporting this. I can see how [specific impact]
would be disruptive for your work.

I've logged this as a [priority] issue and our team is
investigating. [If workaround exists: "In the meantime, you
can [workaround]."]

I'll update you within [SLA timeframe] with what we find.

How-to — Initial Response

Great question! [Direct answer or link to documentation]

[If more complex: "Let me walk you through the steps:"]
[Steps or guidance]

Let me know if that helps, or if you have any follow-up
questions.

Feature Request — Initial Response

Thank you for this suggestion — I can see why [capability]
would be valuable for your workflow.

I've documented this and shared it with our product team.
While I can't commit to a specific timeline, your feedback
directly informs our roadmap priorities.

[If alternative exists: "In the meantime, you might find
[alternative] helpful for achieving something similar."]

Billing — Initial Response

I understand billing issues need prompt attention. Let me
look into this for you.

[If straightforward: resolution details]
[If complex: "I'm reviewing your account now and will have
an answer for you within [timeframe]."]

Security — Initial Response

Thank you for flagging this — we take security concerns
seriously and are reviewing this immediately.

I've escalated this to our security team for investigation.
We'll follow up with you within [timeframe] with our findings.

[If action is needed: "In the meantime, we recommend
[protective action]."]

Triage Best Practices

  1. Read the full ticket before categorizing — context in later messages often changes the assessment
  2. Categorize by root cause, not just the symptom described
  3. When in doubt on priority, err on the side of higher — it's easier to de-escalate than to recover from a missed SLA
  4. Always check for duplicates and known issues before routing
  5. Write internal notes that help the next person pick up context quickly
  6. Include what you've already checked or ruled out to avoid duplicate investigation
  7. Flag patterns — if you're seeing the same issue repeatedly, escalate the pattern even if individual tickets are low priority