Shortcut Automation-5ee2ed — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Shortcut Automation-5ee2ed (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automate your Shortcut project management operations directly from Claude Code. Create and list stories, add tasks and comments, batch-create stories, and navigate workflows -- all without leaving your terminal.
Toolkit docs: composio.dev/toolkits/shortcut
https://rube.app/mcpAdd new stories to your Shortcut workspace with full configuration.
Tool: SHORTCUT_CREATE_STORY
Create a feature story called "Add dark mode support" in workflow state 500000001 with estimate 5 and label "frontend"Key parameters for SHORTCUT_CREATE_STORY:
name (required) -- the story titleworkflow_state_id -- the workflow state to place the story in (recommended over project_id)story_type -- "feature", "bug", or "chore"description -- story body/descriptionestimate -- numeric point estimate (or null for unestimated)epic_id -- associate with an epiciteration_id -- associate with an iterationlabels -- array of label objects with name (and optional color, description)owner_ids -- array of member UUIDs to assigndeadline -- due date in ISO 8601 formattasks -- inline task array with description and optional complete, owner_idscomments -- inline comment array with textstory_links -- link stories with verb ("blocks", "duplicates", "relates to")Important: Either workflow_state_id or project_id must be provided, but not both. workflow_state_id is recommended as Projects are being sunset in Shortcut.
Create multiple stories in a single API call.
Tool: SHORTCUT_CREATE_MULTIPLE_STORIES
Create 3 bug stories: "Login page 500 error", "Cart total rounding issue", and "Search results empty state broken"stories array where each element follows the same schema as SHORTCUT_CREATE_STORYnameRetrieve all stories within a specific project.
Tool: SHORTCUT_LIST_STORIES
List all stories in project 42 with their descriptionsproject__public__id (integer project ID)includes_description: true to include story descriptions in the responseCreate tasks (checklists) within stories for tracking sub-work.
Tool: SHORTCUT_CREATE_TASK
Add a task "Write unit tests for dark mode toggle" to story 12345Key parameters:
story__public__id (required) -- the parent story IDdescription (required) -- the task descriptioncomplete -- boolean, defaults to falseowner_ids -- array of member UUIDs to assign the taskexternal_id -- ID from an external tool if importedPost comments on stories for discussion and documentation.
Tool: SHORTCUT_CREATE_STORY_COMMENT
Add a comment to story 12345: "Reviewed the implementation -- looks good, but needs accessibility testing"Key parameters:
story__public__id (required) -- the story IDtext (required) -- the comment bodyauthor_id -- member UUID (defaults to API token owner)parent_id -- ID of parent comment for threaded repliesList workflows and projects to resolve IDs for story creation.
Tools: SHORTCUT_LIST_WORKFLOWS, SHORTCUT_LIST_PROJECTS
Show me all workflows in our Shortcut workspace so I can find the right workflow state IDSHORTCUT_LIST_WORKFLOWS returns all workflows with their states (IDs, names, types)SHORTCUT_LIST_PROJECTS returns all projects with their attributesworkflow_state_id and project_id values before creating storiesSHORTCUT_CREATE_STORY requires exactly one of these. Providing both or neither causes a rejection. Prefer workflow_state_id since Projects are being sunset.workflow_state_id for new stories.labels array are created on-the-fly if they do not exist. The name field is required for each label object.story_type is omitted, it defaults to "feature". Always set it explicitly for bugs and chores.SHORTCUT_CREATE_MULTIPLE_STORIES processes all stories in a single request. Very large batches may time out -- keep batches under 25 stories.move_to field ("first" or "last") moves the story within its workflow state, not across states.| Tool Slug | Description |
|---|---|
SHORTCUT_CREATE_STORY | Create a single story (requires name + workflow_state_id or project_id) |
SHORTCUT_CREATE_MULTIPLE_STORIES | Batch-create multiple stories (requires stories array) |
SHORTCUT_LIST_STORIES | List stories in a project (requires project__public__id) |
SHORTCUT_CREATE_TASK | Create a task in a story (requires story__public__id, description) |
SHORTCUT_CREATE_STORY_COMMENT | Add a comment to a story (requires story__public__id, text) |
SHORTCUT_CREATE_STORY_FROM_TEMPLATE | Create a story from a template |
SHORTCUT_LIST_WORKFLOWS | List all workflows and their states |
SHORTCUT_LIST_PROJECTS | List all projects |
Powered by [Composio](https://composio.dev)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.