work-on-ticket — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited work-on-ticket (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Streamlined workflow to start work on a Jira ticket by fetching ticket details, creating a branch, and initiating task planning.
Activate this skill when:
work on [TICKET_ID] or similar intentExtract the Jira ticket ID from the user's message. Common patterns:
work on AGP-782start AGP-782pick up PROJ-123Ticket ID format: [A-Z]+-[0-9]+ (e.g., AGP-782, AICC-123)
Use the MCP Zapier tool to fetch the ticket:
mcp__zapier -
frontend__jira_software_cloud_find_issue_by_key({
instructions: "Get details for ticket [TICKET_ID]",
key: "[TICKET_ID]",
fields: "summary,description,issuetype,priority,status",
});Extract from response:
Create a branch name using this format:
[TICKET_ID]-[kebab-case-summary]Branch Naming Rules:
AGP-782-)Examples:
AGP-782-migrate-existing-mcp-serverAICC-123-fix-auth-token-expiryPROJ-456-add-user-settings-pageImplementation:
# Convert summary to kebab-case
# Example: "Migrate existing MCP server" -> "migrate-existing-mcp-server"Before creating a branch, check the current state:
# Check current branch
git branch --show-current
# Check for uncommitted changes
git status --porcelainIf uncommitted changes exist:
If not on staging/main:
Once it's safe to proceed:
# Ensure we're on the latest staging
git checkout staging
git pull origin staging
# Create and checkout new branch
git checkout -b [TICKET_ID]-[kebab-case-summary]Confirm to User: "Created and checked out branch: [BRANCH_NAME]"
Analyze the Jira ticket and create a comprehensive prompt for the /eng:chore command:
Prompt should include:
Example prompt construction:
Summary: [ticket.summary]
Description: [ticket.description]
Acceptance Criteria:
[extracted criteria if present]Run the /eng:chore slash command with the ticket number and constructed prompt:
/eng:chore [TICKET_ID] [CONSTRUCTED_PROMPT]Example:
AGP-782 Migrate existing MCP server implementation to new architecture
Description: We need to refactor the MCP server to use the new modular architecture. This includes updating the tool registry, migrating existing tools, and ensuring backward compatibility.
Acceptance Criteria:
- All existing tools work with new architecture
- Tests pass
- No breaking changes to APIIf ticket not found:
If branch already exists:
If git operations fail:
User: "work on AGP-782"
Claude:
AGP-782-migrate-existing-mcp-server/eng:chore AGP-782 Migrate existing MCP server implementation...User: "work on AICC-456"
Claude:
User: "work on BAD-999"
Claude:
CRITICAL RULE - NESTED CONDITIONALS:
Why this matters:
Instead of:
if (condition1) {
if (condition2) {
// do something
}
}Do this:
if (!condition1) return;
if (!condition2) return;
// do somethingCRITICAL RULE - NO UNNECESSARY INLINE COMMENTS:
Bad comments (obvious, unnecessary):
// Set the user's name
user.name = "Alice";
// Loop through the items
for (const item of items) {
// Process the item
processItem(item);
}
// Return true if valid
return isValid;Good comments (explain WHY, add context):
// Cache user data for 5 minutes to reduce API calls
const cachedUser = await cache.get(userId, { ttl: 300 });
// Process items in batches to avoid memory issues with large datasets
for (const batch of chunkArray(items, 100)) {
await processBatch(batch);
}
// Skip validation for admin users per security requirement SEC-123
if (user.isAdmin) return true;When comments ARE appropriate:
When to use NO comments:
CRITICAL RULE - VITEST TESTING:
When to activate Vitest TDD Expert:
// Before writing Vitest tests, invoke:
Skill({ skill: "vitest-tdd" });The skill is successful when:
/eng:chore command is executed with ticket context~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.