shortcut-ticket — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited shortcut-ticket (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create a shortcut ticket if I dont' give you one ($ARGUMENTS) or else look at the existing one and rewrite it to these specifications, including the title, description, and related stories.
When creating a Shortcut ticket, you must provide a complete specification that enables any team member to understand the problem, its context, and implementation requirements. Follow this structured approach to ensure all critical aspects are covered.
Unless you know a ticket is for the Frontend, always use the Default Workflow, Team Backend for all Shortcut tickets you create.
Purpose: Clearly articulate the problem being solved
Include:
Example format:
## Problem Statement
Currently, [describe current situation]. This causes [specific problems] for [affected users/systems].
We need to [desired outcome] to achieve [business value/user benefit].
Evidence:
- [Metric/feedback point 1]
- [Metric/feedback point 2]
Priority: [High/Medium/Low] because [justification]Purpose: Explain how this fits within the existing product ecosystem
ALWAYS LOOK AT EXISTING CODE TO UNDERSTAND THE CONTEXT OF WHAT WE ARE BEING ASKED TO CREATE OR UPDATE
Include:
Example format:
## Product Context
This feature relates to:
- **Existing Feature A**: [How it connects/modifies/extends]
- **Service B**: [Integration requirements]
- **Database C**: [Data model impacts]
User Journey:
1. User currently does [X]
2. With this change, user will [Y]
3. This improves [Z] in their workflowPurpose: Define what needs to be built
Structure as:
## Functional Requirements
### Must Have (P0)
- [ ] Requirement 1 with clear acceptance criteria
- [ ] Requirement 2 with measurable outcome
### Should Have (P1)
- [ ] Enhancement that improves core functionality
- [ ] Additional feature that adds significant value
### Nice to Have (P2)
- [ ] Polish items
- [ ] Future considerations
## Non-Functional Requirements
- **Performance**: [Specific metrics, e.g., <200ms response time]
- **Scalability**: [Expected load, growth projections]
- **Security**: [Authentication, authorization, data protection needs]
- **Accessibility**: [WCAG compliance level required]
- **Browser/Device Support**: [Specific requirements]Purpose: Ensure security and compliance requirements are met
Address these areas:
- **Type**: [Bug, Feature, Chore, Enhancement, etc.]
- **Responsible Team**: [Team name or squad responsible for implementation]
## SOC-2 Compliance Checklist
### Security
- [ ] Data encryption requirements (at rest/in transit)
- [ ] Authentication/authorization changes needed
- [ ] API security considerations
- [ ] Vulnerability assessment needed?
### Availability
- [ ] SLA impact assessment
- [ ] Redundancy requirements
- [ ] Disaster recovery considerations
### Processing Integrity
- [ ] Data validation rules
- [ ] Error handling requirements
- [ ] Transaction integrity needs
### Confidentiality
- [ ] PII/sensitive data handling
- [ ] Access control requirements
- [ ] Data classification
### Privacy
- [ ] User consent requirements
- [ ] Data retention policies
- [ ] Right to deletion considerationsPurpose: Provide implementation guidance
Include:
Purpose: Define how we'll measure success
## Success Metrics
- **Primary Metric**: [What proves this solved the problem]
- **Secondary Metrics**: [Supporting indicators]
- **Monitoring Requirements**: [Dashboards, alerts needed]
- **A/B Test Plan**: [If applicable]Purpose: Identify potential issues proactively
## Risk Assessment
| Risk | Probability | Impact | Mitigation Strategy |
|------|------------|--------|-------------------|
| [Risk 1] | High/Med/Low | High/Med/Low | [Specific action] |
| [Risk 2] | High/Med/Low | High/Med/Low | [Specific action] |Purpose: Provide clear execution path
## Implementation Phases
### Phase 1: Foundation (Est: X days)
- [ ] Task 1
- [ ] Task 2
### Phase 2: Core Features (Est: Y days)
- [ ] Task 3
- [ ] Task 4
### Phase 3: Polish & Launch (Est: Z days)
- [ ] Testing
- [ ] Documentation
- [ ] Rollout planInclude as relevant:
Before submitting, ensure you've addressed:
# [Feature Name]: [Concise Description]
## Problem Statement
[Clear problem description with evidence]
## Product Context
[How this fits in our product]
## Requirements
### Functional Requirements
[Prioritized list]
### Non-Functional Requirements
[Performance, security, etc.]
## SOC-2 Compliance
[Completed checklist]
## Technical Specification
[Implementation approach]
## Success Metrics
[How we measure success]
## Risks
[Table of risks and mitigations]
## Implementation Plan
[Phased approach]
## Additional Notes
[Any other relevant information]TICKET DESCRIPTIONS ARE LIMITED to 10,000 CHARACTERS
When using the Shortcut MCP integration to create stories, you must:
team parameter often fails. Instead, use the workflow parameter with a valid workflow ID from the organization.mcp__shortcut__list-workflows or mcp__shortcut__list-teams to find valid workflow IDs. Common workflow IDs:500000005 - Default workflow (most common)500002608 - Attribute Mapping workflow500000024 - Product Idea Workflowname (required) - Story titledescription (optional but recommended) - Story detailstype (optional, defaults to "feature") - Can be "feature", "bug", or "chore"epic (optional) - Epic ID number to associate the story withworkflow (required if team fails) - Workflow ID number45538)mcp__shortcut__create-story({
name: "Story title",
description: "Detailed description with acceptance criteria",
type: "chore",
epic: 45538,
workflow: 500000005
})After creating the ticket, fetch it to make sure the changes have been applied.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.