qa-shortcut-integration

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates legitimate interaction with the Shortcut project management platform for QA automation.
  • [DATA_EXFILTRATION]: The skill communicates with the official Shortcut API (api.app.shortcut.com). This interaction is required for its primary functionality and targets a well-known service.
  • [INDIRECT_PROMPT_INJECTION]: The skill translates inputs from other QA tools into Shortcut story formats.
  • Ingestion points: Data provided by recommended skills like qa-bug-ticket-creator (SKILL.md).
  • Boundary markers: Not explicitly defined.
  • Capability inventory: Network API requests to api.app.shortcut.com (api-patterns.md).
  • Sanitization: The skill maps data to specific API fields, which limits the scope of processed content to the intended integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 05:39 PM
Security Audit — agent-trust-hub — qa-shortcut-integration