shortcut
Facilitates task management on Shortcut.com by enabling users to create, update, and list project stories efficiently.
Install this skill
or
79/100
Security score
The shortcut skill was audited on Feb 14, 2026 and we found 5 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 15
Access to hidden dotfiles in home directory
SourceSKILL.md
| 15 | - File: `~/.config/shortcut/api-token` |
medium line 23
Access to hidden dotfiles in home directory
SourceSKILL.md
| 23 | - In a file: `echo "your-token" > ~/.config/shortcut/api-token && chmod 600 ~/.config/shortcut/api-token` |
medium line 24
Access to hidden dotfiles in home directory
SourceSKILL.md
| 24 | 3. Optionally add to `~/.bashrc` for persistence: |
low line 26
Access to hidden dotfiles in home directory
SourceSKILL.md
| 26 | export SHORTCUT_API_TOKEN=$(cat ~/.config/shortcut/api-token 2>/dev/null | tr -d '\n') |
medium line 129
Access to hidden dotfiles in home directory
SourceSKILL.md
| 129 | - Scripts use `SHORTCUT_API_TOKEN` environment variable or fall back to `~/.config/shortcut/api-token` |
Scanned on Feb 14, 2026
View Security DashboardInstall this skill with one command
/learn @ypyt1/shortcut