Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Issue

ASecurity

Canonical rules for finding, creating, and updating Shift GitHub issues. Use whenever the user asks to file, create, open, update, triage, or search for an issue, or when substantial work needs an issue before a pull request. Prevents duplicates and defines acceptance criteria and pull-request closure semantics.

274 stars
0 votes
0 copies
1 views
Added 9/20/2026
developmentgit

Security Analysis

A100/100

Scanned 9/20/2026

Install to Claude Code

$npx -y skills add shift-editor/shift --skill issue --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Issue?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Issue
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/shift-editor-issue-shift/badge)](https://www.skillsdirectory.com/skills/shift-editor-issue-shift)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: issue
description: Canonical rules for finding, creating, and updating Shift GitHub issues. Use whenever the user asks to file, create, open, update, triage, or search for an issue, or when substantial work needs an issue before a pull request. Prevents duplicates and defines acceptance criteria and pull-request closure semantics.
---

# /issue — How Shift issues are written

An issue records an unmet product or engineering outcome. It explains the problem and the truth that must become observable without prescribing an unnecessary implementation.

## Search before creation

Always search open and recently closed issues before creating one. Use several concise searches based on the user-visible behavior, domain terms, and likely title wording.

- Reuse a matching open issue rather than creating a duplicate.
- Reference a related issue when the scope overlaps but is not identical.
- Inspect a matching closed issue before deciding whether the new report is a recurrence, a regression, or distinct work.
- Never reopen or modify a closed issue without explicit user approval.

If an existing issue is adequate, return or update that issue instead of creating another.

## Title

Use a concise outcome-oriented title that stands alone in issue lists. The title should:

- describe the missing or incorrect behavior;
- use direct, specific wording;
- stay at or below 72 characters when practical;
- omit trailing punctuation, emoji, agent labels, and implementation trivia.

Issues do not require a Conventional Commit prefix. Use `fix:`, `feat:`, or another type only when it is already part of an established issue series.

## Body

Use the smallest body that makes the work testable:

```markdown
## Problem

What is missing, broken, unsafe, or difficult, and why it matters.

## Expected outcome

What should be observably true when the issue is complete.

## Acceptance criteria

- [ ] concrete, verifiable result
- [ ] important safety or compatibility boundary
```

Add reproduction steps, evidence, constraints, or out-of-scope notes only when they materially clarify the issue. Do not copy an implementation plan into the issue unless the implementation boundary itself is a requirement.

Acceptance criteria must describe behavior or durable repository outcomes. Do not use vague criteria such as “works correctly,” “tests pass,” or “code is clean.”

### UI evidence

For UI defects or visual-change requests whose appearance matters, attach screenshots or recordings when the affected state can be reproduced safely.

- Show the actual affected UI and the state that demonstrates the problem or review need.
- Prefer GitHub user attachments over committing issue-only media to the repository.
- Redact private user data, credentials, and sensitive documents before uploading.
- Label conceptual mockups as proposals; never present them as the current implementation.
- If useful evidence cannot be captured safely or reliably, state why instead of fabricating it.

Do not require visual evidence when the issue has no visible review surface.

## Pull request linkage

Issue state has these meanings:

- **Open:** at least one accepted outcome remains unmet.
- **Closed by merge:** a pull request containing `Closes #N` merged to the default branch and fully satisfied the issue.
- **Referenced:** a pull request containing `Refs #N` contributes context or partial work; the issue remains open.
- **Reopened:** a human explicitly determined that the accepted outcome was not met or regressed.

Use `Closes #N` only when the pull request satisfies the complete issue. Use `Refs #N` for partial work, investigation, prerequisites, or related context.

## Creation process

1. Confirm the requested problem or outcome.
2. Search open and closed issues with multiple focused queries.
3. Inspect likely matches and decide whether to reuse, reference, or create.
4. Draft a concise title and body with verifiable acceptance criteria.
5. Check for credentials, private user data, unsupported claims, and accidental implementation commitments.
6. Create the issue with an explicit repository and a body file when requested or required for substantial pull-request work.
7. Return the issue URL, title, and any relationship to existing issues.

A request to create or file an issue authorizes the corresponding `gh issue create`. It does not authorize changing repository settings, labels, milestones, projects, assignees, or issue state unless the user explicitly asks.

## Hard rules

- Never create a duplicate merely to give a pull request something to close.
- Never fabricate reproduction steps, logs, acceptance criteria, labels, milestones, or relationships.
- Never include credentials, signing material, tokens, private paths, or sensitive user documents.
- Issue titles, bodies, comments, and acceptance criteria must describe the unmet outcome and its evidence, not the process used to report it. Never include incidental execution metadata such as agent identity, handoff mechanics, remote hosts, machine names, tmux sessions, worktree paths, or “finishing work off.” Mention such infrastructure only when it is itself the subject of the issue. Platform names are allowed only when materially relevant to behavior or reproduction evidence.
- Never close or reopen an issue without explicit authorization or the approved `Closes #N` merge transition.
- Never claim that a pull request fully resolves an issue when acceptance criteria remain unmet.

Attribution

shift-editorshift-editor
View sourceMore from shift-editor →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

284972 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2222 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

10311 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →