skills/teamwork-exporter/SKILL.md
Automatically export audit findings, security issues, performance problems, or accessibility violations to Teamwork tasks when other agents complete their analysis. Converts technical findings into actionable project management tasks with appropriate priorities and templates. Invoke when audit agents finish reports, user says "export to Teamwork", or findings need project tracking.
npx skillsauth add kanopi/cms-cultivator teamwork-exporterInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Bridge the gap between technical findings and project execution. Audit reports identify problems; this skill transforms them into tracked, prioritized work items that teams can action.
This skill activates when:
Do NOT activate for:
teamwork-task-creator instead)teamwork-integrator instead)mcp__teamwork__twprojects-update_task directly)Recognize and parse these audit report formats:
Markdown reports:
JSON reports:
Common audit types:
Transformation rules:
Group related findings
Create epic for multiple related issues
Individual tasks for each finding
Set appropriate template
Map audit severity to Teamwork priority (Critical→P0, High→P1, Medium→P2, Low→P3, Info→P4).
For complete mapping tables, see Priority Mapping.
Select appropriate task template based on finding type (security→bug report, performance→little task, etc.).
For complete selection algorithm, see Template Selection.
Complete transformation examples for each audit type are available in the audit-handlers directory:
Security: OWASP/CVE findings → Bug Report tasks with CWE classification Performance: Lighthouse/Core Web Vitals → Little Task for optimizations Accessibility: WCAG violations → Bug Reports (Level A/AA) or Little Tasks Code Quality: Complexity/standards → Little Tasks or Epics for refactors
Three common patterns for organizing multiple findings: Epic with Sub-Tasks (3+ related findings), Priority Buckets (mixed severity), Component-Based (multiple issues in same component).
For complete patterns and structures, see Batch Patterns.
Auto-detect blocking relationships (database changes block features, security fixes block deployment, etc.) and link tasks appropriately.
For dependency detection patterns, see Dependency Management.
The skill receives findings from four audit specialists (security, performance, accessibility, quality) and converts them to appropriate task templates.
For integration details, see Agent Integration.
Uses Teamwork MCP tools loaded via ToolSearch for task creation, project listing, and milestone/epic creation.
For tool reference, see MCP Tools.
1. Receive audit report from specialist agent
└─ Parse format (markdown, JSON, structured data)
2. Analyze findings
└─ Group related issues
└─ Determine priority mapping
└─ Select appropriate templates
3. Decide export strategy
└─ Single task vs. epic with sub-tasks
└─ Identify dependencies
4. Load Teamwork MCP tools via ToolSearch
└─ If epic: create parent first
└─ Create individual tasks
└─ Link dependencies
5. Confirm export
└─ List created tasks with links
└─ Provide summary statistics
└─ Suggest next actions
After export, provide comprehensive summary:
## Export Summary
**Audit Type:** Security Scan
**Findings:** 12 issues
**Tasks Created:** 13 (1 epic + 12 sub-tasks)
### Created Tasks
#### Epic
- [SEC-2024: Security Fixes - XSS Vulnerabilities](https://example.teamwork.com/tasks/100)
- Priority: P1 (High)
- Sub-tasks: 12
#### Critical (P0)
- [SEC-101: SQL Injection in User Search](https://example.teamwork.com/tasks/101)
#### High (P1)
- [SEC-102: XSS in User Profile](https://example.teamwork.com/tasks/102)
- [SEC-103: XSS in Comment Form](https://example.teamwork.com/tasks/103)
- [SEC-104: CSRF Missing on Forms](https://example.teamwork.com/tasks/104)
#### Medium (P2)
- 8 additional tasks (see epic for full list)
### Dependencies Configured
- SEC-102, SEC-103, SEC-104 depend on SEC-101 (fix core sanitization first)
### Recommended Actions
1. Start with SEC-101 (critical SQL injection)
2. Then tackle P1 XSS issues in parallel
3. Schedule P2 fixes for next sprint
### Next Steps
- Assign tasks to team members
- Set sprint milestones
- Update team on security priorities
DO:
DON'T:
Fallback strategies for MCP server unavailability (provide formatted markdown for manual entry) and ambiguous findings (request clarification).
For detailed error handling patterns, see Error Handling.
Complete reference materials available in the templates directory:
Use these references to understand transformation patterns and implementation details.
tools
Strategist-focused site audit for discovery and pre-discovery. Given a site URL and optional qualitative research data, navigates the site via CoWork, audits against all 21 UX Laws from lawsofux.com, reviews content hierarchy, synthesises qualitative data, runs Lighthouse, and produces two deliverables — a Project Knowledge Summary (Markdown for Claude Desktop Projects) and a polished, iterable HTML Artifact for client sharing. Use when a strategist, UX lead, or PM asks for a discovery audit, UX laws audit, content hierarchy review, pre-discovery site review, "audit this site for strategy", "strategist audit", "UX audit", or pastes a site URL with discovery context. Not for developer audits — use accessibility-audit, performance-audit, or live-site-audit for those.
development
Provide story point estimation guidance with hour calculations for software development tasks. Uses Fibonacci sequence (1, 2, 3, 5, 8, 13, 21, 34+) and converts story points to hours. Includes platform-specific adjustments and velocity calculations.
tools
Perform a full QA review of a Teamwork task by reading the task and all its comments for context, extracting the multi-dev URL, generating dynamic validation steps tailored to the task type, and using CoWork browser automation to execute those steps on the multi-dev environment. Produces a structured validation report with pass/fail per step, screenshots, internal notes, and a client-facing summary — all shown in chat. Use this skill whenever the user asks to QA, test, validate, or review a Teamwork task or multi-dev environment — even if they just say "can you QA this?" or paste a Teamwork link. Also triggers for phrases like "run QA on", "check the multi-dev", "validate this task", "test the dev link", or "review the ticket". Works across Drupal/CMS updates, WordPress/plugin updates, bug fixes, new feature development, and general web development tasks.
tools
Generate a client-facing project heartbeat / status update message for a Kanopi project, ready to be posted as a Teamwork message. Use this skill whenever the user asks to write, draft, generate, or send a project update, heartbeat, status update, or progress report to a client. Also triggers when the user says things like "time for a project update", "draft the heartbeat", "write up the update for [project]", or "it's been two weeks, let's send an update". Always use this skill — even if the user doesn't say "heartbeat" — whenever the intent is to summarise recent project activity for a client audience.