These skills teach AI agents to work with ShiftCare through the ShiftCare MCP server. Agents act within the signed-in user's existing ShiftCare permissions; see Connecting an AI assistant to your care data for the permission model.
Do not open a public GitHub issue for a security problem.
Email security@shiftcare.com with details and steps to reproduce. We follow responsible disclosure: report privately, we investigate and fix, and credit is given on request once a fix is released.
This policy covers the contents of this repository (skill definitions, docs and scripts). Vulnerabilities in the ShiftCare product or the MCP server itself belong in the same private channel.