skills/affaan-m/ecc/jira-integration/Gen Agent Trust Hub

jira-integration

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides integration instructions for Jira using two primary methods: the Atlassian Model Context Protocol (MCP) server (mcp-atlassian) and direct Atlassian REST API v3 calls.
  • Dependency Analysis: The recommended mcp-atlassian package is a standard tool for this purpose. The skill specifies a pinned version (0.21.0) and uses uvx for execution, which is a standard Python tool runner.
  • Credential Management: The skill emphasizes security best practices for Atlassian API tokens. It explicitly instructs users to avoid hardcoding secrets, use environment variables (JIRA_API_TOKEN), and provides specific instructions on how to use curl -K to pass credentials via stdin rather than command-line arguments, which prevents secrets from leaking into shell history.
  • Functionality: The provided shell commands for interacting with Jira (searching, fetching, updating, and transitioning tickets) are standard REST API interactions using curl and jq for JSON processing. No suspicious obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 03:14 AM
Security Audit — agent-trust-hub — jira-integration