jira-integration
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides integration instructions for Jira using two primary methods: the Atlassian Model Context Protocol (MCP) server (
mcp-atlassian) and direct Atlassian REST API v3 calls. - Dependency Analysis: The recommended
mcp-atlassianpackage is a standard tool for this purpose. The skill specifies a pinned version (0.21.0) and usesuvxfor execution, which is a standard Python tool runner. - Credential Management: The skill emphasizes security best practices for Atlassian API tokens. It explicitly instructs users to avoid hardcoding secrets, use environment variables (
JIRA_API_TOKEN), and provides specific instructions on how to usecurl -Kto pass credentials via stdin rather than command-line arguments, which prevents secrets from leaking into shell history. - Functionality: The provided shell commands for interacting with Jira (searching, fetching, updating, and transitioning tickets) are standard REST API interactions using
curlandjqfor JSON processing. No suspicious obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were detected.
Audit Metadata