skills/affaan-m/ecc/jira-integration/Socket

jira-integration

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s Jira capabilities and official REST data flows are coherent with its purpose, but the recommended MCP path relies on a third-party package that receives Jira credentials even though an official Atlassian MCP server exists. This is a moderate supply-chain and credential-forwarding risk rather than confirmed malicious behavior.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 16, 2026, 02:49 PM

Package URL

pkg:socket/skills-sh/affaan-m%2FECC%2Fjira-integration%2F@d8993ae69708d858543414e017237a4c0b1b53dfed7b29fa90814d4d708e2e1b