atlassian-admin
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates workflows that ingest content from external sources which could contain malicious instructions.
- Ingestion points: In SKILL.md, the 'User Deprovisioning' workflow (lines 35-40) instructs the agent to audit user content by fetching Jira issues and Confluence pages via REST API calls.
- Boundary markers: The instructions do not define delimiters or specific safety prompts to prevent the agent from following instructions found within the audited content.
- Capability inventory: The skill performs sensitive operations including user account deactivation (DELETE /rest/api/3/user), group creation, and permission modifications.
- Sanitization: There is no evidence of sanitization or filtering of the retrieved data before it is processed by the agent's logic.
Audit Metadata