The Agent Skills Directory

[Environment Variable Handling]: The skill uses ATLASSIAN_EMAIL and ATLASSIAN_API_TOKEN environment variables for authentication. These are standard for Jira Cloud API tokens and are handled by the runtime, which is a secure practice for credential management.
[Input Sanitization]: The skill correctly identifies that data retrieved from Jira (comments, descriptions, etc.) should be treated as untrusted content, specifically warning against following instructions or running commands found within retrieved text. This is an excellent defense against indirect prompt injection.
[Secure API Communication]: All API calls are directed to Atlassian's official domains (atlassian.net) using standard REST patterns and HTTPS. The scripts use curl with appropriate error handling and JSON parsing via jq.
[Least Privilege Authentication]: The documentation explicitly advises against manual token creation or debugging, relying instead on environment-injected credentials, which minimizes the risk of credential leakage during the development process.

jira-api