pm-skills
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill collection is well-documented and follows industry best practices for project management and Atlassian administration. No malicious code or techniques were identified across all 54 files.
- [COMMAND_EXECUTION]: The provided Python scripts (e.g.,
velocity_analyzer.py,project_health_dashboard.py) strictly use standard libraries likestatistics,json, andargparsefor data processing. They do not execute arbitrary shell commands or access sensitive system resources. - [DATA_EXFILTRATION]: No network operations or unauthorized data transfer patterns were detected. The scripts operate on local JSON files provided by the user.
- [PROMPT_INJECTION]: The instructions in the
SKILL.mdfiles are focused on task execution and methodology. There are no attempts to override agent safety filters or system prompts. - [CREDENTIALS_SAFE]: The documentation and code do not contain hardcoded API keys or secrets. Instructions for
atlassian-adminexplicitly recommend using secure secret management and OAuth for integrations. - [OBFUSCATION]: Content is transparent and uses standard formatting. No hidden text, Base64-encoded commands, or homoglyph attacks were found.
Audit Metadata