twg-jira
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to interact with Jira by executing the
twgCLI tool. It provides specific instructions for executing the binary from standard local paths such as$HOME/.local/bin/twgon macOS/Linux and$env:LOCALAPPDATA\Programs\twg\bin\twg.exeon Windows. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Jira (issue summaries and descriptions) which could contain adversarial instructions aimed at manipulating the agent's behavior.
- Ingestion points: Untrusted content is ingested via
twg jira workitem getinreferences/workitems.mdand semantic search results fromjira workitem similarinreferences/duplicates.md. - Boundary markers: The skill recommends using field projection (e.g.,
--agent-fields) inreferences/duplicates.mdto restrict the metadata visible to the model, which provides a limited logical boundary. - Capability inventory: The skill possesses significant capabilities including the ability to create, update, transition, and delete workitems across Jira projects.
- Sanitization: There are no explicit instructions to sanitize or filter potential prompt injection patterns within the retrieved Jira content.
Audit Metadata