skills/avantmedialtd/skills/jira/Socket

jira

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The Jira functionality and requested credentials are broadly aligned with the stated purpose, and the documented endpoint pattern is consistent with Atlassian. However, the core dependency is an unverified `af` CLI with no installation provenance in the skill, so users are asked to trust an opaque executable with Jira credentials and file uploads.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Apr 27, 2026, 03:24 PM

Package URL

pkg:socket/skills-sh/avantmedialtd%2Fskills%2Fjira%2F@5559f859aecb82ab7ada92ccde60d309c8556bd1