atlassian-rest-ops
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for handling sensitive credentials. It references API tokens by environment variable names and uses a local .env file for resolution as a fallback, while explicitly instructing the agent never to output the secret values in any logs or responses.- [COMMAND_EXECUTION]: The skill executes local shell scripts and a Python script (endpoint.py) using the standard library. These scripts are bundled with the skill and are used for well-defined tasks like resolving API schemas from local assets and performing REST calls via curl.- [DATA_EXFILTRATION]: Network activity is restricted to Atlassian Cloud domains (e.g., atlassian.net) for legitimate API operations as requested by the user, representing normal functionality for an API integration skill.- [PROMPT_INJECTION]: The skill includes instructions to properly encode user-provided data, such as JQL queries or page content, using jq to prevent command injection or malformed requests. This acts as a robust sanitization layer for external data processing.
Audit Metadata