jira
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to fetch CLI tools: acli from Atlassian's GitHub repository and mdadf from the skill author's GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill processes Jira work item data which could contain malicious instructions. (1) Ingestion points: Data is ingested via acli jira workitem view and search commands in SKILL.md and references/commands.md. (2) Boundary markers: No explicit delimiters for ticket content are defined. (3) Capability inventory: The agent can create, edit, transition, and comment on work items using the acli tool. (4) Sanitization: No specific sanitization of Jira content is described prior to processing.
Audit Metadata