Jira Automation

SUSPICIOUS. The skill’s stated capabilities fit Jira automation, and no overt malware patterns, hidden commands, or hostile instructions appear in the content. The main risk is trust and data-flow integrity: all meaningful actions depend on an unspecified MCP service, project-mcp, whose ownership, install source, and relationship to Atlassian are not verifiable from the supplied evidence. That makes the skill internally coherent in purpose but high-risk in execution trust.