skills/daxaur/openpaw/c-jira/Gen Agent Trust Hub

c-jira

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the jira CLI tool to perform project management tasks such as listing, viewing, creating, and transitioning Jira issues.- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the jira-cli tool from a public GitHub repository using Homebrew.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from Jira issue fields. * Ingestion points: Issue summaries and descriptions are retrieved using jira issue list and jira issue view. * Boundary markers: No delimiters are used to separate issue content from agent instructions. * Capability inventory: The agent can modify Jira state via jira issue create, move, and comment commands. * Sanitization: The skill does not implement sanitization for data retrieved from the Jira API.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 08:44 AM
Security Audit — agent-trust-hub — c-jira