c-jira
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
jiraCLI tool to perform project management tasks such as listing, viewing, creating, and transitioning Jira issues.- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install thejira-clitool from a public GitHub repository using Homebrew.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from Jira issue fields. * Ingestion points: Issue summaries and descriptions are retrieved usingjira issue listandjira issue view. * Boundary markers: No delimiters are used to separate issue content from agent instructions. * Capability inventory: The agent can modify Jira state viajira issue create,move, andcommentcommands. * Sanitization: The skill does not implement sanitization for data retrieved from the Jira API.
Audit Metadata