krt-jira-scribe
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or scripts.
- [CREDENTIALS_UNSAFE]: The skill uses environment variables for sensitive authentication data and includes specific instructions to the agent to never print or expose the
JIRA_API_TOKENin any output. - [COMMAND_EXECUTION]: The skill uses
curlto communicate with Jira APIs. All write operations (creating issues, subtasks, or adding links) and status transitions are gated by mandatory user confirmation steps to prevent unintended actions. - [DATA_EXFILTRATION]: Data movement is confined to the user-provided Jira instance. The skill does not perform any unauthorized data transfers or exfiltration to third-party domains.
Audit Metadata