jira-axi
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx -y jira-axi@latest, which downloads and executes the package from the official NPM registry. This is a standard practice for Node.js-based tools. - [COMMAND_EXECUTION]: The skill shells out to the
jira-axiCLI tool and assumes the presence of the Atlassianacli(installed viabrew install acli). These are legitimate development tools and the execution is restricted to the skill's documented purpose. - [CREDENTIALS_UNSAFE]: The skill explicitly avoids handling credentials directly, delegating authentication to the Atlassian
aclilogin flow (acli jira auth login). This is a secure pattern as it leverages existing, official authentication mechanisms rather than storing secrets within the skill environment.
Audit Metadata