jira-integration

Warn

Audited by Socket on Sep 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The direct REST usage is coherent and low-risk, but the recommended path forwards Jira credentials to a non-Atlassian third-party MCP package. That is proportionate to the skill’s purpose yet creates medium supply-chain and credential-forwarding risk without evidence of outright malicious behavior.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Sep 12, 2026, 03:41 PM
Package URL
pkg:socket/skills-sh/eugene-ee%2Faffaan-m-ecc%2Fjira-integration%2F@d8993ae69708d858543414e017237a4c0b1b53dfed7b29fa90814d4d708e2e1b
Security Audit — socket — jira-integration