jira-fix-queue
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input (Jira IDs/URLs) which serves as an ingestion point for data into the agent's context.
- Ingestion points: User input triggers parsed in the 'Duties' section of SKILL.md.
- Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the parsing logic.
- Capability inventory: Functionality is limited to parsing identifiers and enqueuing them into the 'goal-driven-queue' component using the 'jira-fix-workflow' engine.
- Sanitization: No explicit sanitization or validation of the Jira identifier strings is documented beyond basic splitting.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the installation of missing dependencies using
npx skills addtargeting the developer's official repository ('FuDesign2008/open-skills'). This is a documented method for managing skills in this ecosystem and refers to vendor-owned resources.
Audit Metadata