jira-fix-queue

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input (Jira IDs/URLs) which serves as an ingestion point for data into the agent's context.
  • Ingestion points: User input triggers parsed in the 'Duties' section of SKILL.md.
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the parsing logic.
  • Capability inventory: Functionality is limited to parsing identifiers and enqueuing them into the 'goal-driven-queue' component using the 'jira-fix-workflow' engine.
  • Sanitization: No explicit sanitization or validation of the Jira identifier strings is documented beyond basic splitting.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for the installation of missing dependencies using npx skills add targeting the developer's official repository ('FuDesign2008/open-skills'). This is a documented method for managing skills in this ecosystem and refers to vendor-owned resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 10:18 AM
Security Audit — agent-trust-hub — jira-fix-queue