jira-status-writeback
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the Host field map (e.g., Root cause, Fix summary) without defined boundaries.
- Ingestion points: External data enters through the Host field map defined in SKILL.md.
- Boundary markers: There are no instructions to use delimiters or ignore embedded instructions within the ingested text.
- Capability inventory: The skill uses jira_transition_issue and jira_add_comment to modify external issue trackers.
- Sanitization: No sanitization or escaping of the field values is performed before interpolation into the jira_add_comment tool.
Audit Metadata