The Agent Skills Directory

[SAFE]: No security issues were detected. The skill's behavior is consistent with its stated purpose of managing bug reports in developer workflows.
[INDIRECT_PROMPT_INJECTION]: The skill processes bug report markdown files from the repository to extract fields such as status and priority. This is the primary intended purpose of the skill, and data is processed via specific parsing logic to populate Jira issues.
Ingestion points: Reads files from BUG_FILE_PATH.
Boundary markers: Uses specific headers like **Bug ID**: and YAML frontmatter delimiters (---).
Capability inventory: Limited to internal file writes and Jira/Bitbucket API calls.
Sanitization: Extracts specific key-value pairs rather than treating the entire file as an instruction set.
[COMMAND_EXECUTION]: The skill executes local Node.js scripts (sync-jira-bug) and utilizes a Python interpreter for parsing YAML configuration files. These operations are restricted to internal project tools and utilities.
[EXTERNAL_DOWNLOADS]: The skill interacts with the Jira and Bitbucket APIs to synchronize issue state and resolve authentication. These are trusted, well-known services, and the skill follows best practices for secret management by utilizing environment variables and redacting credentials from logs.

ensure-bug-jira-issue