ensure-story-jira-issue
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Node.js script (
sync-jira-story.js) to delegate issue creation and synchronization tasks. This is a documented internal workflow for this sub-routine. - [INDIRECT_PROMPT_INJECTION]: The skill processes markdown files provided via the
STORY_FILE_PATHinput and parses their YAML frontmatter. This constitutes a data ingestion surface, though the logic is strictly scoped to extracting and updating Jira-related metadata. - [DATA_EXPOSURE]: The skill reads and writes to repository markdown files to manage Jira issue keys and URLs. It utilizes standard environment variables for authentication, and includes a redaction utility (
defer-mutation.js) designed to prevent credential leakage in logs or scripts. - [DYNAMIC_EXECUTION]: Utility scripts in the
references/directory execute Python and Bash sub-processes to handle YAML parsing and platform resolution across different environments. This is part of the framework's configuration management system.
Audit Metadata