jira-epic-creator
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The main script
jira-create-epic.jsexecutesgit rev-parse --show-toplevelto reliably identify the repository root for configuration discovery. This is a standard and benign system call.\n- [INDIRECT_PROMPT_INJECTION]: The skill extracts text from markdown files to populate Jira issues. While this constitutes an input surface for external content, the risk is minimal given the local nature of the source files and the skill's specific purpose.\n- [SAFE]: The skill incorporates advanced credential safety measures. It uses a bundleddefer-mutation.jslibrary to perform automated redaction of secrets (like Jira API tokens) from all activity journals and logs, ensuring no sensitive data is leaked through internal monitoring or state tracking.
Audit Metadata