jira-epic-creator

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The main script jira-create-epic.js executes git rev-parse --show-toplevel to reliably identify the repository root for configuration discovery. This is a standard and benign system call.\n- [INDIRECT_PROMPT_INJECTION]: The skill extracts text from markdown files to populate Jira issues. While this constitutes an input surface for external content, the risk is minimal given the local nature of the source files and the skill's specific purpose.\n- [SAFE]: The skill incorporates advanced credential safety measures. It uses a bundled defer-mutation.js library to perform automated redaction of secrets (like Jira API tokens) from all activity journals and logs, ensuring no sensitive data is leaked through internal monitoring or state tracking.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 03:29 PM