sync-jira-epic
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a sophisticated access control mechanism through
resolve-platform.sh, which respects anACCESS_TRACKERsetting. This allows the environment to be restricted to 'read-only' or 'manual' modes, effectively gating any writes to external trackers. - [SAFE]: It contains specialized logic in
defer-mutation.jsto detect and redact sensitive environment variables and credentials (such as API tokens and passwords) before they are written to any local logs or journals. - [SAFE]: Subprocess execution is handled securely; for example, the Python-based configuration reader in
read-config.shexplicitly isolates itssys.pathto prevent local module hijacking, and the main script uses structured ADF (Atlassian Document Format) rendering to prevent raw content from being misinterpreted as commands by the Jira API. - [SAFE]: Network activity is restricted to well-known, legitimate services (Atlassian Jira and Bitbucket) required for the skill's stated purpose.
Audit Metadata