sync-jira-story
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill performs Jira synchronization using standard protocols and adheres to security best practices.
- [CREDENTIALS_UNSAFE]: The skill handles Jira and Bitbucket credentials but mitigates exposure risk through a comprehensive redaction system in
defer-mutation.jsthat scrubs secrets from internal logs and action records before they are written to disk. - [DYNAMIC_EXECUTION]: The skill uses a Python-based configuration reader that is hardened against local module shadowing by cleaning
sys.pathbefore importing dependencies, preventing execution of malicious local scripts. - [INDIRECT_PROMPT_INJECTION]: The skill synchronizes content from markdown files to Jira issues.
- Ingestion points: Local markdown files provided via the
--fileargument toscripts/sync-jira-story.js. - Boundary markers: Uses
---delimiters to separate YAML frontmatter from document bodies. - Capability inventory: The skill can create or update Jira issues and update local markdown files.
- Sanitization: Content is converted to structured Atlassian Document Format (ADF) JSON payloads, ensuring safe interpretation by the Jira platform.
Audit Metadata