jira-epic
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied feature descriptions, titles, and Figma links to generate structured Jira epics and child tasks.
- Ingestion points: The skill is triggered by user requests to create epics or large features, ingesting arbitrary user text into the
Epic TemplateandSuggested Taskssections. - Boundary markers: The skill uses simple curly brace placeholders (e.g.,
{Epic Title},{overview}) but lacks explicit boundary markers or instructions to the model to ignore potential injection attempts within the user-provided content. - Capability inventory: The skill utilizes
mcp-atlassian__jira_create_issue,mcp-atlassian__jira_update_issue, andmcp-atlassian__jira_transition_issueto write data to an external Jira instance. - Sanitization: No sanitization or validation of the user input is described; the instructions focus on formatting transitions between Markdown and Jira Wiki markup.
Audit Metadata