atlassian
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes
acliandcurlto interact with Jira, allowing the agent to view, search, create, and comment on work items. - [EXTERNAL_DOWNLOADS]: Uses the
uvxtool to dynamically download and execute a conversion script with required Python dependencies, includingrequests,beautifulsoup4, andhtml2text. - [DATA_EXFILTRATION]: Retrieves content from private Atlassian instances and saves the resulting Markdown files to the local
~/Downloadsdirectory, which is the intended functionality for exporting documentation. - [SAFE]: The Python conversion script uses standard Basic Authentication encoding for its API requests and follows established patterns for HTML parsing and file handling. No obfuscation, persistence mechanisms, or unauthorized privilege escalations were found.
Audit Metadata