jira-helper

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [NO_CODE]: The skill consists exclusively of an instruction file (SKILL.md) and does not contain any scripts, binaries, or automated configuration files that could execute commands on a user's system.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with external data from Jira (e.g., issues, sprints, and JQL queries). This presents a potential surface for indirect prompt injection if a Jira issue contained malicious instructions; however, the skill includes a guideline to 'Always validate inputs before processing' and lacks any executable code that would automate such a risk.
  • [EXTERNAL_DOWNLOADS]: The skill references the author's GitHub repository (github.com/inbharatai/claude-skills) for documentation and collection purposes. This is a standard reference to the vendor's own resources and does not involve background downloads or remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 10:37 PM