jira-helper
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists exclusively of an instruction file (SKILL.md) and does not contain any scripts, binaries, or automated configuration files that could execute commands on a user's system.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with external data from Jira (e.g., issues, sprints, and JQL queries). This presents a potential surface for indirect prompt injection if a Jira issue contained malicious instructions; however, the skill includes a guideline to 'Always validate inputs before processing' and lacks any executable code that would automate such a risk.
- [EXTERNAL_DOWNLOADS]: The skill references the author's GitHub repository (github.com/inbharatai/claude-skills) for documentation and collection purposes. This is a standard reference to the vendor's own resources and does not involve background downloads or remote code execution.
Audit Metadata