jira

SUSPICIOUS. The skill’s capabilities align with Jira management and its MCP path is coherent and low concern, but it recommends a third-party CLI that can receive Jira credentials. This is proportionate to the purpose yet introduces meaningful supply-chain and credential-forwarding risk, so it is not malicious but should be treated as medium-risk.