project-management-jira-workflow-steward
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and templates for professional software development workflows, focusing on traceability and auditability.
- [COMMAND_EXECUTION]: The skill includes a bash script intended as a Git hook for validating commit messages and branch names. This script is benign, performing only standard shell environment checks and regular expression matching to enforce naming conventions.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Explicit safety instructions are provided to ensure that no credentials, secrets, or sensitive customer data are included in branch names, commit messages, or pull request metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data such as Jira ticket IDs and branch descriptions. It mitigates injection risks by defining strict output templates and instructing the agent to sanitize all output by checking for sensitive information before generation.
- [EXTERNAL_DOWNLOADS]: References external resources for Gitmoji standards (gitmoji.dev and carloscuesta/gitmoji). These are well-known community resources and do not involve executable code downloads or runtime dependency fetching.
Audit Metadata