044-planning-jira
Warn
Audited by Socket on Apr 27, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's Jira-focused capabilities are broadly aligned with its purpose, but its trust model is incomplete because it depends on an unspecified `jira` binary while official Atlassian guidance points to `acli`. Credential handling and data flows are mostly proportionate, yet forwarding Jira tokens to an ambiguously sourced CLI and processing untrusted Jira content raise medium risk.
Confidence: 84%Severity: 64%
Audit Metadata