jira-shadow-refinement

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs fetching a Jira ticket at runtime via Atlassian MCP (e.g., Atlassian API such as https://api.atlassian.com), which would inject remote ticket content into the agent's context and directly control its prompts.