atlassianapi

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference guide for Atlassian REST API integrations, providing boilerplate Python code for common tasks like issue management and page creation.
  • [CREDENTIALS_SAFE]: Authentication examples use generic placeholders such as 'API_TOKEN' and 'email@example.com', adhering to best practices for secret management in templates.
  • [PROMPT_INJECTION]: The automation recipes (e.g., syncing GitHub PRs to Jira) process external data like branch names and PR titles. While this represents a surface for indirect prompt injection, the risk is inherent to the functional purpose of the skill and no malicious instructions are present.
  • Ingestion points: External data enters through pr_data and Jira issue objects fetched via API.
  • Boundary markers: None present in the code snippets.
  • Capability inventory: The skill uses network operations via the requests library and the atlassian-python-api package.
  • Sanitization: Standard Python string formatting is used without explicit sanitization of external content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 05:44 AM
Security Audit — agent-trust-hub — atlassianapi