skills/mgiovani/cc-arsenal/jira-cli/Gen Agent Trust Hub

jira-cli

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes CI/CD integration examples in references/scripting.md that download the jira-cli binary from its official GitHub releases page for installation in automated environments.
  • [COMMAND_EXECUTION]: Multiple bash scripts in references/scripting.md and references/workflows.md automate Jira workflows by executing shell commands that incorporate variables derived from the output of previous tool calls.
  • [INDIRECT_PROMPT_INJECTION]: Several scripting examples automate actions based on data fetched from external sources (Jira issues and GitHub PRs), creating a surface for indirect prompt injection.
  • Ingestion points: references/scripting.md (lines 80, 196) and references/workflows.md (line 142) ingest untrusted data from issue summaries and pull request titles.
  • Boundary markers: The provided scripts do not utilize delimiters or specific instructions to ignore malicious content embedded within the ingested data.
  • Capability inventory: The skill provides capabilities to list, edit, transition, and assign issues using variables populated from the ingested data.
  • Sanitization: Data is processed using standard shell utilities like grep and awk without explicit sanitization or validation of the input strings before they are used as command arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 05:09 PM