jira-cli
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes CI/CD integration examples in
references/scripting.mdthat download thejira-clibinary from its official GitHub releases page for installation in automated environments. - [COMMAND_EXECUTION]: Multiple bash scripts in
references/scripting.mdandreferences/workflows.mdautomate Jira workflows by executing shell commands that incorporate variables derived from the output of previous tool calls. - [INDIRECT_PROMPT_INJECTION]: Several scripting examples automate actions based on data fetched from external sources (Jira issues and GitHub PRs), creating a surface for indirect prompt injection.
- Ingestion points:
references/scripting.md(lines 80, 196) andreferences/workflows.md(line 142) ingest untrusted data from issue summaries and pull request titles. - Boundary markers: The provided scripts do not utilize delimiters or specific instructions to ignore malicious content embedded within the ingested data.
- Capability inventory: The skill provides capabilities to list, edit, transition, and assign issues using variables populated from the ingested data.
- Sanitization: Data is processed using standard shell utilities like
grepandawkwithout explicit sanitization or validation of the input strings before they are used as command arguments.
Audit Metadata