jira-expert

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is well-structured and focuses entirely on its stated purpose of Jira project management. The included Python scripts, jql_query_builder.py and workflow_validator.py, rely solely on the Python standard library for regex-based pattern matching and graph logic, avoiding any risky system calls or network operations.
  • [COMMAND_EXECUTION]: All command examples utilize the mcp jira integration to perform standard project operations (creating issues, searching with JQL, updating statuses). These are expected behaviors for a Jira integration tool.
  • [DATA_EXFILTRATION]: Analysis of the documentation and automation recipes shows no signs of data exfiltration. References to webhooks in automation-examples.md are documented as standard Jira integration features for connecting with services like Slack or GitHub, with no instructions to harvest local credentials or sensitive files.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 08:16 AM
Security Audit — agent-trust-hub — jira-expert