jira-issue-to-pr

Warn

Audited by Socket on Nov 7, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/main.py

As provided, the module has a SyntaxError in the GitLab and Bitbucket configuration entries and will not run. If corrected, it is an issue-driven automation that sends Jira content to an autonomous agent and directs it to modify repositories, commit, push, and create PRs/MRs, creating a significant prompt-injection and unauthorized-change risk. It uses configured Jira, OpenHands, agent-server, and automation endpoints and credentials; no unrelated exfiltration destination or overt malware behavior is present in the fragment.

Confidence: 99%Severity: 68%
Audit Metadata
Analyzed At
Nov 7, 2026, 11:28 AM
Package URL
pkg:socket/skills-sh/openhands%2Fextensions%2Fjira-issue-to-pr%2F@7700e7882f5fd412e433269db68a16a461120a866b5d3f3fe3163360ba4893c7