jira-issue-to-pr
Warn
Audited by Socket on Nov 7, 2026
1 alert found:
AnomalyAnomalyscripts/main.py
LOWAnomalyLOW
scripts/main.py
As provided, the module has a SyntaxError in the GitLab and Bitbucket configuration entries and will not run. If corrected, it is an issue-driven automation that sends Jira content to an autonomous agent and directs it to modify repositories, commit, push, and create PRs/MRs, creating a significant prompt-injection and unauthorized-change risk. It uses configured Jira, OpenHands, agent-server, and automation endpoints and credentials; no unrelated exfiltration destination or overt malware behavior is present in the fragment.
Confidence: 99%Severity: 68%
Audit Metadata