jira-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from JIRA issues, which could potentially contain malicious instructions intended to manipulate the agent.
- Ingestion points: The
mcp_jira_getJiraIssuetool is used inSKILL.mdto retrieve issue details. - Boundary markers: The instructions do not specify any delimiters or directives for the agent to ignore instructions embedded within the JIRA content.
- Capability inventory: The skill possesses the capability to modify the JIRA environment using tools such as
mcp_jira_transitionJiraIssue,mcp_jira_editJiraIssue, andmcp_jira_addCommentToJiraIssue. - Sanitization: No sanitization or validation procedures for the ingested JIRA data are defined.
- [COMMAND_EXECUTION]: The skill directs the agent to execute a local command to verify the staleness of the policy file.
- Evidence: The skill instructs the agent to run
git log -1 --format="%ai" -- <path-to-this-SKILL.md>upon loading.
Audit Metadata