rhdh-jira-authoring

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides the agent with specific shell commands for environment analysis and information retrieval. This includes using git diff to identify modified files for component inference and acli jira workitem search to check for duplicate issues. These commands are read-only and standard for the intended software development workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided issue summaries to extract keywords for JQL search queries. While this represents a data ingestion surface, the skill is explicitly restricted to read-only search operations and lacks the capability to perform state-changing actions or send data to unauthorized external domains, minimizing the risk of exploitation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 09:14 AM