rhdh-jira-create
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user conversations and external support cases to populate Jira issue fields.
- Ingestion points: Processes user input in
workflows/create-issue.mdand support case data inreferences/support-intake.md. - Boundary markers: No explicit delimiters are used for untrusted content, but the workflow includes a mandatory user review step in Step 6.
- Capability inventory: The skill can create, update, and link issues in Jira via the
aclitool. - Sanitization: Explicitly mandates the removal of customer-identifying information (names) from public fields in projects like RHDHBUGS and RHDHPLAN.
- [COMMAND_EXECUTION]: The skill uses the Atlassian CLI (
acli) and standard shell utilities for its operations. - Executes
aclicommands to interact with Jira APIs for issue creation, linking, and commenting. - Utilizes
mktempandcatto generate temporary files for user review, ensuring a write-gate is respected before any external state is modified.
Audit Metadata