rhdh-jira-update
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Jira issues and GitHub pull requests. Ingestion points: The skill retrieves data from "gh pr view" and "acli jira workitem view" in workflows/update-issue.md. Boundary markers: User confirmation via "/mutation-gate" is required for writes. Capability inventory: The skill can comment on, assign, and transition Jira issues. Sanitization: No automated sanitization is specified for external data.
- [COMMAND_EXECUTION]: The skill interacts with the system using CLI tools. Evidence: Shell commands for "git", "gh", and "acli" are used to query and update information in workflows/update-issue.md and workflows/assign-work.md.
Audit Metadata