jira-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external documentation and MCP server endpoints from Composio (
composio.dev) and Rube (rube.app). These are recognized services within the agent development ecosystem for providing tool connectivity. - [COMMAND_EXECUTION]: The skill utilizes standardized Jira API operations (create, edit, delete, assign) through a managed MCP interface. All operations are scoped to the authenticated Jira project environment.
- [DATA_EXFILTRATION]: While the skill can read Jira issue data and user lists, it does so through official API tools. There are no patterns suggesting data is being sent to unauthorized third-party domains.
- [INDIRECT_PROMPT_INJECTION]: The skill is a surface for indirect prompt injection as it processes data from external Jira issues which could contain malicious instructions.
- Ingestion points: Data enters the context via
JIRA_GET_ISSUE,JIRA_SEARCH_FOR_ISSUES_USING_JQL_POST, andJIRA_LIST_ISSUE_COMMENTS. - Boundary markers: None present; the skill does not explicitly instruct the agent to ignore instructions found within Jira fields.
- Capability inventory: The skill can modify Jira state via
JIRA_EDIT_ISSUE,JIRA_CREATE_ISSUE, and manage project access viaJIRA_ADD_USERS_TO_PROJECT_ROLE. - Sanitization: None present; the skill relies on the agent's internal safety filters.
Audit Metadata