jira-automation

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references external documentation and MCP server endpoints from Composio (composio.dev) and Rube (rube.app). These are recognized services within the agent development ecosystem for providing tool connectivity.
  • [COMMAND_EXECUTION]: The skill utilizes standardized Jira API operations (create, edit, delete, assign) through a managed MCP interface. All operations are scoped to the authenticated Jira project environment.
  • [DATA_EXFILTRATION]: While the skill can read Jira issue data and user lists, it does so through official API tools. There are no patterns suggesting data is being sent to unauthorized third-party domains.
  • [INDIRECT_PROMPT_INJECTION]: The skill is a surface for indirect prompt injection as it processes data from external Jira issues which could contain malicious instructions.
  • Ingestion points: Data enters the context via JIRA_GET_ISSUE, JIRA_SEARCH_FOR_ISSUES_USING_JQL_POST, and JIRA_LIST_ISSUE_COMMENTS.
  • Boundary markers: None present; the skill does not explicitly instruct the agent to ignore instructions found within Jira fields.
  • Capability inventory: The skill can modify Jira state via JIRA_EDIT_ISSUE, JIRA_CREATE_ISSUE, and manage project access via JIRA_ADD_USERS_TO_PROJECT_ROLE.
  • Sanitization: None present; the skill relies on the agent's internal safety filters.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 04:24 PM
Security Audit — agent-trust-hub — jira-automation