jira-automation

SUSPICIOUS: The skill’s Jira capabilities mostly match its stated purpose, but trust and data-flow boundaries are broader than the description implies. It routes Jira access through a third-party Composio/Rube MCP layer, uses managed OAuth/token storage, and references a discontinued/stale Rube setup path. This is not confirmed malware, but it is a medium-risk remote integration with real-world write actions and outdated setup guidance.