jira
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegitcommands for branch management. It mitigates command injection risks by implementing a strict slug generation policy inreferences/branch-policy.mdthat strips all non-alphanumeric characters from Jira issue summaries before they are interpolated into shell commands. - [PROMPT_INJECTION]: The skill processes untrusted data from Jira issue summaries and descriptions, creating a surface for indirect prompt injection.
- Ingestion points: Data enters the agent context via the
getJiraIssueandgetJiraProjectIssueTypesMetadatatools inSKILL.md. - Boundary markers: The skill does not use specific delimiters but utilizes a 'Plan vs Execute' pattern that requires user oversight before state-changing actions are taken.
- Capability inventory: The skill uses Atlassian MCP tools for Jira operations and
Bashfor git operations. - Sanitization: Input used for branch names is sanitized via regex (
/[^a-z0-9\s-]/g) as described inreferences/branch-policy.md. - [SAFE]: The skill relies on official Atlassian MCP tools for Jira interactions, ensuring that authentication and data access are handled through standard, authorized integration channels.
Audit Metadata