jira-cli

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the jira-cli binary directly from its official repository on GitHub (github.com/ankitpokhrel/jira-cli).
  • [COMMAND_EXECUTION]: Includes instructions for the agent to execute shell commands for tool installation (tar, mv) and for managing Jira resources via the CLI.
  • [PRIVILEGE_ESCALATION]: Recommends the use of sudo to move the installed binary to a restricted system directory (/usr/local/bin/).
  • [INDIRECT_PROMPT_INJECTION]: The skill provides the agent with capabilities to read and process untrusted data from an external source (Jira tickets and comments) which could contain malicious instructions.
  • Ingestion points: Data enters the agent's context through commands like jira issue list, jira issue view, and jira issue search as described in SKILL.md.
  • Boundary markers: None are defined to differentiate between ticket data and instructions.
  • Capability inventory: The skill allows the agent to perform write operations including jira issue create, jira issue edit, jira issue delete, and jira issue worklog add across SKILL.md.
  • Sanitization: There are no instructions provided to sanitize or escape the content retrieved from Jira before processing it.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:35 PM