jira-cli
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
jira-clibinary directly from its official repository on GitHub (github.com/ankitpokhrel/jira-cli). - [COMMAND_EXECUTION]: Includes instructions for the agent to execute shell commands for tool installation (
tar,mv) and for managing Jira resources via the CLI. - [PRIVILEGE_ESCALATION]: Recommends the use of
sudoto move the installed binary to a restricted system directory (/usr/local/bin/). - [INDIRECT_PROMPT_INJECTION]: The skill provides the agent with capabilities to read and process untrusted data from an external source (Jira tickets and comments) which could contain malicious instructions.
- Ingestion points: Data enters the agent's context through commands like
jira issue list,jira issue view, andjira issue searchas described inSKILL.md. - Boundary markers: None are defined to differentiate between ticket data and instructions.
- Capability inventory: The skill allows the agent to perform write operations including
jira issue create,jira issue edit,jira issue delete, andjira issue worklog addacrossSKILL.md. - Sanitization: There are no instructions provided to sanitize or escape the content retrieved from Jira before processing it.
Audit Metadata