jira-automation
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes Jira issue data, which can contain instructions from untrusted sources.
- Ingestion points: Content is ingested via tools such as
JIRA_GET_ISSUE,JIRA_SEARCH_FOR_ISSUES_USING_JQL_POST, andJIRA_LIST_ISSUE_COMMENTSin SKILL.md. - Boundary markers: The skill advises manual verification of targets and payloads but does not employ structured delimiters or safety prompts for the ingested content.
- Capability inventory: The skill possesses extensive write permissions, including
JIRA_CREATE_ISSUE,JIRA_EDIT_ISSUE,JIRA_ADD_COMMENT, andJIRA_ADD_USERS_TO_PROJECT_ROLE. - Sanitization: No specific filtering or sanitization of external Jira data is mentioned before processing.
- [EXTERNAL_DOWNLOADS]: The skill configuration requires connecting to an external tool provider.
- The setup instructions specify adding
https://rube.app/mcpas a server, which relies on an external domain to provide tool definitions and execution capabilities.
Audit Metadata