jira
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
jiraCLI tool to perform operations such asjira issue view,jira issue list, andjira issue move. These are standard operations for interacting with Jira and are documented with clear usage patterns. - [EXTERNAL_DOWNLOADS]: The README provides installation instructions for the
jira-clifrom its official GitHub repository (ankitpokhrel/jira-cli). This is a well-known open-source tool for Jira management. - [REMOTE_CODE_EXECUTION]: The skill includes a reference to a bundled script
~/.claude/skills/jira/jira-link-issues. Based on the context, this is a local utility script provided as part of the skill to handle issue linking via direct API calls when MCP limitations exist. It requires standard environment variables (JIRA_BASE_URL,JIRA_USER,JIRA_API_TOKEN) for authentication. - [PROMPT_INJECTION]: No evidence of malicious prompt injection was found. The skill includes instructions to the agent to always fetch current state, show proposed changes, and request user approval before any write operations, which are security best practices.
- [DATA_EXFILTRATION]: No patterns of data exfiltration were detected. All network communication is directed to the user's configured Jira instance via the CLI or Atlassian MCP.
Audit Metadata