jira-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's primary function is to organize project management data. It does not perform unauthorized network operations, execute arbitrary code, or handle sensitive credentials.- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from PRD files and impact-analysis reports. While this creates a surface for indirect prompt injection if the source documents are untrusted, the risk is mitigated by the intended use case and the requirement for human verification.
- Ingestion points: Reads local Markdown files from docs/prd/ and impact-analysis reports.
- Boundary markers: None explicitly mentioned for the input files.
- Capability inventory: Creates epics/tickets via Jira MCP; writes .md and .csv files to the local filesystem.
- Sanitization: No specific input sanitization is implemented, relying instead on manual review.
Audit Metadata