skills/thelobbi/claude/atlassianapi/Gen Agent Trust Hub

atlassianapi

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill implements functions like sync_pr_to_jira that process external metadata (pr_data) and interpolate it into Jira API calls (comments).
  • Ingestion points: sync_pr_to_jira(pr_data: dict) in SKILL.md and generate_release_notes(version: str) in SKILL.md.
  • Boundary markers: Absent. No delimiters or warnings are used when inserting external content into API payloads.
  • Capability inventory: Network interaction via jira.add_comment and confluence.create_page in SKILL.md.
  • Sanitization: Absent. Content from GitHub PRs and version strings are used directly in string interpolation for API requests.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to Atlassian's official REST API domain (atlassian.net) and references the well-known atlassian-python-api library.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 10:14 AM
Security Audit — agent-trust-hub — atlassianapi