atlassianapi
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill implements functions like
sync_pr_to_jirathat process external metadata (pr_data) and interpolate it into Jira API calls (comments). - Ingestion points:
sync_pr_to_jira(pr_data: dict)in SKILL.md andgenerate_release_notes(version: str)in SKILL.md. - Boundary markers: Absent. No delimiters or warnings are used when inserting external content into API payloads.
- Capability inventory: Network interaction via
jira.add_commentandconfluence.create_pagein SKILL.md. - Sanitization: Absent. Content from GitHub PRs and version strings are used directly in string interpolation for API requests.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to Atlassian's official REST API domain (
atlassian.net) and references the well-knownatlassian-python-apilibrary.
Audit Metadata