jira-integration

SUSPICIOUS. The core Jira capabilities match the stated purpose and the direct REST path is coherent and points to official Atlassian endpoints. Risk comes from the recommended MCP option: it installs and runs a third-party PyPI package and forwards Jira credentials into it, even though an official Atlassian MCP server exists. This is not confirmed malicious, but it is a meaningful trust and credential-forwarding concern.