acli
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official acli binary from Atlassian's servers (acli.atlassian.com). As Atlassian is a well-known service provider, this download is part of the legitimate tool installation process.
- [COMMAND_EXECUTION]: The skill uses the acli binary and local Bun scripts (md-to-adf.ts and jira-attach-media.ts) to interact with Atlassian services and process file content. These tools are necessary for the skill's primary functions.
- [PRIVILEGE_ESCALATION]: Documentation includes standard installation commands using sudo and chmod +x to set up the acli binary. These are provided as reference for the user or agent to establish the execution environment.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external content from Jira issues and Confluence pages, creating a surface for indirect prompt injection.
- Ingestion points: Data is read from Jira and Confluence using acli jira workitem view and acli confluence page view (as documented in references/workitem.md and references/confluence.md).
- Boundary markers: The instructions recommend using structured JSON output and jq for parsing, which helps isolate data, though explicit prompt-level delimiters are not mandated.
- Capability inventory: The agent can perform mutations on Jira/Confluence via acli and use local scripts for network requests and file handling.
- Sanitization: The included md-to-adf.ts script validates the structure of ADF documents but does not sanitize text content for embedded instructions.
Audit Metadata