acli

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official acli binary from Atlassian's servers (acli.atlassian.com). As Atlassian is a well-known service provider, this download is part of the legitimate tool installation process.
  • [COMMAND_EXECUTION]: The skill uses the acli binary and local Bun scripts (md-to-adf.ts and jira-attach-media.ts) to interact with Atlassian services and process file content. These tools are necessary for the skill's primary functions.
  • [PRIVILEGE_ESCALATION]: Documentation includes standard installation commands using sudo and chmod +x to set up the acli binary. These are provided as reference for the user or agent to establish the execution environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external content from Jira issues and Confluence pages, creating a surface for indirect prompt injection.
  • Ingestion points: Data is read from Jira and Confluence using acli jira workitem view and acli confluence page view (as documented in references/workitem.md and references/confluence.md).
  • Boundary markers: The instructions recommend using structured JSON output and jq for parsing, which helps isolate data, though explicit prompt-level delimiters are not mandated.
  • Capability inventory: The agent can perform mutations on Jira/Confluence via acli and use local scripts for network requests and file handling.
  • Sanitization: The included md-to-adf.ts script validates the structure of ADF documents but does not sanitize text content for embedded instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 08:21 PM