atk-jira
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
atk-jiraCLI tool to perform various Jira Cloud operations such as searching issues, adding comments, and updating fields.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install theatk-jiraCLI from the author's Homebrew tap (wohsj110/tap/atk-jira) using the commandbrew install --cask wohsj110/tap/atk-jira. This is a vendor-owned resource related to the skill's primary functionality.\n- [PROMPT_INJECTION]: The skill processes untrusted data from Jira, creating an attack surface for indirect prompt injection.\n - Ingestion points: The skill retrieves issue summaries, descriptions, and comments from Jira Cloud using the
atk-jira issues getandatk-jira comments listcommands.\n - Boundary markers: There are no explicit instructions or delimiters defined to isolate retrieved content or to warn the agent to ignore embedded instructions.\n
- Capability inventory: The skill has broad capabilities to execute CLI commands for reading and writing data to Jira, including creating issues and adding comments.\n
- Sanitization: No sanitization or validation of the retrieved Jira content is mentioned before it is processed by the agent.
Audit Metadata