atk-jira

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute the atk-jira CLI tool to perform various Jira Cloud operations such as searching issues, adding comments, and updating fields.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the atk-jira CLI from the author's Homebrew tap (wohsj110/tap/atk-jira) using the command brew install --cask wohsj110/tap/atk-jira. This is a vendor-owned resource related to the skill's primary functionality.\n- [PROMPT_INJECTION]: The skill processes untrusted data from Jira, creating an attack surface for indirect prompt injection.\n
  • Ingestion points: The skill retrieves issue summaries, descriptions, and comments from Jira Cloud using the atk-jira issues get and atk-jira comments list commands.\n
  • Boundary markers: There are no explicit instructions or delimiters defined to isolate retrieved content or to warn the agent to ignore embedded instructions.\n
  • Capability inventory: The skill has broad capabilities to execute CLI commands for reading and writing data to Jira, including creating issues and adding comments.\n
  • Sanitization: No sanitization or validation of the retrieved Jira content is mentioned before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 08:54 AM