atk-jira

The stated purpose is coherent for a Jira skill, but the trust model is not proportionate: it installs and executes an unverifiable third-party CLI from a personal tap, then routes Jira credentials and actions through that binary. This makes the skill suspicious and high risk even without direct evidence of malicious intent.