jira-integration
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documentation encourages secure credential management by advising the use of environment variables or secrets managers instead of hardcoding API tokens.\n- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to ingest data from Jira tickets, which are external sources that could potentially contain untrusted instructions. This is a standard functionality for this type of integration.\n
- Ingestion points: Issue summaries, descriptions, and comments retrieved via tools like
jira_get_issueandjira_search(SKILL.md).\n - Boundary markers: Not explicitly defined in the provided templates.\n
- Capability inventory: Includes the ability to create, update, and transition Jira issues, and add comments (SKILL.md).\n
- Sanitization: No specific sanitization or escaping mechanisms are mentioned in the instructions.
Audit Metadata