jira-automation

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access commands were found in the skill content.
  • [NO_CODE]: The skill does not bundle any scripts or binary files; it provides instructions for using an external MCP server.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of reading and writing Jira data.
  • Ingestion points: Data from JIRA_GET_ISSUE, JIRA_SEARCH_FOR_ISSUES_USING_JQL_POST, and JIRA_LIST_ISSUE_COMMENTS enter the agent context.
  • Boundary markers: Absent. No delimiters or instructions to ignore embedded commands are present in the workflows.
  • Capability inventory: The skill can create or modify Jira content using JIRA_CREATE_ISSUE, JIRA_EDIT_ISSUE, and JIRA_ADD_COMMENT.
  • Sanitization: No sanitization or validation of external issue content is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 06:59 AM