jira

Warn

Audited by Socket on Apr 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The Jira functionality and requested credentials are broadly aligned with the stated purpose, and the documented endpoint pattern is consistent with Atlassian. However, the core dependency is an unverified `af` CLI with no installation provenance in the skill, so users are asked to trust an opaque executable with Jira credentials and file uploads.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Apr 27, 2026, 03:24 PM
Package URL
pkg:socket/skills-sh/avantmedialtd%2Fskills%2Fjira%2F@5559f859aecb82ab7ada92ccde60d309c8556bd1