jira-automation

SUSPICIOUS: the skill’s capabilities match Jira automation, but its trust model depends on a third-party MCP intermediary and the setup instructions are partly inconsistent with current official Composio documentation. This is not confirmed malware, but it carries medium risk because Jira data and OAuth-backed actions are brokered through hosted infrastructure outside Atlassian, and the referenced Rube endpoint appears transitional/shutting down.