jira-ticket
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface when processing data from external Jira tickets.
- Ingestion points: The skill retrieves data from Jira using
jira viewandjira issuescommands as defined inSKILL.md. - Boundary markers: Absent. There are no instructions to the agent to distinguish between ticket content and agent instructions, nor are delimiters suggested.
- Capability inventory: The agent can execute
jiraCLI commands via bash to modify ticket states, create new issues, or close existing ones. - Sanitization: Absent. The skill does not provide instructions for validating or sanitizing the content fetched from Jira before processing it.
- [COMMAND_EXECUTION]: The skill utilizes the
jiraCLI via bash to interact with the Jira issue tracking system. - The tool uses the
Bash(jira:*)capability to perform ticket operations such ascreate,view,update, andtransitionbased on predefined usage patterns.
Audit Metadata