skills/hdemers/dotfiles/jira-ticket/Gen Agent Trust Hub

jira-ticket

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface when processing data from external Jira tickets.
  • Ingestion points: The skill retrieves data from Jira using jira view and jira issues commands as defined in SKILL.md.
  • Boundary markers: Absent. There are no instructions to the agent to distinguish between ticket content and agent instructions, nor are delimiters suggested.
  • Capability inventory: The agent can execute jira CLI commands via bash to modify ticket states, create new issues, or close existing ones.
  • Sanitization: Absent. The skill does not provide instructions for validating or sanitizing the content fetched from Jira before processing it.
  • [COMMAND_EXECUTION]: The skill utilizes the jira CLI via bash to interact with the Jira issue tracking system.
  • The tool uses the Bash(jira:*) capability to perform ticket operations such as create, view, update, and transition based on predefined usage patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 03:48 AM