atlassian
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/setupfile installsjqandankitpokhrel/jira-cliusing Homebrew. These are well-known technology tools and the installation method is a standard practice for macOS environments. - [CREDENTIALS_UNSAFE]: The skill manages sensitive Atlassian API tokens. However, it implements protective measures by storing them in
~/.atlassian-envwith restricted permissions (chmod 600) and automatically adding the file to the global git configuration's excludes list to prevent accidental exposure in repositories. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks common to data-retrieval tools.
- Ingestion points: Untrusted data enters the agent context through
confluence get,confluence search,jira issue view, andjira issue listoperations inscripts/confluenceandscripts/jira. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the scripts when presenting retrieved content to the agent.
- Capability inventory: The skill possesses the capability to execute subprocesses and perform network operations via
curland thejiraCLI. - Sanitization: There is no evidence of sanitization or filtering of the content retrieved from Atlassian services before it is passed to the agent's context.
Audit Metadata