jira-integration
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts that use Python for secure JSON handling. It avoids shell interpolation and uses interpreter hardening flags to prevent environment-based attacks.\n- [EXTERNAL_DOWNLOADS]: Attachment downloads are restricted to the configured Jira host and require HTTPS. The skill implements file size limits and secure temporary file handling.\n- [CREDENTIALS_UNSAFE]: API tokens are retrieved from environment files with implemented security checks for file permissions and variable name allowlisting.\n- [DATA_EXFILTRATION]: All network operations are strictly limited to the user-defined Jira instance. No unauthorized data transmission or exfiltration vectors were detected.
Audit Metadata