atlassian-rovo
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Atlassian CLI (
acli) andcurlto manage Jira issues and Confluence content. These executions are legitimate and necessary for the skill's project management functions. - [EXTERNAL_DOWNLOADS]: The skill guides users to install necessary dependencies from the official Atlassian Homebrew tap (
atlassian/homebrew-acli), which is a trusted and well-known source. - [SAFE]: Sensitive information, such as API tokens and email addresses, is handled via environment variables and
.envfiles. The skill provides clear instructions on secure setup and explicitly warns against committing tokens to source control. - [SAFE]: The skill employs Python utility scripts to ensure that data sent to external APIs is correctly JSON-encoded. This practice mitigates risks associated with improper shell escaping of user-provided content in Jira tickets or Confluence pages.
Audit Metadata