atlassian-rovo

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Atlassian CLI (acli) and curl to manage Jira issues and Confluence content. These executions are legitimate and necessary for the skill's project management functions.
  • [EXTERNAL_DOWNLOADS]: The skill guides users to install necessary dependencies from the official Atlassian Homebrew tap (atlassian/homebrew-acli), which is a trusted and well-known source.
  • [SAFE]: Sensitive information, such as API tokens and email addresses, is handled via environment variables and .env files. The skill provides clear instructions on secure setup and explicitly warns against committing tokens to source control.
  • [SAFE]: The skill employs Python utility scripts to ensure that data sent to external APIs is correctly JSON-encoded. This practice mitigates risks associated with improper shell escaping of user-provided content in Jira tickets or Confluence pages.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 05:12 AM