atlassian-cli
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a wide range of shell commands for the
aclitool, facilitating project management, work item automation, and administrative user operations. These include high-privilege operations such as project deletion and user account deactivation.\n- [PROMPT_INJECTION]: The skill's primary function involves retrieving and processing data from Jira Cloud (summaries, descriptions, and comments), creating a vulnerability surface for indirect prompt injection. Malicious instructions embedded in Jira work items could influence agent behavior during processing.\n - Ingestion points: Data enters the agent's context through subcommands such as
acli jira workitem viewandacli jira workitem search(documented in SKILL.md and workitem.md).\n - Boundary markers: The instructions do not specify any delimiters or safety warnings for the agent to distinguish between data and instructions when reading Jira content.\n
- Capability inventory: The skill provides access to destructive capabilities including
acli jira project delete,acli jira workitem delete, andacli admin user deleteacross all reference files.\n - Sanitization: There are no documented steps for validating or sanitizing the content retrieved from Atlassian before it is processed by the agent.
Audit Metadata