OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The Jira skill allows the agent to interact with Jira via CLI commands or MCP tools. It is functionally well-designed with user confirmation steps for modifications. However, because it reads external Jira issue descriptions and comments, it is exposed to potential indirect prompt injection from untrusted ticket content.
Detected behaviors
No alerts
1 issue
3/4 files flagged
1 finding · Score: 69/100