jira-ticket

v1.0.0

Create Jira tickets with web-researched content. Use when asked to create, file, or open a Jira issue/ticket/story/bug/task, especially when the ticket conte...

0· 101·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the declared requirements: curl and jq are used for HTTP calls and JSON parsing, and the three environment variables (JIRA_BASE_URL, JIRA_EMAIL, JIRA_API_TOKEN) are exactly what is needed to call the Jira Cloud REST API.
Instruction Scope
SKILL.md stays on task: it parses user input, optionally runs web searches and fetches pages for research, builds an ADF description, validates project/fields, and posts to Jira. It does not instruct reading local files or unrelated environment variables, nor does it direct data to unexpected endpoints beyond web research and Jira.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk and no external packages are pulled in. This is the lowest-risk install model.
Credentials
Requested secrets are limited and appropriate for the task (Jira base URL, account email, API token). No unrelated credentials, config paths, or broad system secrets are requested.
Persistence & Privilege
always:false and normal autonomous invocation settings. The skill does not request permanent system-wide presence or modifications to other skills or agent settings.
Assessment
This skill appears coherent and requests only the expected Jira credentials. Before installing: (1) Provide a dedicated Jira API token scoped to a minimally privileged account (service account) rather than your personal admin token; (2) keep JIRA_API_TOKEN secret and rotate it if leaked; (3) avoid including sensitive secrets or private data in the ticket text or in web-search queries, since the skill fetches external pages during research and will post the composed content to your Jira instance; and (4) if you run the skill in a sandbox, enable the stated Jira network preset and review network policies so the skill can only reach the required Atlassian hosts.

Like a lobster shell, security has layers — review code before you run it.

latestvk972neezy3awxb2gmfgtb3nrp1839q70

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎫 Clawdis
Binscurl, jq
EnvJIRA_API_TOKEN, JIRA_EMAIL, JIRA_BASE_URL

Comments