Jira

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.2
• Hash: 9451a52a67edf2ea7d02223a6684f82d1e1dcd17982b35d51c2f7e84c7b5df8d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for Jira appears benign. It provides a set of shell commands to interact with the Jira Cloud REST API, requiring `JIRA_URL`, `JIRA_EMAIL`, and `JIRA_API_TOKEN` as environment variables for authentication. All network calls are directed to the configured Jira instance. The `scripts/jira.sh` file uses standard tools (`curl`, `jq`, `bc`, `python3`) and includes embedded Python scripts for data processing, which are well-defined and do not exhibit any malicious behavior. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`.