Jira

• Outcome: Review
• Latest audit: May 29, 2026 at 9:37 PM UTC
• Version:
  1.0.6

Overview

This Jira skill is a legitimate integration, but it can change or delete live Jira data without explicit safety guardrails.

Install only if you intend to let an agent operate on a real Jira workspace. Use the narrowest Jira permissions practical, verify project, issue, and comment identifiers before writes, and require explicit user confirmation before create, update, transition, assignment, proxy DELETE, or delete actions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill advertises destructive operations such as deleting issues and comments but provides no explicit requirement for user confirmation, dry-run behavior, or safeguards around irreversible changes. In an agent setting, this increases the risk that a vague or mistaken prompt could lead to unintended data loss or workflow disruption in a real Jira environment.

VirusTotal

63/63 vendors flagged this skill as clean.