Skip to content
← Registry
Trust Report

jira

Read, search, draft, create, or update Jira work. Use only with explicit Jira or Atlassian context, a Jira URL, or a Jira-style issue key such as PROJ-123; generic mentions of an issue, ticket, sprint, or backlog are not sufficient.

69
SUSPICIOUS
Format: openclawScanner: v0.8.1Duration: 7msScanned: 25d ago · Sep 10, 5:36 PMSource →
Embed this badge
AgentVerus SUSPICIOUS 69AgentVerus SUSPICIOUS 69AgentVerus SUSPICIOUS 69
[![AgentVerus](https://agentverus.ai/api/v1/skill/ea8d4d7f-50cb-4734-95d6-a746d58fd6a3/badge)](https://agentverus.ai/skill/ea8d4d7f-50cb-4734-95d6-a746d58fd6a3)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/ea8d4d7f-50cb-4734-95d6-a746d58fd6a3/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"ea8d4d7f-50cb-4734-95d6-a746d58fd6a3","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/ea8d4d7f-50cb-4734-95d6-a746d58fd6a3/trust

Category Scores

60
Permissions
50
Injection
100
Dependencies
90
Behavioral
70
Content
100
Code Safety

Findings (9)

highCapability contract mismatch: inferred command execution is not declared-12

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Execute

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
highComprehensive secret collection detected-25

Found comprehensive secret collection pattern: "complete key"

Issue keys normally match `[A-Z][A-Z0-9]+-[0-9]+`. Validate the complete key rather than extracting a partial match from untrusted text.

→ Skills should not instruct collection of all tokens, keys, or credentials. Access only the specific credentials needed and declare them.

injectionASST-05
highComprehensive secret collection detected-25

Found comprehensive secret collection pattern: "list exact keys"

1. **Resolve a bounded target set.** Default to one issue. For bulk requests, list exact keys and cap each review batch at 10 issues. Never mutate every search result or an open-ended query.

→ Skills should not instruct collection of all tokens, keys, or credentials. Access only the specific credentials needed and declare them.

injectionASST-05
mediumCapability contract mismatch: inferred file read is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: curl

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred server exposure is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: /mcp

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred documentation ingestion is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: references/

→ Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumAutonomous action without confirmation detected-10

Found autonomous action without confirmation pattern: "without asking"

State which capability is missing. Offer one of these user-controlled setup paths without asking for credentials in chat:

→ Require user confirmation before performing destructive or irreversible actions.

behavioralASST-09
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

→ Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09