← Back to Skills Marketplace
weihezhai

Jira Metric

by whz · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
606
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install jirametric
Description
Retrieve and analyze Jira worklog metrics by user, issue, or date ranges through Jira Cloud REST API calls.
README (SKILL.md)
---
name: jira
description: Manage Jira issues, transitions, and worklogs via the Jira Cloud REST API.
homepage: https://developer.atlassian.com/cloud/jira/platform/rest/v3/intro/
metadata:
  {
    "clawdbot":
      {
        "emoji": "🧭",
        "requires":
          {
            "bins": ["curl", "jq", "bc", "python3"],
            "env": ["JIRA_URL", "JIRA_EMAIL", "JIRA_API_TOKEN"],
            "optional_env": ["JIRA_BOARD"]
          },
      },
  }
---

# Jira Skill

Work with Jira issues and worklogs from Clawdbot (search, status, create, log work, worklog summaries).

## Setup

1. Get your API key: https://id.atlassian.com/manage-profile/security/api-tokens
2. Click "Create API Token"
3. Set environment variables:
   ```bash
   export JIRA_EMAIL="[email protected]"
   export JIRA_API_TOKEN="your-api-token"
   export JIRA_URL="https://your-domain.atlassian.net"
   # Optional project scope (comma-separated). Empty = search all.
   export JIRA_BOARD="ABC"

Requires curl, jq, bc, and python3.

Quick Commands

All commands live in {baseDir}/scripts/jira.sh.

  • {baseDir}/scripts/jira.sh search "timeout" [max] — fuzzy search by summary or key inside JIRA_BOARD
  • {baseDir}/scripts/jira.sh link ABC-123 — browser link for an issue
  • {baseDir}/scripts/jira.sh issue ABC-123 — quick issue details
  • {baseDir}/scripts/jira.sh status ABC-123 "In Progress" — move an issue (validates available transitions)
  • {baseDir}/scripts/jira.sh transitions ABC-123 — list allowed transitions
  • {baseDir}/scripts/jira.sh assign ABC-123 "name or email" — assign by user search
  • {baseDir}/scripts/jira.sh assign-me ABC-123 — assign to yourself
  • {baseDir}/scripts/jira.sh comment ABC-123 "text" — add a comment
  • {baseDir}/scripts/jira.sh create "Title" ["Description"] — create a Task in JIRA_BOARD
  • {baseDir}/scripts/jira.sh log ABC-123 2.5 [YYYY-MM-DD] — log hours (defaults to today UTC)
  • {baseDir}/scripts/jira.sh my [max] — open issues assigned to you
  • {baseDir}/scripts/jira.sh hours 2025-01-01 2025-01-07 — your logged hours by issue (JSON)
  • {baseDir}/scripts/jira.sh hours-day 2025-01-07 [name|email] — logged hours for a day grouped by user/issue; optional filter (name/email; also resolves to accountId)
  • {baseDir}/scripts/jira.sh hours-issue ABC-123 [name|email] — logged hours for an issue; optional filter (name/email; also resolves to accountId)

Command Reference

  • Search issues

    {baseDir}/scripts/jira.sh search "payment failure" [maxResults]
    
  • Issue link

    {baseDir}/scripts/jira.sh link ABC-321
    
  • Issue details

    {baseDir}/scripts/jira.sh issue ABC-321
    
  • Update status

    {baseDir}/scripts/jira.sh status ABC-321 "Done"
    
  • List transitions

    {baseDir}/scripts/jira.sh transitions ABC-321
    
  • Assign issue

    {baseDir}/scripts/jira.sh assign ABC-321 "Jane Doe"
    
  • Assign to yourself

    {baseDir}/scripts/jira.sh assign-me ABC-321
    
  • Add comment

    {baseDir}/scripts/jira.sh comment ABC-321 "Deployed to staging"
    
  • Create issue

    {baseDir}/scripts/jira.sh create "Fix auth timeout" "Users being logged out after 5m"
    
  • Log hours

    {baseDir}/scripts/jira.sh log PB-321 1.5 2025-01-18
    
  • My open issues

    {baseDir}/scripts/jira.sh my [maxResults]
    
  • Logged hours by issue (me)

    {baseDir}/scripts/jira.sh hours 2025-01-01 2025-01-05
    
  • Logged hours for a day (everyone)

    {baseDir}/scripts/jira.sh hours-day 2025-01-05
    
  • Logged hours for a day (user filter)

    {baseDir}/scripts/jira.sh hours-day 2025-01-05 "jane"
    
  • Logged hours for an issue

    {baseDir}/scripts/jira.sh hours-issue ABC-321 "jane"
    

Notes

  • Worklog commands use Jira's worklog/updated + worklog/list combo and may take a few seconds on large projects.
  • hours filters by JIRA_EMAIL; hours-day returns all users with totals per issue and user.
  • Outputs for hours commands are JSON for reuse in other tools.
  • Status transitions are validated against the server‑provided transition list before applying.
Usage Guidance
This skill's code does what its description says (talks to your Jira Cloud instance) and needs your Jira URL, email, and API token plus CLI tools (curl, jq, bc, python3). The registry metadata incorrectly lists no credentials/binaries — treat that as a red flag. Before installing: 1) Confirm the skill's source/author since homepage/source are missing. 2) Inspect the entire script (the provided file was truncated) for any hidden network endpoints or unexpected commands. 3) Only provide JIRA_API_TOKEN and other secrets in a secure, least-privilege account (not a high-privilege admin token) and consider scoping tokens. 4) Run it in an isolated environment (sandbox/container) first. 5) If the publisher can correct the registry metadata to explicitly list required env vars and binaries, that would remove the primary inconsistency and increase confidence.
Capability Analysis
Type: OpenClaw Skill Name: jirametric Version: 1.0.0 The `scripts/jira.sh` file contains a critical shell injection vulnerability in the `log_work` function, where the `$hours` argument is directly interpolated into a subshell command for `bc -l`, allowing arbitrary command execution. Additionally, the script includes an undocumented `metrics` command that, if triggered, sends aggregated worklog data (total hours, issue count) to an arbitrary external URL specified by the `JIRA_METRICS_URL` environment variable, posing a hidden data exfiltration risk. The `SKILL.md` does not mention this `metrics` command or the `JIRA_METRICS_URL` variable.
Capability Assessment
Purpose & Capability
The script and SKILL.md clearly require JIRA_URL, JIRA_EMAIL, and JIRA_API_TOKEN and binaries (curl, jq, bc, python3). The registry metadata provided with the skill however lists no required env vars or binaries. Functionally the code matches the stated purpose (Jira worklog/issue operations), but the metadata omission is an inconsistency that could mislead users about what credentials/tools are needed.
Instruction Scope
The SKILL.md instructs the agent to call the Jira Cloud REST API and to run the included scripts. The scripts only reference Jira API endpoints (constructed from JIRA_URL) and use the declared credentials; there are no instructions to read unrelated system files or send data to unexpected external endpoints in the visible portion.
Install Mechanism
This is an instruction-only skill with a shell script included and no install spec. Nothing is being downloaded or written by an installer; risk from installer mechanisms is low.
Credentials
The environment variables requested by the script (JIRA_URL, JIRA_EMAIL, JIRA_API_TOKEN, optional JIRA_BOARD) are appropriate and proportionate for Jira API access. The concern is that the registry metadata did not declare these required credentials — a discrepancy that could cause users to accidentally expose tokens or run the skill without realizing it needs secrets. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It runs as a CLI wrapper and does not permanently persist extra privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install jirametric
  3. After installation, invoke the skill by name or use /jirametric
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Jira skill. - Manage Jira issues, transitions, and worklogs via the Jira Cloud REST API. - Includes commands for searching, status changes, assignment, comments, creation, and logging work. - Provides worklog summaries and JSON-export for tracked hours. - Supports filtering by project, user, day, and issue. - Requires `curl`, `jq`, `bc`, and `python3`; environment variables for Jira Cloud credentials.
Metadata
Slug jirametric
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Jira Metric?

Retrieve and analyze Jira worklog metrics by user, issue, or date ranges through Jira Cloud REST API calls. It is an AI Agent Skill for Claude Code / OpenClaw, with 606 downloads so far.

How do I install Jira Metric?

Run "/install jirametric" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Jira Metric free?

Yes, Jira Metric is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Jira Metric support?

Jira Metric is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Jira Metric?

It is built and maintained by whz (@weihezhai); the current version is v1.0.0.

💬 Comments