← 返回 Skills 市场
pejovicvuk

Jira

作者 Vuk Pejović · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
253
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install atlassian-jira
功能描述
Manage Jira Cloud issues — search, create, update, comment, transition. Use when user mentions Jira, issues, tickets, sprints, bugs, tasks, or issue keys lik...
使用说明 (SKILL.md)

Jira Cloud

Manage Jira Cloud issues via a bash CLI wrapper. No jq required — uses python3 for JSON parsing, which is available in the stock OpenClaw container.

Script location: {baseDir}/jira-cli.sh

Setup

Set these environment variables on your OpenClaw gateway:

Make the script executable: chmod +x {baseDir}/jira-cli.sh

Commands

Search issues

{baseDir}/jira-cli.sh search "assignee=currentUser() AND status!=Done"
{baseDir}/jira-cli.sh search "project=PROJ AND issuetype=Bug" 50

Second argument is max results (default: 20).

Returns: { total, issues: [{ key, summary, status, priority, assignee, type, created, updated }] }

Common JQL patterns:

  • My open issues: assignee=currentUser() AND status!=Done
  • All bugs in project: project=PROJ AND issuetype=Bug
  • Created this week: project=PROJ AND created >= startOfWeek()
  • High priority open: project=PROJ AND priority=High AND status!=Done
  • By status: project=PROJ AND status="In Progress"
  • Updated recently: project=PROJ AND updated >= -7d

Get issue details

{baseDir}/jira-cli.sh get PROJ-123

Returns: { key, summary, status, priority, type, assignee, reporter, project, description, labels, created, updated, url }

Create issue

{baseDir}/jira-cli.sh create --project PROJ --type Bug --summary "Login fails with unicode email" --description "Steps to reproduce..." --priority High

Required: --project, --summary Optional: --type (default: Task), --description, --priority

Returns: { key, id, url }

Add comment

{baseDir}/jira-cli.sh comment PROJ-123 "Tested on staging — confirmed fixed"

Returns: { id, created, author }

List available transitions

Always check this before transitioning — transition IDs vary per project workflow.

{baseDir}/jira-cli.sh transitions PROJ-123

Returns: { transitions: [{ id, name, to }] }

Transition issue (change status)

{baseDir}/jira-cli.sh transition PROJ-123 31

Second argument is the transition ID from the transitions command.

Assign issue

First look up the user's account ID:

{baseDir}/jira-cli.sh users "jane"

Then assign:

{baseDir}/jira-cli.sh assign PROJ-123 "5b10a2844c20165700ede21g"

Update issue fields

{baseDir}/jira-cli.sh update PROJ-123 --summary "Updated title" --priority High --labels "regression,blocker"

Labels are comma-separated.

List projects

{baseDir}/jira-cli.sh projects

Returns: [{ key, name, type }]

Rules

  • All output is JSON to stdout, errors to stderr.
  • Before transitioning, ALWAYS run transitions first to get valid IDs.
  • Before assigning, ALWAYS run users first to get the account ID.
  • If a command fails, the error JSON includes the HTTP status code.
安全使用建议
This skill appears to be what it claims: a simple CLI wrapper around Jira Cloud's REST API. Before installing: (1) only provide a dedicated Atlassian API token with minimal necessary permissions (do not reuse a high-privilege or long-lived token), (2) confirm ATLASSIAN_URL points to your intended Jira instance, (3) run the script in an environment you control (or sandbox) if you are unsure, and (4) note the repository/author is unknown (no homepage provided) — you may want to vet the included jira-cli.sh yourself before supplying sensitive credentials. The script uses embedded python calls to build JSON; avoid passing extremely long or untrusted multiline inputs without review. If you suspect token exposure, rotate the API token immediately.
功能分析
Type: OpenClaw Skill Name: atlassian-jira Version: 1.0.1 The `jira-cli.sh` script contains significant shell-to-python injection vulnerabilities in the `cmd_create`, `cmd_comment`, and `cmd_update` functions. User-provided arguments (such as issue summaries or descriptions) are directly interpolated into `python3 -c` command strings without proper sanitization, which could allow an attacker to execute arbitrary code by crafting malicious input. While the skill's documentation in `SKILL.md` and its overall structure appear to serve a legitimate purpose for Jira management, the insecure implementation of the CLI wrapper poses a high risk of exploitation.
能力评估
Purpose & Capability
Name/description, required env vars (ATLASSIAN_URL, ATLASSIAN_EMAIL, ATLASSIAN_API_TOKEN), and the provided CLI script all align with a Jira Cloud issue-management wrapper. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md instructs setting the three Jira env vars, making the script executable, and using the script commands. The runtime instructions and the script operate solely against the Jira REST API and do not read other files, system config, or send data to unexpected endpoints.
Install Mechanism
No install spec — instruction-only plus an included bash script. Nothing is downloaded or installed from external URLs; the script is intended to be placed in {baseDir} and executed. This is a low-risk installation model.
Credentials
Only the three Atlassian-related environment variables are required, which are appropriate for using Atlassian Cloud REST APIs. The script uses those env vars and no other sensitive variables. No unexplained high-privilege tokens are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-level presence or modify other skills or global agent config. The script runs on demand and only performs API calls with the provided credentials.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install atlassian-jira
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /atlassian-jira 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Added setup documentation
v1.0.0
Initial public release — manage Jira Cloud issues from the command line. - Search, view, create, update, comment on, assign, and transition Jira issues. - Uses environment variables for Jira Cloud authentication. - Outputs all results as JSON for easy parsing. - Includes commands for listing projects, transitions, and users. - No jq required; uses python3 for JSON parsing in the OpenClaw container.
元数据
Slug atlassian-jira
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Jira 是什么?

Manage Jira Cloud issues — search, create, update, comment, transition. Use when user mentions Jira, issues, tickets, sprints, bugs, tasks, or issue keys lik... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 253 次。

如何安装 Jira?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install atlassian-jira」即可一键安装,无需额外配置。

Jira 是免费的吗?

是的,Jira 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Jira 支持哪些平台?

Jira 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Jira?

由 Vuk Pejović(@pejovicvuk)开发并维护,当前版本 v1.0.1。

💬 留言讨论