← 返回 Skills 市场
JIRA
作者
Jonathan Rhyne
· GitHub ↗
· v1.3.3
9218
总下载
16
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install jira
功能描述
Use when the user mentions Jira issues (e.g., "PROJ-123"), asks about tickets, wants to create/view/update issues, check sprint status, or manage their Jira...
安全使用建议
Install only if you trust the publisher and intend agents to work with your Jira account. Use least-privilege Jira credentials, avoid giving broad project-admin tokens, require explicit confirmation before any create/update/move/assign/comment/sprint action, and prefer the scoped MCP/CLI path over raw curl commands with API tokens.
功能分析
Type: OpenClaw Skill
Name: jira
Version: 1.3.3
The skill is classified as suspicious due to its extensive use of shell command execution and direct network calls involving sensitive credentials, which present significant prompt injection vulnerabilities. Specifically, `SKILL.md` and `references/commands.md` instruct the agent to execute various `jira` CLI commands, often leveraging shell features like command substitution (`$(jira me)`) and temporary file creation (`cat > /tmp/jira_body.md`). Furthermore, `references/mcp.md` includes a `curl` command that directly uses `JIRA_USER`, `JIRA_API_TOKEN`, and `JIRA_BASE_URL` environment variables for API interaction. While these actions are intended for legitimate Jira operations, the broad access to shell and network with credentials creates a high-risk attack surface if the agent's instructions are subverted.
能力评估
Purpose & Capability
The documented capabilities fit a Jira integration: querying issues plus creating, moving, assigning, commenting, sprint changes, CLI use, MCP use, and REST fallbacks are purpose-aligned.
Instruction Scope
The skill trigger language reportedly includes generic words like issue and ticket, and the references document live state-changing Jira actions without clear confirmation boundaries or prominent separation from read-only operations.
Install Mechanism
No artifact-backed evidence indicates deceptive installation, hidden package execution, or unrelated install-time behavior.
Credentials
Using Jira credentials, shell commands, CLI workflows, and network calls is coherent for Jira work, but raw curl/API-token examples and shell fallbacks broaden the execution surface beyond a safer scoped MCP path.
Persistence & Privilege
No hidden persistence was shown, but the skill can operate with Jira account privileges and includes non-interactive mutation examples such as ticket creation with --no-input.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install jira - 安装完成后，直接呼叫该 Skill 的名称或使用
/jira触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.3.3
Scanner hardening: make Jira env vars optional (REST fallback only) to align with multi-backend CLI/MCP design
v1.3.2
Scanner hardening: align _meta version, add provenance fields, remove local helper-path assumptions from docs
v1.3.1
Hardening correction: publish MCP docs without user-local helper-script path references
v1.3.0
Hardening pass: remove user-local helper-script path references from MCP docs and keep requirements consistent
v1.2.0
Fix suspicious flag: declare all required env vars (JIRA_API_TOKEN, JIRA_USER, JIRA_BASE_URL), fix reference to non-existent helper script
v1.1.0
Added structured openclaw metadata: jira binary + JIRA_API_TOKEN env requirement
v1.0.0
Initial release – manage Jira from the command line using jira-cli.
- Search, create, update, and transition Jira issues directly via terminal commands.
- Manage sprints, boards, epics, and projects with simple CLI options.
- Includes setup instructions and best practices for API token, configuration, and workflow.
- Supports custom output formats for scripting and automation.
- Adds safeguards—confirm changes with the user before creating, editing, or transitioning issues.
元数据
常见问题
JIRA 是什么？
Use when the user mentions Jira issues (e.g., "PROJ-123"), asks about tickets, wants to create/view/update issues, check sprint status, or manage their Jira... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 9218 次。
如何安装 JIRA？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install jira」即可一键安装，无需额外配置。
JIRA 是免费的吗？
是的，JIRA 完全免费（开源免费），可自由下载、安装和使用。
JIRA 支持哪些平台？
JIRA 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 JIRA？
由 Jonathan Rhyne（@jdrhyne）开发并维护，当前版本 v1.3.3。
推荐 Skills