← 返回 Skills 市场
weihezhai

Jira Metric

作者 whz · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
606
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install jirametric
功能描述
Retrieve and analyze Jira worklog metrics by user, issue, or date ranges through Jira Cloud REST API calls.
使用说明 (SKILL.md)
---
name: jira
description: Manage Jira issues, transitions, and worklogs via the Jira Cloud REST API.
homepage: https://developer.atlassian.com/cloud/jira/platform/rest/v3/intro/
metadata:
  {
    "clawdbot":
      {
        "emoji": "🧭",
        "requires":
          {
            "bins": ["curl", "jq", "bc", "python3"],
            "env": ["JIRA_URL", "JIRA_EMAIL", "JIRA_API_TOKEN"],
            "optional_env": ["JIRA_BOARD"]
          },
      },
  }
---

# Jira Skill

Work with Jira issues and worklogs from Clawdbot (search, status, create, log work, worklog summaries).

## Setup

1. Get your API key: https://id.atlassian.com/manage-profile/security/api-tokens
2. Click "Create API Token"
3. Set environment variables:
   ```bash
   export JIRA_EMAIL="[email protected]"
   export JIRA_API_TOKEN="your-api-token"
   export JIRA_URL="https://your-domain.atlassian.net"
   # Optional project scope (comma-separated). Empty = search all.
   export JIRA_BOARD="ABC"

Requires curl, jq, bc, and python3.

Quick Commands

All commands live in {baseDir}/scripts/jira.sh.

  • {baseDir}/scripts/jira.sh search "timeout" [max] — fuzzy search by summary or key inside JIRA_BOARD
  • {baseDir}/scripts/jira.sh link ABC-123 — browser link for an issue
  • {baseDir}/scripts/jira.sh issue ABC-123 — quick issue details
  • {baseDir}/scripts/jira.sh status ABC-123 "In Progress" — move an issue (validates available transitions)
  • {baseDir}/scripts/jira.sh transitions ABC-123 — list allowed transitions
  • {baseDir}/scripts/jira.sh assign ABC-123 "name or email" — assign by user search
  • {baseDir}/scripts/jira.sh assign-me ABC-123 — assign to yourself
  • {baseDir}/scripts/jira.sh comment ABC-123 "text" — add a comment
  • {baseDir}/scripts/jira.sh create "Title" ["Description"] — create a Task in JIRA_BOARD
  • {baseDir}/scripts/jira.sh log ABC-123 2.5 [YYYY-MM-DD] — log hours (defaults to today UTC)
  • {baseDir}/scripts/jira.sh my [max] — open issues assigned to you
  • {baseDir}/scripts/jira.sh hours 2025-01-01 2025-01-07 — your logged hours by issue (JSON)
  • {baseDir}/scripts/jira.sh hours-day 2025-01-07 [name|email] — logged hours for a day grouped by user/issue; optional filter (name/email; also resolves to accountId)
  • {baseDir}/scripts/jira.sh hours-issue ABC-123 [name|email] — logged hours for an issue; optional filter (name/email; also resolves to accountId)

Command Reference

  • Search issues

    {baseDir}/scripts/jira.sh search "payment failure" [maxResults]
    
  • Issue link

    {baseDir}/scripts/jira.sh link ABC-321
    
  • Issue details

    {baseDir}/scripts/jira.sh issue ABC-321
    
  • Update status

    {baseDir}/scripts/jira.sh status ABC-321 "Done"
    
  • List transitions

    {baseDir}/scripts/jira.sh transitions ABC-321
    
  • Assign issue

    {baseDir}/scripts/jira.sh assign ABC-321 "Jane Doe"
    
  • Assign to yourself

    {baseDir}/scripts/jira.sh assign-me ABC-321
    
  • Add comment

    {baseDir}/scripts/jira.sh comment ABC-321 "Deployed to staging"
    
  • Create issue

    {baseDir}/scripts/jira.sh create "Fix auth timeout" "Users being logged out after 5m"
    
  • Log hours

    {baseDir}/scripts/jira.sh log PB-321 1.5 2025-01-18
    
  • My open issues

    {baseDir}/scripts/jira.sh my [maxResults]
    
  • Logged hours by issue (me)

    {baseDir}/scripts/jira.sh hours 2025-01-01 2025-01-05
    
  • Logged hours for a day (everyone)

    {baseDir}/scripts/jira.sh hours-day 2025-01-05
    
  • Logged hours for a day (user filter)

    {baseDir}/scripts/jira.sh hours-day 2025-01-05 "jane"
    
  • Logged hours for an issue

    {baseDir}/scripts/jira.sh hours-issue ABC-321 "jane"
    

Notes

  • Worklog commands use Jira's worklog/updated + worklog/list combo and may take a few seconds on large projects.
  • hours filters by JIRA_EMAIL; hours-day returns all users with totals per issue and user.
  • Outputs for hours commands are JSON for reuse in other tools.
  • Status transitions are validated against the server‑provided transition list before applying.
安全使用建议
This skill's code does what its description says (talks to your Jira Cloud instance) and needs your Jira URL, email, and API token plus CLI tools (curl, jq, bc, python3). The registry metadata incorrectly lists no credentials/binaries — treat that as a red flag. Before installing: 1) Confirm the skill's source/author since homepage/source are missing. 2) Inspect the entire script (the provided file was truncated) for any hidden network endpoints or unexpected commands. 3) Only provide JIRA_API_TOKEN and other secrets in a secure, least-privilege account (not a high-privilege admin token) and consider scoping tokens. 4) Run it in an isolated environment (sandbox/container) first. 5) If the publisher can correct the registry metadata to explicitly list required env vars and binaries, that would remove the primary inconsistency and increase confidence.
功能分析
Type: OpenClaw Skill Name: jirametric Version: 1.0.0 The `scripts/jira.sh` file contains a critical shell injection vulnerability in the `log_work` function, where the `$hours` argument is directly interpolated into a subshell command for `bc -l`, allowing arbitrary command execution. Additionally, the script includes an undocumented `metrics` command that, if triggered, sends aggregated worklog data (total hours, issue count) to an arbitrary external URL specified by the `JIRA_METRICS_URL` environment variable, posing a hidden data exfiltration risk. The `SKILL.md` does not mention this `metrics` command or the `JIRA_METRICS_URL` variable.
能力评估
Purpose & Capability
The script and SKILL.md clearly require JIRA_URL, JIRA_EMAIL, and JIRA_API_TOKEN and binaries (curl, jq, bc, python3). The registry metadata provided with the skill however lists no required env vars or binaries. Functionally the code matches the stated purpose (Jira worklog/issue operations), but the metadata omission is an inconsistency that could mislead users about what credentials/tools are needed.
Instruction Scope
The SKILL.md instructs the agent to call the Jira Cloud REST API and to run the included scripts. The scripts only reference Jira API endpoints (constructed from JIRA_URL) and use the declared credentials; there are no instructions to read unrelated system files or send data to unexpected external endpoints in the visible portion.
Install Mechanism
This is an instruction-only skill with a shell script included and no install spec. Nothing is being downloaded or written by an installer; risk from installer mechanisms is low.
Credentials
The environment variables requested by the script (JIRA_URL, JIRA_EMAIL, JIRA_API_TOKEN, optional JIRA_BOARD) are appropriate and proportionate for Jira API access. The concern is that the registry metadata did not declare these required credentials — a discrepancy that could cause users to accidentally expose tokens or run the skill without realizing it needs secrets. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It runs as a CLI wrapper and does not permanently persist extra privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install jirametric
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /jirametric 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of the Jira skill. - Manage Jira issues, transitions, and worklogs via the Jira Cloud REST API. - Includes commands for searching, status changes, assignment, comments, creation, and logging work. - Provides worklog summaries and JSON-export for tracked hours. - Supports filtering by project, user, day, and issue. - Requires `curl`, `jq`, `bc`, and `python3`; environment variables for Jira Cloud credentials.
元数据
Slug jirametric
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Jira Metric 是什么?

Retrieve and analyze Jira worklog metrics by user, issue, or date ranges through Jira Cloud REST API calls. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 606 次。

如何安装 Jira Metric?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install jirametric」即可一键安装,无需额外配置。

Jira Metric 是免费的吗?

是的,Jira Metric 完全免费(开源免费),可自由下载、安装和使用。

Jira Metric 支持哪些平台?

Jira Metric 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Jira Metric?

由 whz(@weihezhai)开发并维护,当前版本 v1.0.0。

💬 留言讨论