mk:jira-agile — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mk:jira-agile (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Forks to the jira-agile agent. Sprint operations require a numeric --board-id, not the project key. The agent resolves project name → board ID via agile board list --name "..." first.
agile-sprint-commitment.md 2/3 when loaded)When tasks/contracts/sprint-state-{date}-sprint-{N}.md exists with status: active, wrap these operations:
sprint add KEY and sprint remove KEY (post-start)agile-sprint-commitment.md 2: AskUserQuestion "Reason for mid-sprint scope change?" — required free-text{ ts: <ISO ts>, action: add|remove, ticket: KEY, reason: <text> } to amendments: listjira-as agile sprint add|remove callIf sprint-state contract is absent OR status: closed → skip the amendment ceremony silently.
sprint closecommitted_tickets: from newest active sprint-statemk:jira-issue get KEYAskUserQuestion: "PROJ-X is in {status}. Carry over to next sprint? Drop? Mark as not delivered?"status: closed, closed_at: <ts>, delivered: [...], carried_over: [...]jira-as agile sprint close callmk:sprint-contract/scripts/validate-contract.sh validates per-story sprint-CONTRACT files only (those with contract_schema_version, ### [AC-N] entries). Sprint-STATE files at sprint-state-{date}-sprint-{N}.md use NO validator — YAML is parsed inline by this skill, mk:agent-detector, and mk:sprint-contract sprint-goal. Do not invoke validate-contract.sh on a sprint-state path; it WILL fail (sprint-state lacks contract schema fields by design).
| Script | Mechanism | Verdict |
|---|---|---|
check-contract-signed.sh | Globs tasks/contracts/*-"$slug"-sprint-*.md (per-task slug between leading * and -sprint-) | SAFE — sprint-state files have no slug between leading sprint-state- prefix and -sprint- |
validate-contract.sh | Takes single explicit $1 path; no glob | SAFE |
../../agents/jira-agile.md../jira/references/{install-and-auth,cli-idioms,safety-framework}.mdreferences/sprint-operations.md — board/sprint/velocity wrapper patternsreferences/agile-field-reference.md — agile-specific field IDs (Sprint, Epic Link, Story Points)mk:jira-fields (../jira-fields/references/agile-field-ids.md is the canonical instance-discovery source), mk:jira-time (capacity = velocity ÷ team time), mk:jira-relationships (epic-children outside epic-link via issue links)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.