Security audit
@kansodata/kansodata-jira-plugin
Security checks for vulnerabilities and agentic risk
Overview
This appears to be a coherent read-only Jira Cloud plugin, but it needs a Jira API token and can expose Jira issue data to the agent.
Install only if you want OpenClaw to read Jira Cloud data using a Jira API token. Use a dedicated low-privilege Jira account, keep READ_ONLY=true, scope JQL queries carefully, and treat Jira comments or descriptions as untrusted content rather than instructions.
Static analysis
No suspicious patterns detected.
