Back to plugin

Security audit

@kansodata/kansodata-jira-plugin

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a coherent read-only Jira Cloud plugin, but it needs a Jira API token and can expose Jira issue data to the agent.

Install only if you want OpenClaw to read Jira Cloud data using a Jira API token. Use a dedicated low-privilege Jira account, keep READ_ONLY=true, scope JQL queries carefully, and treat Jira comments or descriptions as untrusted content rather than instructions.

Static analysis

No suspicious patterns detected.