Does this work with JIRA Cloud?

Yes, it supports both JIRA Cloud API tokens and JIRA Personal Access Tokens (PAT) used in on-premise installations like Red Hat JIRA.

Is this compatible with standard curl flags?

Yes, the wrapper accepts all standard curl arguments and passes them through after injecting the necessary authentication and JSON headers.

How does this skill protect my JIRA token?

It reads the token from environment variables inside a script and uses the 'exec' command to run curl, ensuring the token never appears as a visible command-line argument in process listings.

Do I need to use this skill manually?

While it is automatically used by the jira:issues-by-component command, you can also use the jira_curl.sh wrapper directly for any custom JIRA API calls.

What environment variables are required?

You must set JIRA_URL and either JIRA_PERSONAL_TOKEN or JIRA_API_TOKEN in your environment or credentials file.

Secure JIRA API Wrapper

Name: Secure JIRA API Wrapper
Author: openshift-eng

byopenshift-eng

•

Security & Testing

Secures JIRA API interactions by wrapping curl commands to prevent authentication token exposure in process listings and shell history.

This skill provides a critical security layer for JIRA integrations within Claude Code by utilizing a specialized shell wrapper for API requests. It addresses common security vulnerabilities where sensitive Personal Access Tokens (PATs) or API tokens might be leaked through system process monitors or command-line history. By reading credentials directly from environment variables and using process replacement via exec, it ensures that authentication headers remain private while maintaining full compatibility with standard curl arguments, making it ideal for developers working in shared environments or automated pipelines.

Key Features

01Supports both Red Hat JIRA PATs and JIRA Cloud API tokens

02Eliminates sensitive credentials from shell command history

03Provides detailed error handling for missing credentials

0443 GitHub stars

05Automates JIRA header injection for seamless API connectivity

06Prevents token leakage in process listings and system monitors

Use Cases

01Securely fetching JIRA issues without exposing credentials in multi-user environments

02Building custom JIRA scripts that require enterprise-grade security standards

03Automating JIRA reporting tasks within secure CI/CD pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add openshift-eng/ai-helpers jira-issues-by-component

For use in Claude.ai and ChatGPT

Download Skill