Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add upex-galaxy/agentic-qa-boilerplate --skill jira-administrationgit clone --depth 1 https://github.com/upex-galaxy/agentic-qa-boilerplateWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/upex-galaxy/agentic-qa-boilerplate/jira-administration)<a href="https://agentmods.dev/skills/upex-galaxy/agentic-qa-boilerplate/jira-administration"><img src="https://agentmods.dev/badge/skills/upex-galaxy/agentic-qa-boilerplate/jira-administration/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/upex-galaxy/agentic-qa-boilerplate/jira-administration"><img src="https://agentmods.dev/badge/skills/upex-galaxy/agentic-qa-boilerplate/jira-administration.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00694 |
| Opus 5 | $0.00032 | $0.00347 |
| Sonnet 5 | $0.00013 | $0.00139 |
| Haiku 4.5 | $0.00006 | $0.00069 |
Grade A, and why
jira-administration scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 39 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Jira Administration
Mode routing
Choose exactly one mode and load only its reference.
| Mode | Legacy alias / trigger | Reference |
|---|---|---|
components |
jira-components, reconcile/sync Jira Components |
references/components.md |
instance-migration |
jira-instance-migration, changed/repoint Jira instance |
references/instance-migration.md |
If the mode is unclear, ask. Never combine both modes in one run.
Compact Rules
The sealed mutation contract. Binding on every run of either mode:
- Exactly ONE mode per run:
components(references/components.md) orinstance-migration(references/instance-migration.md). Load only that mode's reference. Never combine the two, never fall through into the other. - Mode unclear → ASK. Do not infer one from a bare "fix Jira" / "sync Jira" request.
- Load
/aclibefore any Jira operation. Load other tool-owner skills only when the selected reference requires them. - Missing MCP or Jira credentials = HARD STOP (
AGENTS.mdCritical Rule #10). Name the exact env var, point at.env/.env.example, ask for an agent-session restart. No workaround, no partial run. - Read-first on every mutation: inspect the live state before authoring any plan. Nothing is created, applied, deleted, or repointed without the user's explicit approval given inside the same run.
components: derive and inspect → author the plan file → dry-run → WAIT for explicit approval → only then--apply.instance-migration: resolve and confirm BOTH instances → audit and verify reachability → WAIT for explicit approval → only then change files or theaclisession. That session lives at~/.config/acliand is machine-global: re-login repoints every repo on the host, not just this one.- The Atlassian host lives in
.agents/project.yaml→issue_tracker.atlassian_urland NOWHERE else locally. A staleATLASSIAN_URLin.envor the process environment is contamination to DELETE, never to update — a second copy is what goes stale. - Template-repo carve-out: if
.agents/project.yaml→project.project_nameisnull, the repo is an un-onboarded template. Leaveatlassian_urlandproject_keynull, say so in the report, and never manufacture a commit to hide the emptiness. - Run only the selected reference's verification steps. Never run the other mode's.
- Forward
$ARGUMENTSunchanged.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 39 lines · 65 tokens per session scan A 90221ee618d7
jira-administration is a skill published in the GitHub repository upex-galaxy/agentic-qa-boilerplate (21 stars, last pushed 7d ago), licensed MIT. It adds 65 tokens to every session and 694 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
discover-product
Run a multi-round discovery (persona / pain / JTBD / scenario / MVP / assumptions) and write DISCOVERY.md.
accept-milestone
Use ONLY when the user explicitly types $accept-milestone . Do not trigger implicitly from generic phrasing.
on-call-best-practices
Manage on-call rotations with sustainable practices, fair scheduling, and effective handoffs. Use this skill when setting up on-call, improving on-call experience, or managing rotations. Activate when: on-call, pagerduty, rotation, schedule, handoff, on-call burden, being paged, night pages, weekend on-call, on-call…
onboarding-checklist
Create comprehensive onboarding plans that set new hires up for success. Use this skill when preparing for new employee arrivals, improving onboarding processes, or building role-specific onboarding. Activate when: onboarding, new hire, first day, new employee, orientation, employee onboarding, 30-60-90.
standup
(forwward) Writes outcome-first status updates leaders actually read, with options + lean recommendation for blockers. Use when the user says "standup", "status report", "progress update", "weekly update", "executive summary", "update on [project]", or pastes project details without specifying intent. Reads git log…
meeting
(forwward) Turns transcripts, rough notes, or voice memos into a clean summary with decisions, action items (owner + deadline), and open questions. Use when the user pastes unstructured notes or asks "summarize this meeting", "meeting notes", "what were the action items", "write up from this call", "debrief", "what…