Now in early access, book a 30-minute demo →
Agent Skill security

Rovo Dev

Atlassian's agentic coding assistant for the terminal, Bitbucket, and Jira workflows.

Atlassian

How skills run on Rovo Dev

Rovo Dev operates in the command line and in Bitbucket, navigating code, editing files, and reaching Jira and Confluence through MCP. Skill content arriving from outside the organization can redirect that authority toward repositories and issue data it was never meant to touch.

Skill security, assessed

Every public skill in our index is assessed by the Anomity Skill Intelligence engine against its real source: remote code execution, credential and data exfiltration, prompt injection, and unsafe installers.

Browse the Skill Risk Index →

Govern the skill layer on Rovo Dev

Scanning a skill before use tells you what it claims to do. Anomity's Endpoint Sensor sees what agents actually do at runtime: it discovers every skill, agent, and MCP server on the endpoint, and policy can allow, deny, or log the tool calls a skill triggers on Rovo Dev and every other agent. Violations route to your SIEM, Slack, email, or Jira with a queryable 90-day audit trail.

Book a 30-minute demo to see your own agent and skill inventory.

Other agents

Ask AI about Anomity
ChatGPT Claude Perplexity Google AI Grok