atlassian-templates
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from stakeholder interviews and script parameters to generate Confluence templates, creating a vector where poisoned input could influence published pages.\n
- Ingestion points: Discovery workflows in
SKILL.mdand the--sectionsor--macrosparameters inscripts/template_scaffolder.py.\n - Boundary markers: The skill explicitly instructs the agent to "confirm template renders correctly in preview before publishing" and "verify each create before proceeding."\n
- Capability inventory: Uses
mcp__atlassian__createConfluencePageandmcp__atlassian__updateConfluencePageto commit generated markup to the target environment.\n - Sanitization: The Python scaffolder script uses direct string interpolation for markup generation without explicit escaping of input values.
Audit Metadata