skills/emilchristensen/atlassian-axi/confluence-axi/Socket

confluence-axi

Warn

Audited by Socket on Aug 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities fit its Confluence purpose, and stated data flow targets official Atlassian APIs, but it requires trusting a non-Atlassian third-party npm CLI with Atlassian tokens/OAuth secrets and executes `@latest` code on demand. This is a coherent productivity skill with meaningful supply-chain and credential-forwarding risk, not confirmed malware.

Confidence: 86%Severity: 62%

Audit Metadata

Analyzed At

Aug 5, 2026, 07:57 PM

Package URL

pkg:socket/skills-sh/emilchristensen%2Fatlassian-axi%2Fconfluence-axi%2F@3435bad31c828265c93f0d666a4a7aac785d76d9a9d63b092a22d1d40ff8b0ed