atlassian-mcp

SUSPICIOUS: the skill's purpose is coherent, but its trust model is weaker than an official Atlassian integration because it recommends a community MCP server that receives Jira/Confluence credentials via a runtime npx install. No clear exfiltration or hidden behavior is present, yet the combination of third-party code execution and credential forwarding makes the skill medium-risk.