atlassian-mcp

Warn

Audited by Socket on Mar 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, but its practical footprint relies on an unofficial MCP server and forwards Atlassian tokens into that third-party process. The install-path mismatch and credential forwarding make the setup higher risk than a normal documentation skill, even though the eventual API targets are legitimate Atlassian services.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Mar 24, 2026, 01:37 AM
Package URL
pkg:socket/skills-sh/farmage%2Fopencode-skills%2Fatlassian-mcp%2F@d23e73e7fee09709289a62983f30ccac449cb62a