confluence-space
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interfaces with the
confluenceCLI tool to perform space management tasks. This includes the high-impactconfluence space deletecommand, which is noted in the documentation as irreversible. - [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by retrieving space-related data from an external environment.
- Ingestion points: The agent reads external data using
confluence space list,confluence space get, andconfluence space contentas defined inSKILL.md. - Boundary markers: There are no delimiters or instructions provided to help the agent distinguish between data and instructions.
- Capability inventory: The skill provides administrative capabilities including
confluence space updateandconfluence space delete(found inSKILL.md). - Sanitization: No sanitization or filtering logic is implemented for the data retrieved from Confluence.
Audit Metadata