atlassian-mcp

Warn

Audited by Socket on Oct 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The official Atlassian-hosted MCP path is coherent and low concern, but the skill also recommends a community mcp-atlassian server that is not operated by Atlassian and receives Jira/Confluence personal tokens via environment variables. That third-party credential forwarding makes the overall skill medium-high risk despite otherwise aligned purpose and normal Atlassian data flows.

Confidence: 90%Severity: 80%
Audit Metadata
Analyzed At
Oct 27, 2026, 03:04 AM
Package URL
pkg:socket/skills-sh/jeffallan%2Fclaude-skills%2Fatlassian-mcp%2F@cffb8314595a6ac606feb3e0b7eebc85236ef18bf3a1bc7fd39b2f83770fd98e