atlassian-mcp
Warn
Audited by Socket on Oct 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The official Atlassian-hosted MCP path is coherent and low concern, but the skill also recommends a community mcp-atlassian server that is not operated by Atlassian and receives Jira/Confluence personal tokens via environment variables. That third-party credential forwarding makes the overall skill medium-high risk despite otherwise aligned purpose and normal Atlassian data flows.
Confidence: 90%Severity: 80%
Audit Metadata