atlassian-mcp

SUSPICIOUS. The stated Atlassian/MCP purpose is coherent, but the install and execution path is not: the skill recommends an npm package invocation that does not match the upstream project’s documented distribution, then forwards high-value Atlassian credentials into that third-party executable. This is disproportionate install-trust risk and weak data-flow integrity, even though the rest of the guidance is operationally reasonable.