atlassian-mcp
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill defines automated workflows for issue triaging, documentation synchronization, and meeting note integration that ingest content from external sources. This creates a surface for indirect prompt injection, where malicious instructions hidden in a Jira issue's description or a Confluence page could attempt to influence the agent's automated actions.
- Ingestion points: Content is ingested through tools like
jira_get_issue(fetching summaries and descriptions) andconfluence_get_page(fetching page content) as seen inreferences/common-workflows.md. - Boundary markers: The implementation lacks explicit delimiters or instructions to the agent to disregard instructions embedded within the ingested data.
- Capability inventory: The skill provides broad write access to Atlassian APIs, including capabilities to create/update issues and modify wiki pages across its reference files.
- Sanitization: An
escapeHtmlutility is provided, but it is used for formatting HTML storage payloads rather than sanitizing input data for secure prompt interpolation. - [EXTERNAL_DOWNLOADS]: The documentation provides configuration and installation steps for several external MCP server implementations from the community.
- Packages: References the installation of
@sooperset/mcp-atlassian(npm),mcp-atlassian(PyPI), andatlassian-mcp(npm) to enable the MCP integration features.
Audit Metadata