confluence-expert

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface detected.
  • Ingestion points: User-provided content for documentation, page titles, and space descriptions are processed by the skill in SKILL.md and README.md.
  • Boundary markers: Absent. The skill does not define clear delimiters or instructions for the agent to ignore embedded commands within user-provided documentation content.
  • Capability inventory: The skill employs powerful write capabilities via the Confluence MCP server, including create_page, update_page, and delete_page (SKILL.md).
  • Sanitization: There are no instructions for sanitizing, escaping, or validating the input provided by users before it is committed to the knowledge base.
  • [SAFE]: All referenced technical operations (space management, macro usage, and template application) are standard for Atlassian Confluence administration and use official tool integration patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 08:06 PM
Security Audit — agent-trust-hub — confluence-expert