confluence-expert
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface detected.
- Ingestion points: User-provided content for documentation, page titles, and space descriptions are processed by the skill in
SKILL.mdandREADME.md. - Boundary markers: Absent. The skill does not define clear delimiters or instructions for the agent to ignore embedded commands within user-provided documentation content.
- Capability inventory: The skill employs powerful write capabilities via the Confluence MCP server, including
create_page,update_page, anddelete_page(SKILL.md). - Sanitization: There are no instructions for sanitizing, escaping, or validating the input provided by users before it is committed to the knowledge base.
- [SAFE]: All referenced technical operations (space management, macro usage, and template application) are standard for Atlassian Confluence administration and use official tool integration patterns.
Audit Metadata