atlassian-jira-confluence
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
pip installviasubprocess.runin thescripts/setup_check.pyfile to ensure the necessary SDK is available. This is a standard and safe administrative task for tool initialization and does not use a shell environment, reducing injection risk. - [EXTERNAL_DOWNLOADS]: The skill relies on the
atlassian-python-apipackage from PyPI, which is the well-known community standard for interacting with Atlassian products. This is considered a safe dependency. - [CREDENTIALS_SAFE]: The skill correctly manages user authentication by reading Atlassian PAT tokens from environment variables or a specific configuration file (
.atlassian.json). It explicitly advises against hardcoding secrets, which is a security best practice. - [SAFE]: No malicious obfuscation, exfiltration, or persistence patterns were found during the analysis. The skill's behavior is consistent with its stated purpose of providing Atlassian API integration.
Audit Metadata