atlassian-jira-confluence

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes pip install via subprocess.run in the scripts/setup_check.py file to ensure the necessary SDK is available. This is a standard and safe administrative task for tool initialization and does not use a shell environment, reducing injection risk.
  • [EXTERNAL_DOWNLOADS]: The skill relies on the atlassian-python-api package from PyPI, which is the well-known community standard for interacting with Atlassian products. This is considered a safe dependency.
  • [CREDENTIALS_SAFE]: The skill correctly manages user authentication by reading Atlassian PAT tokens from environment variables or a specific configuration file (.atlassian.json). It explicitly advises against hardcoding secrets, which is a security best practice.
  • [SAFE]: No malicious obfuscation, exfiltration, or persistence patterns were found during the analysis. The skill's behavior is consistent with its stated purpose of providing Atlassian API integration.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 07:53 AM