confluence-space

Warn

Audited by Socket on May 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated purpose is coherent, but its actual execution depends on an unverified `confluence` CLI that does not match the official Atlassian tooling/docs found in the evidence. No clear credential theft or exfiltration is shown, yet the undocumented dependency plus irreversible delete capability makes this a high security-risk skill rather than a benign documentation-only guide.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
May 3, 2026, 07:15 PM
Package URL
pkg:socket/skills-sh/grandcamel%2FConfluence-Assistant-Skills%2Fconfluence-space%2F@e924274f29860724b5e11f1053e2ee6c35fa3e92