atlassian-admin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited atlassian-admin (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
admin.atlassian.com > User management > Invite usersPOST /rest/api/3/user with {"emailAddress": "...", "displayName": "...","products": [...]}admin.atlassian.com > User management > Groups > [group] > Add membersadmin.atlassian.com > Products > [product] > Accessadmin.atlassian.com/o/{orgId}/users and can log inGET /rest/api/3/search?jql=assignee={accountId} to find open issuesGET /wiki/rest/api/user/{accountId}/property to find owned spaces/pagesProject settings > People > Change leadSpace settings > Overview > Edit space detailsJira > Issues > Bulk changeUser management > [user] > Managed contentadmin.atlassian.com > User management > [user] > Groupsadmin.atlassian.com > User management > [user] > DeactivateDELETE /rest/api/3/user?accountId={accountId}GET /rest/api/3/user?accountId={accountId} returns "active": falseadmin.atlassian.com > User management > Groups > Create groupPOST /rest/api/3/group with {"name": "..."}GET /rest/api/3/group/member?groupName={name}Jira Permission Schemes (Jira Settings > Issues > Permission Schemes):
Confluence Permission Schemes (Confluence Admin > Space permissions):
Best Practices:
admin.atlassian.com > Security > SAML single sign-on > Add SAML configurationadmin.atlassian.com > Security > Authentication policies > Enforce SSOadmin.atlassian.com > User provisioning > [IdP] > Enable SCIMsaml.login.success eventsadmin.atlassian.com > Security > Audit log > filter: SSOmarketplace.atlassian.comadmin.atlassian.com > Billing > Manage subscriptionsadmin.atlassian.com > Products > [product] > Apps > Find new appsGET /rest/plugins/1.0/ and health check passesJira (Jira Settings > System):
Project settings > Archive projectJira Settings > System > Indexing > Full re-indexJira Settings > Issues > WorkflowsJira Settings > System > System infoConfluence (Confluence Admin > Configuration):
Space tools > Overview > Archive spaceConfluence Admin > Orphaned pagesConfluence Admin > Cache managementMonitoring Cadence:
admin.atlassian.com > Products > [product] > HealthCommon Integrations:
Jira Settings > Apps > Slack integration — notifications for Jira and ConfluenceJira Settings > Apps > DVCS accounts — link commits to issuesadmin.atlassian.com > Apps > Microsoft Teamszoom-for-jirasalesforce-connectorConfiguration Steps:
Jira Settings > System > WebHooks > [webhook] > TestJira Settings > Issues)Issue Types: Create and manage org-wide issue types; define issue type schemes; standardize across projects Workflows: Create global workflow templates via Workflows > Add workflow; manage workflow schemes Custom Fields: Create org-wide custom fields at Custom fields > Add custom field; manage field configurations and context Notification Schemes: Configure default notification rules; create custom notification schemes; manage email templates
Confluence Admin)Blueprints & Templates: Create org-wide templates at Configuration > Global Templates and Blueprints; manage blueprint availability Themes & Appearance: Configure org branding at Configuration > Themes; customize logos and colors Macros: Enable/disable macros at Configuration > Macro usage; configure macro permissions
admin.atlassian.com > Security)Authentication:
Security > Authentication policies > EditSecurity > Session durationSecurity > API token controlsData Residency: Configure data location at admin.atlassian.com > Data residency > Pin products
Audit Logs: admin.atlassian.com > Security > Audit log
GET /admin/v1/orgs/{orgId}/audit-logadmin.atlassian.com > User management > Export usersSecurity > Authentication policies > Require 2FAJira: Project keys 3–4 uppercase letters (PROJ, WEB); issue types Title Case; custom fields prefixed (CF: Story Points) Confluence: Spaces use Team/Project prefix (TEAM: Engineering); pages descriptive and consistent; labels lowercase, hyphen-separated
Major Changes: Announce 2 weeks in advance; test in sandbox; create rollback plan; execute during off-peak; post-implementation review Minor Changes: Announce 48 hours in advance; document in change log; monitor for issues
Jira & Confluence: Daily automated backups; weekly manual verification; 30-day retention; offsite storage
Jira Settings > System > Backup system / Confluence Admin > Backup and RestoreRecovery Testing: Quarterly recovery drills; document procedures; measure RTO and RPO
Severity Levels:
Response Steps:
admin.atlassian.com > Products > [product] > Health and Atlassian Status Page)System Health: Active users (daily/weekly/monthly), storage utilization, API rate limits, integration health, response times
GET /admin/v1/orgs/{orgId}/users for user counts; product-specific analytics dashboardsUsage Analytics: Most active projects/spaces, content creation trends, user engagement, search patterns Compliance Metrics: User access review completion, security audit findings, failed login attempts, API token usage
Escalate to Atlassian Support: System outage, performance degradation org-wide, data loss/corruption, license/billing issues, complex migrations
Delegate to Product Experts:
Involve Security Team: Security incidents, unusual access patterns, compliance audit preparation, new integration security review
TO Jira Expert: New global workflows, custom fields, permission schemes, or automation capabilities available TO Confluence Expert: New global templates, space permission schemes, blueprints, or macros configured TO Senior PM: Usage analytics, capacity planning insights, cost optimization, security compliance status TO Scrum Master: Team access provisioned, board configuration options, automation rules, integrations enabled FROM All Roles: User access requests, permission changes, app installation requests, configuration support, incident reports
Primary Tools: Jira MCP, Confluence MCP
Admin Operations:
Integration Points:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.