mk:confluence-search — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mk:confluence-search (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Forks to the confluence-search agent. CQL is positional on search (and on validate / build helpers); flags everywhere else. The agent enforces CQL sanitization for any user-derived term via scripts/cql-sanitize.sh.
../../agents/confluence-search.md../confluence/references/{install-and-auth,cli-idioms,safety-framework}.mdreferences/cql-patterns.md — canonical CQL templates (curated)references/cql-reference.md — full CQL operator + function referencereferences/search-examples.md — practical query examples per scenariomk:confluence-bulk (write-side bulk by CQL — same dry-run discipline), mk:confluence-spec-analyst (read-only deep analysis), mk:confluence-page (single-page CRUD)confluence-as does NOT export _escape_cql_string — it lives as a private function in the search command module. The cql-sanitize.sh shared script is the only safety gate. Use it unconditionally for any user-derived CQL term. [from research]--quiet global flag is declared in confluence-as but unimplemented (never read in main). Don't rely on it; redirect stderr explicitly when needed. [from research]"confluence-assistant" collides with upstream Confluence-Assistant-Skills if both tools are installed. We never use keychain (env-only via wrapper) so we're not affected — but document the collision so users running both know. [from research]~/.confluence-skills/cache/) is opaque. Don't depend on cache state — confluence-as ops cache-clear is safe to invoke if behavior looks stale. [from research]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.