Is atlassian safe to install?

SaferSkills independently audited atlassian (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/atlassian/SKILL.md · 1 file

skills/atlassian/SKILL.md6.2 KB · Markdown

name: atlassian

description: |

Manage Jira issues and Confluence wiki pages in Atlassian Cloud.

Use when: (1) searching/creating/updating Jira issues with JQL, (2) searching/reading/creating Confluence pages

with CQL, (3) managing Jira workflows, transitions, and comments, (4) browsing Confluence spaces and page

hierarchies. Supports OAuth 2.1 via MCP server (recommended) or API token authentication (fallback).

Atlassian (Jira + Confluence)

Full Jira and Confluence integration with two authentication methods:

OAuth 2.1 via Atlassian MCP server — browser-based consent, auto-refresh tokens, calls MCP tools
API token — email + token stored in keyring, calls REST API directly

First-Time Setup

Option 1: OAuth 2.1 via MCP Server (Recommended)

No API tokens or instance URLs needed. Uses dynamic client registration and PKCE.

pip install -r requirements.txt
python scripts/auth.py login --oauth

A browser opens for Atlassian authorization. Select which products (Jira, Confluence, Compass) to grant access. Tokens are stored in the system keyring and auto-refresh when expired.

Check status:

python scripts/auth.py status

Option 2: API Token (Fallback)

For environments where browser-based OAuth isn't available.

pip install -r requirements.txt
python scripts/auth.py login

Follow the prompts to enter your Atlassian URL, email, and API token. Credentials are stored securely in the system keyring.

Create an API token at: https://id.atlassian.com/manage-profile/security/api-tokens

Check authentication status:

python scripts/auth.py status

Logout (clears both OAuth and API token credentials):

python scripts/auth.py logout

Backend Selection

The scripts automatically detect which backend to use based on your auth type:

OAuth → MCP backend (calls Atlassian MCP server tools)
API token → REST backend (calls Atlassian REST API directly)

All commands work identically regardless of backend.

Jira (scripts/jira.py)

Search issues with JQL

python scripts/jira.py search "project = DEV AND status = Open"
python scripts/jira.py search "assignee = currentUser() ORDER BY updated DESC" --limit 10

Get issue details

python scripts/jira.py get DEV-123

Create an issue

python scripts/jira.py create --project DEV --summary "Fix login bug" --type Bug
python scripts/jira.py create --project DEV --summary "New feature" --type Story \
  --description "Details here" --priority High --assignee "[email protected]" --labels "backend,urgent"

Update an issue

python scripts/jira.py update DEV-123 --summary "Updated summary" --priority High
python scripts/jira.py update DEV-123 --assignee "[email protected]"

Transition issue status

python scripts/jira.py transition DEV-123 "In Progress"
python scripts/jira.py transition DEV-123 "Done"

Add and list comments

python scripts/jira.py comment DEV-123 --add "This is a comment"
python scripts/jira.py comment DEV-123 --list

List projects and statuses

python scripts/jira.py list-projects
python scripts/jira.py list-statuses DEV

Test authentication

python scripts/jira.py auth-info

List available MCP tools (OAuth only)

python scripts/jira.py list-tools

Confluence (scripts/confluence.py)

Search pages

python scripts/confluence.py search "deployment guide"
python scripts/confluence.py search "type=page AND space=DEV AND text~\"deployment\""
python scripts/confluence.py search "onboarding" --limit 10

Read a page

python scripts/confluence.py read <page-id>
python scripts/confluence.py read <page-id> --json

List spaces

python scripts/confluence.py list-spaces
python scripts/confluence.py list-spaces --limit 50

Get space details

python scripts/confluence.py get-space <space-id>

List pages in a space

python scripts/confluence.py list-pages --space-id <space-id>

Create a page

python scripts/confluence.py create --title "New Page" --space-id <space-id>
python scripts/confluence.py create --title "Guide" --space-id <id> --body "<p>Content here</p>"
python scripts/confluence.py create --title "Child" --space-id <id> --parent-id <parent-id>

Update a page

python scripts/confluence.py update <page-id> --title "Updated Title"
python scripts/confluence.py update <page-id> --body "<p>New content</p>"

Get child pages

python scripts/confluence.py get-children <page-id>

Test authentication

python scripts/confluence.py auth-info

List available MCP tools (OAuth only)

python scripts/confluence.py list-tools

Operations Reference

Jira

Command	Description	Required Args
search	Search issues with JQL	jql
get	Get issue details	issue_key
create	Create new issue	--project, --summary, --type
update	Update existing issue	issue_key
transition	Change issue status	issue_key, status
comment	Add or list comments	issue_key
list-projects	List accessible projects	-
list-statuses	List statuses for project	project_key
auth-info	Test API connection	-
list-tools	List MCP tools (OAuth only)	-

Confluence

Command	Description	Required Args
search	Search using CQL	query
read	Get page content	page_id
list-spaces	List all spaces	-
get-space	Get space details	space_id
list-pages	List pages in a space	--space-id
create	Create new page	--title, --space-id
update	Update existing page	page_id
get-children	Get child pages	page_id
auth-info	Test API connection	-
list-tools	List MCP tools (OAuth only)	-

JSON Output

Add --json flag to any script command for machine-readable output.

Token Management

Credentials stored securely using the system keyring:

macOS: Keychain
Windows: Windows Credential Locker
Linux: Secret Service API

Service name: atlassian-skill

OAuth tokens auto-refresh when expired (if refresh token is available).

atlassian— agent skill

Is atlassian safe to install?

Atlassian (Jira + Confluence)

First-Time Setup

Option 1: OAuth 2.1 via MCP Server (Recommended)

Option 2: API Token (Fallback)

Backend Selection

Jira (scripts/jira.py)

Search issues with JQL

Get issue details

Create an issue

Update an issue

Transition issue status

Add and list comments

List projects and statuses

Test authentication

List available MCP tools (OAuth only)

Confluence (scripts/confluence.py)

Search pages

Read a page

List spaces

Get space details

List pages in a space

Create a page

Update a page

Get child pages

Test authentication

List available MCP tools (OAuth only)

Operations Reference

Jira

Confluence

JSON Output

Token Management

Audit the pieces. Scan the whole. Decide.