Skills/npm/mcp-atlassian

mcp-atlassian@2.1.0

CAUTION

Publisher claims: "MCP server for Atlassian (Confluence and Jira) integration" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher vijay-duke · joined 0 days agoInstalls 16,083Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH

Access to sensitive file pathsREADME.md:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:504 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsREADME.md:398 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

URL with embedded credentialsdist/utils/simple-pdf-export.js:9 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Access to sensitive file pathsREADME.md:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05