Skills/npm/mcp-server-atlassian-confluence

mcp-server-atlassian-confluence@3.3.0

CAUTION

Publisher claims: "Node.js/TypeScript MCP server for Atlassian Confluence. Provides tools enabling AI systems (LLMs) to list/get spaces & pages (content formatted as Markdown) and search via CQL. Connects AI seamlessly to Confluence knowledge bases using the standard MCP in" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher aashari · joined 0 days agoInstalls 29,579Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.9sprocessdependency install exit 1
1.0sprocessexec /usr/bin/timeout
1.0sprocessexited 1: Node.js v22.23.4
1.0sclaimedno tools/list reply (exit 1)
1.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:154 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagepackage.json:27 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:48 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/utils/config.util.js:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageCHANGELOG.md:357 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsCHANGELOG.md:92 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagepackage.json:28 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/utils/config.util.js:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:45 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:51 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:27 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packageCHANGELOG.md:350 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/utils/config.util.d.ts:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/utils/config.util.d.ts:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/utils/config.util.js:56 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
File permission modification commandCHANGELOG.md:153 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Access to sensitive file pathsdist/utils/config.util.js:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:149 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageCHANGELOG.md:371 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/utils/config.util.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
File permission modification command.releaserc.json:10 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:347 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:85 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:5 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:78 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04