Skills/Claude Code plugins/atlassian-twg-cli

atlassian-twg-cli@1.0.12

CAUTION

Publisher claims: "Teamwork Graph CLI is Atlassian's agent-first interface to your entire work context: Jira issues, Confluence pages, Bitbucket PRs, along with your connected third-party data sources. Purpose-built for coding agents like Claude Code (terminal or desktop), and powered by Atlassian's context graph. Try: "draft a Jira issue from this PR and link it to the epic." Using Claude Code in the browser? Install the Atlassian Rovo MCP plugin instead. Run /twg-setup after install to connect Atlassian Teamwork" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher atlassian-labs · joined 0 days agoInstalls 0Last detonated 54 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Pipe-to-shell patternvscode/src/test/installer.test.ts:14 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Pipe-to-shell patternskills/twg-setup/SKILL.md:22 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

MEDIUM

Remote installer piped to shellskills/twg-setup/SKILL.md:16 · Remote installer piped to shell

AST07

MEDIUM

Remote installer piped to shellvscode/src/test/installer.test.ts:14 · Remote installer piped to shell

AST07

MEDIUM

Remote installer piped to shellvscode/src/installer.ts:14 · Remote installer piped to shell

AST07

CRITICAL

Pipe-to-shell patternskills/twg-setup/SKILL.md:16 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

MEDIUM

Remote installer piped to shellopencode/generated/setup-guidance.ts:2 · Remote installer piped to shell

AST07

CRITICAL

Pipe-to-shell patternvscode/src/installer.ts:14 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Process kill commandskills/twg-setup/SKILL.md:107 · Process kill command — agent can terminate processes

AST05

MEDIUM

Remote installer piped to shellskills/twg-setup/SKILL.md:22 · Remote installer piped to shell

AST07

HIGH

Process kill commandopencode/generated/setup-guidance.ts:2 · Process kill command — agent can terminate processes

AST05