Is arkiant/jiraandconfluence-skill safe?
Yes. arkiant/jiraandconfluence-skill is safe to install. Oathe's behavioral security audit gave the jiraandconfluence-skill skill by arkiant a trust score of 93/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/arkiant/jiraandconfluence-skill
Is arkiant/jiraandconfluence-skill safe to install?
This is a legitimate Jira and Confluence integration skill that provides basic API wrapper functionality through shell scripts. The skill contains no malicious code and exhibits clean installation behavior with no data exfiltration attempts.
What security issues were found in arkiant/jiraandconfluence-skill?
Category Scores
Findings (4)
MEDIUM Placeholder domain in API scripts -5 ▶
The shell scripts contain placeholder domain 'your-domain.atlassian.net' which would need to be modified for actual use, potentially causing configuration issues
LOW Executable shell scripts present -15 ▶
The skill contains executable shell scripts that make API calls and source other scripts, which poses some execution risk
LOW API token exposure in process lists -10 ▶
API tokens are passed directly to curl commands, which may expose them in process lists during execution
LOW Missing input validation -5 ▶
Shell scripts accept user input without validation, which could potentially lead to command injection if not handled properly by the calling system
Should I install arkiant/jiraandconfluence-skill?
Oathe's verdict for arkiant/jiraandconfluence-skill is SAFE with a trust score of 93/100. Recommendation: Install.