Security audit

confluence-publish

Security checks across malware telemetry and agentic risk

Overview

This skill coherently publishes user-provided HTML to Confluence using user-provided Atlassian credentials, with no hidden persistence or unrelated data access found.

Install only if you want an agent to create or update Confluence pages. Use a least-privilege Atlassian API token, verify the target space and page title before publishing because matching pages are updated, and prefer pinned dependency versions or a reviewed lock file for reproducible installs.

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0 pytest>=7.0.0
Confidence: 95% confidence
Finding: The dependency is specified with only a lower bound, which allows future installs to resolve to different versions over time. This weakens supply-chain control and can unintentionally introduce breaking changes or newly disclosed vulnerable releases into the environment.

Unpinned Dependencies

Low

Category: Supply Chain
Content: requests>=2.28.0 pytest>=7.0.0
Confidence: 93% confidence
Finding: The pytest dependency is also unpinned, so builds are not reproducible and may silently pick up a problematic future release. Because pytest is primarily a development/test dependency, the direct runtime exposure is typically lower, but it still creates supply-chain and CI integrity risk.

Known Vulnerable Dependency: requests — 10 advisory(ies): CVE-2014-1830 (Exposure of Sensitive Information to an Unauthorized Actor in Requests); CVE-2024-47081 (Requests vulnerable to .netrc credentials leak via malicious URLs); CVE-2024-35195 (Requests `Session` object does not verify requests after making first request wi) +7 more

High

Category: Supply Chain
Confidence: 98% confidence
Finding: The requirement allows installation of the requests package without constraining to a version known to exclude listed advisories, and the scanner indicates multiple known CVEs affecting requests. In a skill that publishes content to Confluence over HTTP(S), requests is likely security-relevant because it may handle authentication, redirects, and outbound connections, increasing the practical risk of credential leakage or improper request handling if a vulnerable version is installed.

Known Vulnerable Dependency: pytest — 1 advisory(ies): CVE-2025-71176 (pytest has vulnerable tmpdir handling)

Low

Category: Supply Chain
Confidence: 85% confidence
Finding: The scanner reports a known advisory affecting pytest, and the current requirement does not exclude vulnerable versions. Since pytest is generally used during testing rather than production operation, the exploitability in deployed skill execution is lower, but it can still affect developer workstations or CI pipelines.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.