Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

confluence-expert

v1.0.0

Atlassian Confluence expert for creating and managing spaces, knowledge bases, and documentation. Configures space permissions and hierarchies, creates page...

0· 318·5 current·5 all-time
byAlireza Rezvani@alirezarezvani

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for alirezarezvani/confluence-expert.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "confluence-expert" (alirezarezvani/confluence-expert) from ClawHub.
Skill page: https://clawhub.ai/alirezarezvani/confluence-expert
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install confluence-expert

ClawHub CLI

Package manager switcher

npx clawhub@latest install confluence-expert
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description and SKILL.md describe creating spaces, pages, permission changes and using a 'Confluence MCP Server' API. To perform those actions an agent would normally need Confluence endpoints and credentials (API token, base URL, account). The skill declares no required env vars or primary credential, which is inconsistent with the claimed capabilities.
!
Instruction Scope
SKILL.md contains pseudo-API calls (create_space, create_page, update_page, delete_page, search, get_children, add_label) and verification steps that presuppose direct access to a Confluence instance. The instructions do not specify how credentials or endpoints are provided, and they reference helper files (MACROS.md, PERMISSIONS.md) that are not present by those exact names — a minor mismatch. The included scripts operate on local JSON input (benign), but the SKILL.md's operational examples imply network/API operations without explaining auth/config.
Install Mechanism
No install spec; everything is instruction-only and the code files are included in the package. No external downloads or obscure install URLs are used, which lowers installation risk. The two Python scripts are self-contained utilities that read JSON and produce output.
!
Credentials
The skill requests no environment variables or secrets, yet its functionality (managing Confluence spaces/pages/permissions and embedding Jira reports) reasonably requires credentials and a base URL. This is disproportionate and ambiguous: either the skill is only a documentation/template bundle (no credentials needed) or it's intended to perform live API actions but fails to declare the required secrets (CONFLUENCE_BASE_URL, CONFLUENCE_API_TOKEN or similar).
Persistence & Privilege
always is false and there is no install script or behavior that modifies other skills or system-wide settings. Autonomous invocation is allowed by default (normal), but not combined with other elevated privileges here.
What to consider before installing
Before installing or enabling this skill, ask the publisher these questions and take these steps: - Clarify runtime model: will the agent actually call your Confluence instance or only provide templates and offline guidance? SKILL.md implies live API operations but the package declares no credentials. - If the skill will perform API calls, require explicit configuration: a CONFLUENCE_BASE_URL, CONFLUENCE_API_TOKEN (or username/password) and an explanation of required permission scopes. Do not provide org-wide admin credentials; test with a least-privilege account and a sandbox Confluence instance first. - Inspect and run the included Python scripts locally with sample JSON to verify they only process local data and do not make network calls. They appear to be local analyzers that accept pages.json/team_info.json inputs. - Confirm where the skill would send data and whether it stores or transmits audit results externally. The package contains no obvious remote endpoints, but the SKILL.md examples imply API usage; verify network behavior before granting credentials. - Ask the publisher for a source/homepage and an identity you can verify. Unknown source + capability to modify Confluence spaces is higher risk. - If you decide to proceed, restrict the skill's credentials to a test space and monitor activity; rotate credentials after testing. Given the mismatch between claimed live Confluence operations and the lack of declared credentials/config, treat this package as suspicious until the author clarifies intended runtime behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk972733cxpn20pnygqerqsx0px82py29
318downloads
0stars
2versions
Updated 14h ago
v1.0.0
MIT-0

Atlassian Confluence Expert

Master-level expertise in Confluence space management, documentation architecture, content creation, macros, templates, and collaborative knowledge management.

Atlassian MCP Integration

Primary Tool: Confluence MCP Server

Key Operations:

// Create a new space
create_space({ key: "TEAM", name: "Engineering Team", description: "Engineering team knowledge base" })

// Create a page under a parent
create_page({ spaceKey: "TEAM", title: "Sprint 42 Notes", parentId: "123456", body: "<p>Meeting notes in storage-format HTML</p>" })

// Update an existing page (version must be incremented)
update_page({ pageId: "789012", version: 4, body: "<p>Updated content</p>" })

// Delete a page
delete_page({ pageId: "789012" })

// Search with CQL
search({ cql: 'space = "TEAM" AND label = "meeting-notes" ORDER BY lastModified DESC' })

// Retrieve child pages for hierarchy inspection
get_children({ pageId: "123456" })

// Apply a label to a page
add_label({ pageId: "789012", label: "archived" })

Integration Points:

  • Create documentation for Senior PM projects
  • Support Scrum Master with ceremony templates
  • Link to Jira issues for Jira Expert
  • Provide templates for Template Creator

See also: MACROS.md for macro syntax reference, TEMPLATES.md for full template library, PERMISSIONS.md for permission scheme details.

Workflows

Space Creation

  1. Determine space type (Team, Project, Knowledge Base, Personal)
  2. Create space with clear name and description
  3. Set space homepage with overview
  4. Configure space permissions:
    • View, Edit, Create, Delete
    • Admin privileges
  5. Create initial page tree structure
  6. Add space shortcuts for navigation
  7. Verify: Navigate to the space URL and confirm the homepage loads; check that a non-admin test user sees the correct permission level
  8. HANDOFF TO: Teams for content population

Page Architecture

Best Practices:

  • Use page hierarchy (parent-child relationships)
  • Maximum 3 levels deep for navigation
  • Consistent naming conventions
  • Date-stamp meeting notes

Recommended Structure:

Space Home
├── Overview & Getting Started
├── Team Information
│   ├── Team Members & Roles
│   ├── Communication Channels
│   └── Working Agreements
├── Projects
│   ├── Project A
│   │   ├── Overview
│   │   ├── Requirements
│   │   └── Meeting Notes
│   └── Project B
├── Processes & Workflows
├── Meeting Notes (Archive)
└── Resources & References

Template Creation

  1. Identify repeatable content pattern
  2. Create page with structure and placeholders
  3. Add instructions in placeholders
  4. Format with appropriate macros
  5. Save as template
  6. Share with space or make global
  7. Verify: Create a test page from the template and confirm all placeholders render correctly before sharing with the team
  8. USE: References for advanced template patterns

Documentation Strategy

  1. Assess current documentation state
  2. Define documentation goals and audience
  3. Organize content taxonomy and structure
  4. Create templates and guidelines
  5. Migrate existing documentation
  6. Train teams on best practices
  7. Monitor usage and adoption
  8. REPORT TO: Senior PM on documentation health

Knowledge Base Management

Article Types:

  • How-to guides
  • Troubleshooting docs
  • FAQs
  • Reference documentation
  • Process documentation

Quality Standards:

  • Clear title and description
  • Structured with headings
  • Updated date visible
  • Owner identified
  • Reviewed quarterly

Essential Macros

Full macro reference with all parameters: see MACROS.md.

Content Macros

Info, Note, Warning, Tip:

{info}
Important information here
{info}

Expand:

{expand:title=Click to expand}
Hidden content here
{expand}

Table of Contents:

{toc:maxLevel=3}

Excerpt & Excerpt Include:

{excerpt}
Reusable content
{excerpt}

{excerpt-include:Page Name}

Dynamic Content

Jira Issues:

{jira:JQL=project = PROJ AND status = "In Progress"}

Jira Chart:

{jirachart:type=pie|jql=project = PROJ|statType=statuses}

Recently Updated:

{recently-updated:spaces=@all|max=10}

Content by Label:

{contentbylabel:label=meeting-notes|maxResults=20}

Collaboration Macros

Status:

{status:colour=Green|title=Approved}

Task List:

{tasks}
- [ ] Task 1
- [x] Task 2 completed
{tasks}

User Mention:

@username

Date:

{date:format=dd MMM yyyy}

Page Layouts & Formatting

Two-Column Layout:

{section}
{column:width=50%}
Left content
{column}
{column:width=50%}
Right content
{column}
{section}

Panel:

{panel:title=Panel Title|borderColor=#ccc}
Panel content
{panel}

Code Block:

{code:javascript}
const example = "code here";
{code}

Templates Library

Full template library with complete markup: see TEMPLATES.md. Key templates summarised below.

TemplatePurposeKey Sections
Meeting NotesSprint/team meetingsAgenda, Discussion, Decisions, Action Items (tasks macro)
Project OverviewProject kickoff & statusQuick Facts panel, Objectives, Stakeholders table, Milestones (Jira macro), Risks
Decision LogArchitectural/strategic decisionsContext, Options Considered, Decision, Consequences, Next Steps
Sprint RetrospectiveAgile ceremony docsWhat Went Well (info), What Didn't (warning), Action Items (tasks), Metrics

Space Permissions

Full permission scheme details: see PERMISSIONS.md.

Permission Schemes

Public Space:

  • All users: View
  • Team members: Edit, Create
  • Space admins: Admin

Team Space:

  • Team members: View, Edit, Create
  • Team leads: Admin
  • Others: No access

Project Space:

  • Stakeholders: View
  • Project team: Edit, Create
  • PM: Admin

Content Governance

Review Cycles:

  • Critical docs: Monthly
  • Standard docs: Quarterly
  • Archive docs: Annually

Archiving Strategy:

  • Move outdated content to Archive space
  • Label with "archived" and date
  • Maintain for 2 years, then delete
  • Keep audit trail

Content Quality Checklist:

  • Clear, descriptive title
  • Owner/author identified
  • Last updated date visible
  • Appropriate labels applied
  • Links functional
  • Formatting consistent
  • No sensitive data exposed

Decision Framework

When to Escalate to Atlassian Admin:

  • Need org-wide template
  • Require cross-space permissions
  • Blueprint configuration
  • Global automation rules
  • Space export/import

When to Collaborate with Jira Expert:

  • Embed Jira queries and charts
  • Link pages to Jira issues
  • Create Jira-based reports
  • Sync documentation with tickets

When to Support Scrum Master:

  • Sprint documentation templates
  • Retrospective pages
  • Team working agreements
  • Process documentation

When to Support Senior PM:

  • Executive report pages
  • Portfolio documentation
  • Stakeholder communication
  • Strategic planning docs

Handoff Protocols

FROM Senior PM:

  • Documentation requirements
  • Space structure needs
  • Template requirements
  • Knowledge management strategy

TO Senior PM:

  • Documentation coverage reports
  • Content usage analytics
  • Knowledge gaps identified
  • Template adoption metrics

FROM Scrum Master:

  • Sprint ceremony templates
  • Team documentation needs
  • Meeting notes structure
  • Retrospective format

TO Scrum Master:

  • Configured templates
  • Space for team docs
  • Training on best practices
  • Documentation guidelines

WITH Jira Expert:

  • Jira-Confluence linking
  • Embedded Jira reports
  • Issue-to-page connections
  • Cross-tool workflow

Best Practices

Organization:

  • Consistent naming conventions
  • Meaningful labels
  • Logical page hierarchy
  • Related pages linked
  • Clear navigation

Maintenance:

  • Regular content audits
  • Remove duplication
  • Update outdated information
  • Archive obsolete content
  • Monitor page analytics

Analytics & Metrics

Usage Metrics:

  • Page views per space
  • Most visited pages
  • Search queries
  • Contributor activity
  • Orphaned pages

Health Indicators:

  • Pages without recent updates
  • Pages without owners
  • Duplicate content
  • Broken links
  • Empty spaces

Related Skills

  • Jira Expert (project-management/jira-expert/) — Jira issue macros and linking complement Confluence docs
  • Atlassian Templates (project-management/atlassian-templates/) — Template patterns for Confluence content creation

Comments

Loading comments...