Confluence

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Confluence API skill, but it requires a Maton API key/OAuth connection and can read or change Confluence content when authorized.

Install only if you trust Maton with Confluence OAuth access and are comfortable letting the agent read and, with approval, modify Confluence content. Protect the MATON_API_KEY, use the intended connection ID when multiple accounts exist, and review every create, update, or delete request before approving it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If approved, the agent could modify or delete Confluence pages, comments, attachments, or related workspace content.

Why it was flagged

The skill can perform write and delete actions against Confluence content, which is powerful but directly matches the declared purpose.

Skill content
Use this skill when users want to create, read, update, or delete Confluence content, manage spaces, or work with comments and attachments.
Recommendation

Only approve write or delete actions after checking the exact Confluence site, resource, and intended change.

What this means

Whoever can use this skill with the API key may be able to access the connected Confluence account according to its OAuth permissions.

Why it was flagged

The skill requires a Maton API key and uses managed OAuth to access a connected Confluence account, which is expected but sensitive delegated authority.

Skill content
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Recommendation

Use a properly scoped Maton/Confluence connection, protect the MATON_API_KEY, and revoke unused connections.

What this means

Confluence content and metadata requested by the agent may be handled by the Maton API gateway as part of the integration.

Why it was flagged

The documented base URL routes Confluence API calls through Maton's gateway, so Confluence requests and responses may pass through that third-party service.

Skill content
https://api.maton.ai/confluence/{atlassian-api-path}
Recommendation

Review Maton's trust, privacy, and access policies before connecting sensitive Confluence workspaces.