ClawHub

Confluence

v1.1.0

Search and manage Confluence pages and spaces using confluence-cli. Read documentation, create pages, and navigate spaces.

⭐ 2· 3.3k·21 current·21 all-time
by@francisbrero
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the requirements: the skill expects the 'confluence' binary, installs the 'confluence-cli' npm package, and requires a Confluence API token (CONFLUENCE_TOKEN). These are appropriate for a Confluence CLI integration.
ℹ
Instruction Scope
Runtime instructions stay within scope (install CLI, create/get Atlassian API token, run confluence commands). One minor inconsistency: the SKILL metadata declares CONFLUENCE_TOKEN as required, but the SKILL.md shows using interactive 'confluence init' to save the token (it does not document exporting CONFLUENCE_TOKEN). The instructions also note local config at ~/.confluence-cli/config.json where the token may be stored—users should be aware this file will contain the token and protect it accordingly.
✓
Install Mechanism
Install spec uses npm (confluence-cli), which is expected for this tool. This is a common, traceable package-install path; no arbitrary direct downloads or extracted archives are used. As with any third-party npm package, review the package/publisher if you require high assurance.
ℹ
Credentials
Only CONFLUENCE_TOKEN is requested as a credential, which is proportional. Small mismatch: metadata requires CONFLUENCE_TOKEN but the README-style instructions rely on interactive CLI configuration; the skill may accept either environment variable or stored config. No unrelated secrets are requested.
✓
Persistence & Privilege
always is false and there are no unusual persistence requests. The CLI stores configuration at ~/.confluence-cli/config.json (normal for a CLI). The skill does not request system-wide changes or other skills' settings.
Assessment
This skill appears to be what it says: a wrapper for the confluence-cli npm tool. Before installing, verify the npm package and author (review the package page and GitHub repo linked in the metadata). Use a least-privilege Atlassian API token (or a dedicated service account) rather than your primary account token. Be aware the CLI will store the API token in ~/.confluence-cli/config.json unless you provide it via CONFLUENCE_TOKEN—ensure that file has restrictive permissions. If you want non-interactive/automated runs, export CONFLUENCE_TOKEN in the environment (confirm the CLI supports that). If you require higher assurance, audit the npm package source code and the package publisher before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk976mkw5z185zh2zr2382ne7097zc6g4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📄 Clawdis
Binsconfluence
EnvCONFLUENCE_TOKEN
Primary envCONFLUENCE_TOKEN

Install

Install confluence-cli (npm)
Bins: confluence
npm i -g confluence-cli

Comments