OpenClaw confluence

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: 99f5537c4eebbc623a95fa6f24fa2c2f53e8e1f245a7d72f606287e44fa28a69
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is suspicious due to its explicit instruction in SKILL.md and implementation in scripts/migrate-from-confluence-cli.js to access and read a sensitive configuration file located outside the skill's directory, specifically `~/.confluence-cli/config.json`. This script parses the file to extract Confluence credentials (domain, email, API token) and writes them into the skill's local `.env` file. While the stated intent is 'migration' and not external exfiltration, accessing sensitive user files from the home directory without explicit, granular consent is a high-risk behavior and a privacy concern.