Atlassian aCLI Reference Skill for Jira and Confluence
v1.0.1Reference guide for the Atlassian CLI (acli) - a command-line tool for interacting with Jira Cloud and Atlassian organization administration. Use this skill...
⭐ 1· 909·3 current·3 all-time
bypeetzweg/@peetzweg
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md is a straightforward reference for the Atlassian CLI (acli) and only documents CLI usage and safety rules — that purpose is coherent. However, the metadata in the registry lists no required binaries or env vars while the SKILL.md explicitly lists acli as a required tool and two optional env vars (API_TOKEN, API_KEY). That mismatch is inconsistent and should be resolved.
Instruction Scope
The instructions stay within the stated purpose: they explain how to verify acli, how to authenticate, show command examples, and include explicit safety rules for destructive operations and secret handling. They do not direct the agent to read unrelated system files or exfiltrate data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with no install spec or bundled binaries, which is the lowest-risk model for a CLI reference. Nothing in the files attempts to download or install code.
Credentials
The SKILL.md sensibly references optional Atlassian credentials (API_TOKEN for Jira automation, API_KEY for admin actions). Those env vars are proportionate to the documented functionality. The concern is that the registry metadata does not declare these env requirements, so the platform/user may not be made aware at install time that these secrets are relevant. Confirming the skill's declared requirements with the publisher (or updating metadata) is recommended.
Persistence & Privilege
The skill does not request permanent presence (always:false), does not install agents or modify other skills, and has no install steps that change system configuration. Normal autonomous invocation is allowed but not unusual and does not combine with other troubling privileges.
What to consider before installing
This appears to be a legitimate, instruction-only reference for the Atlassian CLI rather than executable code, but the registry metadata omits the tool/env requirements present in the SKILL.md. Before installing or using it: 1) verify the skill's source or contact the publisher (source/homepage unknown); 2) ensure you have acli installed locally and test commands in a safe/non-production account; 3) only provide API_TOKEN/API_KEY to the agent when necessary and prefer interactive OAuth for interactive tasks; 4) be cautious when running destructive commands — follow the skill's own safety rules (always confirm, run a search first, use --json to verify, avoid --yes on bulk operations); and 5) ask the platform owner to update the skill metadata to declare required tool(s)/env var(s) so the permission surface is transparent.Like a lobster shell, security has layers — review code before you run it.
latestvk9774ewvk47mh6t9b1r7cdr61d819vpn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.