Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Confluence

v1.0.2

Read and write Confluence pages, search content, manage labels and comments. Use when user mentions Confluence, wiki, documentation, pages, or knowledge base.

0· 147·0 current·0 all-time
byVuk Pejović@pejovicvuk

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for pejovicvuk/atlassian-confluence.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Confluence" (pejovicvuk/atlassian-confluence) from ClawHub.
Skill page: https://clawhub.ai/pejovicvuk/atlassian-confluence
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: ATLASSIAN_URL, ATLASSIAN_EMAIL, ATLASSIAN_API_TOKEN
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install atlassian-confluence

ClawHub CLI

Package manager switcher

npx clawhub@latest install atlassian-confluence
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (Confluence) align with behavior: the included shell script talks only to Confluence REST endpoints. Minor inconsistency: the script requires curl and python3 (declared in the script header) but the registry metadata lists no required binaries — the script will fail if those binaries are absent.
Instruction Scope
SKILL.md instructs the agent to run the bundled confluence-cli.sh and to use standard Confluence API calls. The instructions do not ask the agent to read unrelated files, other credentials, or to send data to third-party endpoints outside ATLASSIAN_URL.
Install Mechanism
No install spec (instruction-only) and the script is bundled as a file. This is low-risk, but because the script will be executed from disk, users should confirm the script's origin (no homepage/source provided).
Credentials
Required env vars (ATLASSIAN_URL, ATLASSIAN_EMAIL, ATLASSIAN_API_TOKEN) are exactly what a Confluence client needs. No unrelated secrets or extra services are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It cannot force inclusion in all agent runs.
Assessment
This skill appears coherent and limited to Confluence Cloud operations. Before installing, verify you trust the skill source (no homepage or publisher info is provided). Make sure curl and python3 are available in the runtime environment (the registry metadata doesn't declare them). Understand that the ATLASSIAN_API_TOKEN and email will be used as basic auth against the ATLASSIAN_URL — only provide credentials you are willing to let this skill use. If you prefer more assurance, review the bundled confluence-cli.sh yourself or use an official/contributed Confluence client with a known provenance.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📄 Clawdis
EnvATLASSIAN_URL, ATLASSIAN_EMAIL, ATLASSIAN_API_TOKEN
latestvk97apfqd39jnbv815phg4y4wwh83zpc6
147downloads
0stars
3versions
Updated 3w ago
v1.0.2
MIT-0

Confluence Cloud

Read and write Confluence Cloud pages via confluence-cli.sh. Uses the same Atlassian credentials as Jira.

Script location: {baseDir}/confluence-cli.sh

Commands

List spaces

{baseDir}/confluence-cli.sh spaces

Returns: [{ id, key, name, type, status }]

Note: most commands use the space id (numeric), not the key.

List pages in a space

{baseDir}/confluence-cli.sh pages 98312
{baseDir}/confluence-cli.sh pages 98312 50

Returns: [{ id, title, status, parentId, authorId, created, url }]

Default limit: 25.

Get page content

{baseDir}/confluence-cli.sh get 12345

Returns: { id, title, status, spaceId, parentId, version, body_text, body_html, truncated, created, url }

body_text is HTML-stripped plain text (first 3000 chars). body_html is raw storage format (first 5000 chars). If truncated is true, the page has more content than shown.

Find page by title

{baseDir}/confluence-cli.sh get-by-title 98312 "Deployment Runbook"

Returns page content directly. Use this when you know the exact page title — avoids a separate search + get.

List child pages

{baseDir}/confluence-cli.sh children 12345

Returns: [{ id, title, status, url }]

Search with CQL

{baseDir}/confluence-cli.sh search "space=ENG AND type=page AND title~\"architecture\""
{baseDir}/confluence-cli.sh search "label=runbook" 20

Common CQL patterns:

  • Pages in a space: space=ENG AND type=page
  • By title: title~"deployment guide"
  • By label: label=runbook
  • Recently modified: lastModified > now("-7d")
  • By creator: creator=currentUser() AND type=page

Returns: { total, results: [{ id, title, type, space, url }] }

Create page

{baseDir}/confluence-cli.sh create --space 98312 --title "Deployment Runbook" --parent 12345 --body "<h2>Steps</h2><p>1. Pull latest main...</p>"

Required: --space, --title. Optional: --parent (page ID to nest under), --body (HTML storage format).

Returns: { id, title, url }

Update page

{baseDir}/confluence-cli.sh update 12345 --title "Updated Title" --body "<p>New content</p>"

Auto-increments the version number.

Returns: { id, title, version, url }

Get page comments

{baseDir}/confluence-cli.sh comments 12345

Returns: { count, comments: [{ id, body, created, version }] }

Add comment to page

{baseDir}/confluence-cli.sh add-comment 12345 "This section needs updating after the API migration"

Returns: { id, pageId, created }

List attachments

{baseDir}/confluence-cli.sh attachments 12345

Returns: [{ id, title, mediaType, fileSize, downloadUrl }]

Get page labels

{baseDir}/confluence-cli.sh labels 12345

Returns: [{ name, prefix }]

Add labels

{baseDir}/confluence-cli.sh add-labels 12345 "runbook,production,v2"

Labels are comma-separated.

Exploration Rules

When working with Confluence:

  1. Search first — use search with CQL to find pages. Do not list all pages in a space and scan through them.
  2. Use get-by-title when you know the page name — it's one call instead of search + get.
  3. Check truncated — if a page is truncated, tell the user the content was too long to load fully.
  4. Use children to navigate page hierarchies instead of listing the whole space.
  5. Before creating, always search to check if a similar page already exists.

Body Format

Confluence uses HTML "storage format":

  • <p>text</p> — paragraph
  • <h2>text</h2> — heading
  • <table><tbody><tr><th>Header</th></tr><tr><td>Cell</td></tr></tbody></table> — table
  • <strong>text</strong> — bold
  • <a href="url">text</a> — link
  • <ac:structured-macro ac:name="jira"><ac:parameter ac:name="key">PROJ-123</ac:parameter></ac:structured-macro> — Jira link macro

Rules

  • All output is JSON to stdout, errors to both stderr and stdout.
  • Never delete pages without explicit user confirmation.
  • Always search before creating to avoid duplicates.
  • Results are paginated: pages (max 25), spaces (max 25), comments (max 25). Tell the user if results may be incomplete.

Comments

Loading comments...