跳到主要内容
知仓学习社ZHICANG

atlassian-mcp

Integrates with Atlassian products to manage project tracking and documentation via MCP protocol. Use when querying Jira issues with JQL filters, cr…

读凭据写文件执行命令联网严重 6 · 高危 3Jeffallan/claude-skills

它会碰到什么

扫了多少6 个文本文件,68 KB
它会碰到什么读凭据写文件执行命令联网
命中总数18 处
命中统计严重 6 · 高 3 · 中 0 · 低 0
逐条看命中(9 条严重或高危)
  • 严重 references/authentication-patterns.md:437cred-paths
    - Commit `.env` files with real credentials
  • 严重 references/authentication-patterns.md:442cred-paths
    # .env.example (commit this)
  • 严重 references/authentication-patterns.md:459cred-paths
    # .gitignore
  • 严重 references/authentication-patterns.md:460cred-paths
    .env
  • 严重 references/authentication-patterns.md:461cred-paths
    .env.local
  • 严重 references/authentication-patterns.md:463cred-paths
    credentials.json
  • references/mcp-server-setup.md:60identity-config-write
    **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
  • references/mcp-server-setup.md:61identity-config-write
    **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
  • references/mcp-server-setup.md:62identity-config-write
    **Linux:** `~/.config/claude/claude_desktop_config.json`

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Atlassian MCP Expert

When to Use This Skill

  • Querying Jira issues with JQL filters
  • Searching or creating Confluence pages
  • Automating sprint workflows and backlog management
  • Setting up MCP server authentication (OAuth/API tokens)
  • Syncing meeting notes to Jira tickets
  • Generating documentation from issue data
  • Debugging Atlassian API integration issues
  • Choosing between official vs open-source MCP servers

Core Workflow

  1. Select server - Choose official cloud, open-source, or self-hosted MCP server
  2. Authenticate - Configure OAuth 2.1, API tokens, or PAT credentials
  3. Design queries - Write JQL for Jira, CQL for Confluence; validate with maxResults=1 before full execution
  4. Implement workflow - Build tool calls, handle pagination, error recovery
  5. Verify permissions - Confirm required scopes with a read-only probe before any write or bulk operation
  6. Deploy - Configure IDE integration, test permissions, monitor rate limits

Reference Guide

Load detailed guidance based on context:

| Topic | Reference | Load When |

|-------|-----------|-----------|

| Server Setup | references/mcp-server-setup.md | Installation, choosing servers, configuration |

| Jira Operations | references/jira-queries.md | JQL syntax, issue CRUD, sprints, boards, issue linking |

| Confluence Ops | references/confluence-operations.md | CQL search, page creation, spaces, comments |

| Authentication | references/authentication-patterns.md | OAuth 2.0, API tokens, permission scopes |

| Common Workflows | references/common-workflows.md | Issue triage, doc sync, sprint automation |

Quick-Start Examples

JQL Query Samples

# Open issues assigned to current user in a sprint
project = PROJ AND status = "In Progress" AND assignee = currentUser() ORDER BY priority DESC

# Unresolved bugs created in the last 7 days
project = PROJ AND issuetype = Bug AND status != Done AND created >= -7d ORDER BY created DESC

# Validate before bulk: test with maxResults=1 first
project = PROJ AND sprint in openSprints() AND status = Open ORDER BY created DESC

CQL Query Samples

# Find pages updated in a specific space recently
space = "ENG" AND type = page AND lastModified >= "2024-01-01" ORDER BY lastModified DESC

# Search page text for a keyword
space = "ENG" AND type = page AND text ~ "deployment runbook"

Minimal MCP Server Configuration

{
  "mcpServers": {
    "atlassian": {
      "command": "npx",
      "args": ["-y", "@sooperset/mcp-atlassian"],
      "env": {
        "JIRA_URL": "https://your-domain.atlassian.net",
        "JIRA_EMAIL": "user@example.com",
        "JIRA_API_TOKEN": "${JIRA_API_TOKEN}",
        "CONFLUENCE_URL": "https://your-domain.atlassian.net/wiki",
        "CONFLUENCE_EMAIL": "user@example.com",
        "CONFLUENCE_API_TOKEN": "${CONFLUENCE_API_TOKEN}"
      }
    }
  }
}

> Note: Always load JIRA_API_TOKEN and CONFLUENCE_API_TOKEN from environment variables or a secrets manager — never hardcode credentials.

Constraints

MUST DO

  • Respect user permissions and workspace access controls
  • Validate JQL/CQL queries before execution (use maxResults=1 probe first)
  • Handle rate limits with exponential backoff
  • Use pagination for large result sets (50-100 items per page)
  • Implement error recovery for network failures
  • Log API calls for debugging and audit trails
  • Test with read-only operations first
  • Document required permission scopes
  • Confirm before any write or bulk operation against production data

MUST NOT DO

  • Hardcode API tokens or OAuth secrets in code
  • Ignore rate limit headers from Atlassian APIs
  • Create issues without validating required fields
  • Skip input sanitization on user-provided query strings
  • Deploy without testing permission boundaries
  • Update production data without confirmation prompts
  • Mix different authentication methods in same session
  • Expose sensitive issue data in logs or error messages

Output Templates

When implementing Atlassian MCP features, provide:

  1. MCP server configuration (JSON/environment vars)
  2. Query examples (JQL/CQL with explanations)
  3. Tool call implementation with error handling
  4. Authentication setup instructions
  5. Brief explanation of permission requirements

Documentation

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。