← 返回 Skills 市场

Confluence Integration

Name: Confluence Integration
Author: lukaizj

作者 lukaizj · GitHub ↗ · v0.1.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install lukaizj-confluence

功能描述

Confluence REST API integration via curl - lightweight solution without Python dependencies. Supports search, page operations, and file attachments.

使用说明 (SKILL.md)

Confluence Integration

Confluence integration skill for OpenClaw. Manage wiki pages, spaces, and content via REST API using pure curl/shell.

Capabilities

Search Confluence pages using CQL
Get, create, and update pages
List and view spaces
Upload attachments to pages
Create child pages

Setup

Create a Confluence API token or use password
Get your Confluence base URL
Configure environment variables

Environment Variables

Variable	Required	Description
`CONFLUENCE_URL`	Yes	Your Confluence base URL (e.g., https://your-company.atlassian.net)
`CONFLUENCE_USER`	Yes	Your Confluence username or email
`CONFLUENCE_PASS`	Yes	Your password or API token

Security Note: These credentials are only used locally and never exposed or stored externally.

Usage Examples

Check connection to Confluence

Search for pages containing "kyuubi"

Get page with ID 123456

Create a new page in space DAT with title "Project Notes"

Update page 123456 with new content

Upload attachment to page 123456

Commands

check

Verify connection to Confluence instance.

search

Search pages using Confluence Query Language (CQL).

text ~ "keyword"
space = "DAT" AND text ~ "spark"
type = page

page get

Get a page by ID. Returns title, content, space, version.

page create

Create a new page. Options:

--space: Space key (required)
--title: Page title (required)
--body: Page content (required)
--parent: Parent page ID for child pages

page update

Update page content. Options:

--body: New content
--title: New title
--append: Append to existing content

page attach

Upload file attachment to a page.

space list

List all accessible spaces.

CQL Examples

Search	Description
`text ~ "kyuubi"`	Pages containing "kyuubi"
`space = "DAT"`	Pages in DAT space
`type = page`	All pages
`text ~ "spark" AND space = "DEV"`	Pages about spark in DEV space

安全使用建议

This is a mostly coherent Confluence curl wrapper, but stop and confirm a few things before installing: (1) The included script requires curl and jq even though metadata does not list them — install those first. (2) Prefer an API token over a password and avoid placing CONFLUENCE_PASS in shared/global environments; running curl with -u user:pass can expose the password in process listings on multi-user systems. Consider using a .netrc or Authorization header method to reduce exposure. (3) The script writes temporary response files to /tmp; if you run on a multi-user host, consider running in an isolated container or ensure /tmp access is safe. (4) Review the full confluence.sh contents locally (you already have it) before use; confirm CONFLUENCE_URL points to your trusted Confluence instance. If you need stronger guarantees about credential handling, request the author to (a) document required binaries in metadata, (b) avoid inline -u usage (use headers or .netrc), and (c) avoid plaintext temp files or use a secure temp path.

功能分析

Type: OpenClaw Skill Name: lukaizj-confluence Version: 0.1.0 The skill provides Confluence integration but contains significant security vulnerabilities and high-risk primitives in 'confluence.sh'. Specifically, the 'cmd_page_attach' function allows the agent to read and upload arbitrary local files to a Confluence instance using 'curl -F', which could be abused for data exfiltration. Additionally, 'cmd_page_create' constructs JSON payloads using shell heredocs without proper escaping for user-controlled variables like title and space, creating a risk of injection or malformed requests. While these capabilities are aligned with the stated purpose, the lack of robust input sanitization and the high-privilege file access warrant a suspicious classification.

能力评估

ℹ Purpose & Capability

The name, description, and runtime script align with a Confluence REST API client (search, pages, attachments). The requested environment variables (CONFLUENCE_URL, CONFLUENCE_USER, CONFLUENCE_PASS) are appropriate. HOWEVER the registry/metadata claims no required binaries, while the included script enforces both curl and jq — the metadata is incomplete/inconsistent.

⚠ Instruction Scope

SKILL.md and instructions restrict activity to Confluence REST calls and only the declared env vars. The shell script indeed only targets CONFLUENCE_URL/rest/api/... and local temp files. Still, the script uses curl -u user:pass (exposing credentials on the process command line to other local users) and writes attachment responses to /tmp; both are modest risks and contradict the SKILL.md's strong assertion that credentials are "never exposed or stored externally."

✓ Install Mechanism

No install spec (instruction-only with an included shell script). This is low-risk from an installation perspective because nothing is downloaded during install. The script will run locally when invoked.

ℹ Credentials

The three required environment variables are exactly what a Confluence CLI needs and are proportionate. Minor issue: primary credential field is not declared in registry (no primaryEnv), but that is administrative rather than functional. Use of plaintext CONFLUENCE_PASS is expected for API tokens but merits caution.

✓ Persistence & Privilege

Skill is not always-on and does not request persistent privileges or modify other skills. It runs on demand and does not declare elevated system presence.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install lukaizj-confluence
安装完成后，直接呼叫该 Skill 的名称或使用 /lukaizj-confluence 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.0

Initial release of Confluence Integration skill for OpenClaw. - Provides Confluence REST API operations using lightweight shell scripts (curl-based, no Python dependencies) - Supports searching pages (CQL), creating, updating, and retrieving pages - Enables listing spaces and managing attachments on pages - Configuration via environment variables (Confluence URL, user, API key/password) - Includes example usage and CQL queries in documentation

元数据

Slug lukaizj-confluence

版本 0.1.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题