← 返回 Skills 市场
Snowsand Confluence
作者
snowsand-enterprises
· GitHub ↗
· v1.0.0
· MIT-0
240
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install snowsand-confluence
功能描述
Interact with Confluence Cloud via REST API. Use for space management, page operations (list, view, create, update, delete), content search (CQL queries), pa...
安全使用建议
What to consider before installing:
- The included script and SKILL.md legitimately require CONFLUENCE_BASE_URL, CONFLUENCE_USER_EMAIL, and CONFLUENCE_API_TOKEN, but the skill registry metadata does not declare these—ask the publisher to correct metadata so required secrets are visible before you install.
- The source/homepage is unknown and there is no published owner info; prefer skills with a verifiable publisher or repo.
- If you proceed, create a service account or API token with the minimum permissions needed (avoid admin tokens) because the CLI supports destructive operations (delete/purge).
- Review scripts/confluence.py yourself (it is included and readable) and test in an isolated environment or sandbox first.
- Confirm that CONFLUENCE_BASE_URL points to your trusted Atlassian instance (the skill will send all requests to that URL). If the publisher cannot explain the metadata omission or provide a reputable source, avoid installing.
功能分析
Type: OpenClaw Skill
Name: snowsand-confluence
Version: 1.0.0
The skill bundle provides a comprehensive integration with Confluence Cloud but is classified as suspicious due to high-risk behaviors and potential vulnerabilities. Specifically, the `download` command in `scripts/confluence.py` is vulnerable to path traversal because it uses the attachment title directly from the API as a local filename without sanitization. Additionally, the script's ability to read and upload arbitrary local files via the `upload` command, combined with its requirement for sensitive credentials (API tokens), presents a significant attack surface for prompt injection, although no evidence of intentional malice or data exfiltration was found.
能力评估
Purpose & Capability
Name/description, SKILL.md, and scripts/confluence.py are coherent: they implement a Confluence Cloud REST API CLI (spaces, pages, attachments, comments, labels, CQL). However the registry metadata lists no required environment variables or primary credential while the SKILL.md and the script both require CONFLUENCE_BASE_URL, CONFLUENCE_USER_EMAIL, and CONFLUENCE_API_TOKEN. That metadata omission is an inconsistency.
Instruction Scope
SKILL.md instructs the agent to call the included scripts/confluence.py and to set Confluence-specific env vars; the runtime instructions and CLI operations focus on Confluence API endpoints. The instructions do not ask the agent to read unrelated system files or contact external endpoints beyond the user-provided CONFLUENCE_BASE_URL.
Install Mechanism
There is no install spec or external download; the skill is instruction/code-only and includes the Python script bundled with the skill. No remote installers, archive downloads, or unusual install locations are used.
Credentials
The script requires three sensitive environment variables (CONFLUENCE_BASE_URL, CONFLUENCE_USER_EMAIL, CONFLUENCE_API_TOKEN) which are appropriate for the declared purpose, but the registry metadata does not declare any required env vars or primary credential. That lack of declared required credentials reduces transparency and is a red flag. Also the skill will perform destructive actions (delete/purge pages, delete attachments) if given credentials with broad permissions—least-privilege credentials are advisable.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide configs. Default autonomous invocation is allowed (platform default), which is expected for a utility skill; combined with the credential concerns above it increases potential impact but is not by itself unusual.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install snowsand-confluence - 安装完成后，直接呼叫该 Skill 的名称或使用
/snowsand-confluence触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of snowsand-confluence.
- Integrates with Confluence Cloud REST API v2 for space, page, attachment, comment, and label management.
- Supports listing, viewing, creating, updating, and deleting spaces and pages.
- Provides CQL search, page tree navigation (parent/child), and other documentation workflows.
- Attachment and comment operations included (list, upload, download, add, update, delete).
- Authentication via Confluence Cloud API token and environment variables.
- Includes detailed CLI usage examples and storage format references.
元数据
常见问题
Snowsand Confluence 是什么？
Interact with Confluence Cloud via REST API. Use for space management, page operations (list, view, create, update, delete), content search (CQL queries), pa... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 240 次。
如何安装 Snowsand Confluence？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install snowsand-confluence」即可一键安装，无需额外配置。
Snowsand Confluence 是免费的吗？
是的，Snowsand Confluence 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Snowsand Confluence 支持哪些平台？
Snowsand Confluence 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Snowsand Confluence？
由 snowsand-enterprises（@snowsand-enterprises）开发并维护，当前版本 v1.0.0。
推荐 Skills