- Reliability 6/20
- Source shows well-defined tools with Zod validation, but test coverage is limited, no CI workflow visible, and error handling/edge cases are under-documented. Static review cannot verify runtime; no direct contradictions found, but lack of reproducible test evidence keeps score low.
- Security and permissions 8/20
- Credentials are passed via env vars or config files, not hardcoded; data flows locally to Confluence API, no malicious behavior found. However, tools allow arbitrary HTTP operations without confirmation for dangerous actions, least-privilege is incomplete, but no red-line violations.
- Maintenance 8/20
- Repository has multiple releases (v3.x), recent updates, but no clear license, issue responsiveness unclear, dependency update status not verified. Active but governance and versioning gaps exist.
- Documentation 8/20
- README is rich, covering install, auth, tool params, examples, and troubleshooting, but lacks deep discussion of limitations (e.g., Cloud only) and cost (token usage). Also embeds executable instructions; treat with caution.
- Setup experience 7/20
- Provides multiple installation methods (npx, global, config file) and client config examples, steps are clear. Depends on Node.js, lacks platform-specific details like Windows, and setup path relies on external package manager, not fully verified.