Atlassian Forge Developer

{
  "type": "http",
  "url": "https://mcp.atlassian.com/v1/forge/mcp"
}

{
  "url": "https://mcp.atlassian.com/v1/ads/public/mcp"
}

Reviews Forge apps for security vulnerabilities, architecture issues, cost inefficiencies, performance problems, and trigger/scheduling waste before deployment. Use this skill when you want to review, audit, or pre-deploy check a Forge app — trigger on phrases like "review my Forge app", "check my app", "pre-deploy check", "audit my Forge app", "check for security issues", "optimize my Forge app costs", "reduce invocations", "why is my app expensive", "check my triggers", or any request to evaluate a Forge app's quality, safety, cost efficiency, or readiness.

# Forge App Review Skill

Reviews Forge apps for security vulnerabilities, architecture issues, cost inefficiencies, performance problems, and trigger/scheduling waste before deployment. Use this skill when you want to review, audit, or pre-deploy check a Forge app — trigger on phrases like "review my Forge app", "check my app", "pre-deploy check", "audit my Forge app", "check for security issues", "optimize my Forge app costs", "reduce invocations", "why is my app expensive", "check my triggers", or any request to evaluate a Forge app's quality, safety, cost efficiency, or readiness.

## Installation

### Cursor

Clone this repository into your Cursor skills directory:

```bash
git clone https://bitbucket.org/atlassianlabs/forge-app-review-skill.git ~/.cursor/skills/forge-app-review
```

The skill will be automatically discovered by Cursor. Use it when reviewing Forge apps by mentioning app review, security checks, cost optimization, or similar topics.

**Alternative (project-scoped):** To make the skill available only for a specific project, clone into the project's `.cursor/skills/` directory:

```bash
mkdir -p .cursor/skills
git clone https://bitbucket.org/atlassianlabs/forge-app-review-skill.git .cursor/skills/forge-app-review
```

### Rovo Dev

Clone this repository into your Rovo Dev skills directory:

```bash
git clone https://bitbucket.org/atlassianlabs/forge-app-review-skill.git ~/.agents/skills/forge-app-review
```

The skill will be automatically discovered by Rovo Dev. Use it when reviewing Forge apps by mentioning app review, security audit, cost checks, performance, or similar topics.

**Alternative (project-scoped):** To make the skill available only for a specific project, clone into the project's `.agents/skills/` directory:

```bash
mkdir -p .agents/skills
git clone https://bitbucket.org/atlassianlabs/forge-app-review-skill.git .agents/skills/forge-app-review
```

### Claude Code

Clone this repository into your Claude Code skills directory:

```bash
git clone https://bitbucket.org/atlassianlabs/forge-app-review-skill.git ~/.claude/skills/forge-app-review
```

The skill will be automatically discovered by Claude Code. Use it when reviewing Forge apps by mentioning app review, security audit, cost checks, performance, or similar topics.

**Alternative (project-scoped):** To make the skill available only for a specific project, clone into the project's `.claude/skills/` directory:

```bash
mkdir -p .claude/skills
git clone https://bitbucket.org/atlassianlabs/forge-app-review-skill.git .claude/skills/forge-app-review
```

## What This Skill Provides

- **Deep pre-deploy review** — Comprehensive analysis across five categories: Security, Architecture, Cost, Performance, and Triggers & Scheduling
- **40+ checks with severity levels** — Each check has a unique ID, severity (Critical/Warning/Info), and actionable fix guidance
- **Security analysis** — Detects overly broad scopes, missing egress restrictions, hardcoded secrets, missing input sanitization, and unsafe CSP configurations
- **Cost optimization** — Identifies chatty resolvers, unnecessary storage writes, logic that could run client-side for free, N+1 API calls, missing field selection, verbose logging, and memory over-provisioning
- **Performance tuning** — Finds sequential API calls that should be parallel, cold start bottlenecks, large storage entities, missing caching, and unoptimized filtering
- **Trigger & scheduling review** — Catches excessive scheduled trigger frequency, polling that should be event-driven, missing event filters, and feedback loops from missing `ignoreSelf`
- **Autonomous execution** — The agent reads manifest, dependencies, resolvers, and UI code automatically without asking what to review
- **Severity-sorted output** — Produces a single flat issue list sorted Critical → Warning → Info with file locations and specific fix instructions

See [SKILL.md](SKILL.md) for the full skill content.

Diagnoses and fixes issues in Atlassian Forge apps. Use this skill whenever a Forge app has errors, crashes, shows blank UI, fails to deploy, doesn't appear after installation, has permission issues, or produces unexpected output. Trigger on any mention of forge logs, forge deploy errors, resolver errors, blank panels, missing scopes, Custom UI not rendering, or any Jira/Confluence app that "stopped working".

# Forge Debugger Skill

Diagnoses and fixes issues in Atlassian Forge apps. Use this skill whenever a Forge app has errors, crashes, shows blank UI, fails to deploy, doesn't appear after installation, has permission issues, or produces unexpected output. Trigger on any mention of forge logs, forge deploy errors, resolver errors, blank panels, missing scopes, Custom UI not rendering, or any Jira/Confluence app that "stopped working".

## Installation

### Cursor

Clone this repository into your Cursor skills directory:

```bash
git clone https://bitbucket.org/atlassianlabs/forge-debugger-skill.git ~/.cursor/skills/forge-debugger
```

The skill will be automatically discovered by Cursor. Use it when debugging Forge apps by mentioning errors, deploy failures, blank panels, or similar issues.

**Alternative (project-scoped):** To make the skill available only for a specific project, clone into the project's `.cursor/skills/` directory:

```bash
mkdir -p .cursor/skills
git clone https://bitbucket.org/atlassianlabs/forge-debugger-skill.git .cursor/skills/forge-debugger
```

### Rovo Dev

Clone this repository into your Rovo Dev skills directory:

```bash
git clone https://bitbucket.org/atlassianlabs/forge-debugger-skill.git ~/.agents/skills/forge-debugger
```

The skill will be automatically discovered by Rovo Dev. Use it when debugging Forge apps by mentioning forge logs, deploy errors, resolver issues, or similar.

**Alternative (project-scoped):** To make the skill available only for a specific project, clone into the project's `.agents/skills/` directory:

```bash
mkdir -p .agents/skills
git clone https://bitbucket.org/atlassianlabs/forge-debugger-skill.git .agents/skills/forge-debugger
```

### Claude Code

Clone this repository into your Claude Code skills directory:

```bash
git clone https://bitbucket.org/atlassianlabs/forge-debugger-skill.git ~/.claude/skills/forge-debugger
```

The skill will be automatically discovered by Claude Code. Use it when debugging Forge apps by mentioning forge logs, deploy errors, resolver issues, or similar.

**Alternative (project-scoped):** To make the skill available only for a specific project, clone into the project's `.claude/skills/` directory:

```bash
mkdir -p .claude/skills
git clone https://bitbucket.org/atlassianlabs/forge-debugger-skill.git .claude/skills/forge-debugger
```

## What This Skill Provides

- **Structured diagnostic workflow** — Step-by-step checklist to identify root causes quickly: version checks, lint, build verification, deploy status, and log analysis
- **Common error pattern matching** — Instant lookup table covering 15+ frequent Forge errors (blank UI, resolver not found, 403s, 410 Gone, handler path issues, and more)
- **Autonomous execution** — The agent runs diagnostic and fix commands directly, without asking permission or presenting copy-paste instructions
- **API migration guidance** — Handles v1 → v2 REST API migration for Confluence and Jira endpoints
- **Token-efficient debugging** — Prioritizes cheap checks first (lint, version) and stops at root cause to minimize context usage

See [SKILL.md](SKILL.md) for the full skill content.