bkt

SUSPICIOUS. Most of the skill is a coherent, vendor-aligned Bitbucket CLI guide with official install sources and proportionate Bitbucket credentials. The main risk is that it also documents `bkt extension` and `bkt skill` features that can install and execute unreviewed third-party code or transitive skills, creating meaningful supply-chain and execution risk even though there is no clear evidence of credential theft or malicious exfiltration in this skill itself.