bkt

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill includes command examples that pass a personal/access token directly on the command line (e.g., --token ) and mentions explicit secret env var names, which encourages inserting secret values verbatim into generated commands or outputs.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Several URLs are third-party Git repositories, a Scoop bucket, or a GitHub Releases page referenced as installation sources — channels that can deliver binaries/extensions and therefore present a potential malware-distribution risk if the sources are untrusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The docs include explicit runtime commands to clone and install extensions from Git repositories (e.g. "bkt extension install https://bitbucket.org/myteam/bkt-lint", "bkt extension install git@bitbucket.org:myteam/bkt-deploy.git", "bkt extension install https://github.com/user/bkt-formatter"), which at runtime fetch remote code that can contain and execute an extension executable.