The Agent Skills Directory

[COMMAND_EXECUTION]: The skill relies on shell command execution via npx to perform Bitbucket management tasks like creating branches, repositories, and pull requests.
[EXTERNAL_DOWNLOADS]: Fetches the @useclawlink/cli package from the official NPM registry during setup and execution.
[REMOTE_CODE_EXECUTION]: Uses npx to download and execute the latest version of the ClawLink CLI tool directly from a remote registry.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from Bitbucket, such as issue descriptions and repository files, which could contain malicious instructions designed to influence the AI agent.
Ingestion points: External data enters the agent context through the bitbucket_browse_repository_path action and by reading existing issues or pull requests as described in SKILL.md.
Boundary markers: The instructions do not specify the use of delimiters or clear separation between external data and agent instructions.
Capability inventory: The skill provides the agent with capabilities to execute shell commands and modify remote Bitbucket resources.
Sanitization: There is no evidence of sanitization or validation of the content retrieved from Bitbucket before it is processed by the agent.

bitbucket