bitbucket-automation

SUSPICIOUS. The Bitbucket capabilities are proportionate to the stated purpose, and the prompt-injection surface is normal for PR review. The main risk is install/execution trust: the skill relies on a stale Rube MCP setup that does not match current official Composio onboarding, creating uncertainty about where data and OAuth traffic actually flow. Not enough evidence for malware, but the dependency and endpoint mismatch make the skill medium risk.