bitbucket-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Bitbucket Pipes from the atlassian organization (e.g., atlassian/aws-s3-deploy and atlassian/aws-ecs-deploy) for use in pipeline configurations, which is standard and expected for this platform.
- [SAFE]: The documentation provides explicit guidance on using secured repository variables for managing secrets such as AWS credentials and deployment tokens, adhering to security best practices.
- [SAFE]: The integration test service example uses benign, standard documentation placeholders for credentials (e.g., test_user, test_pass) within a controlled ephemeral environment definition.
- [NO_CODE]: The skill consists entirely of markdown documentation and YAML configuration examples without providing executable scripts or tools, limiting the potential for malicious execution within the skill itself.
Audit Metadata