bitbucket-cloud

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses git, curl, and localized script snippets (Python and PowerShell) to manage repositories and interact with the Bitbucket REST API. These are standard operations for the skill's intended purpose.
  • [CREDENTIALS_UNSAFE]: The skill provides instructions for embedding the BITBUCKET_TOKEN environment variable into Git remote URLs to enable non-interactive pushes. This practice results in the token being stored in the local .git/config file. The skill mitigates this by providing URL-encoding steps and explicitly advising the agent to minimize the use of long-lived credentials in remotes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 11:05 AM
Security Audit — agent-trust-hub — bitbucket-cloud