bitbucket-cloud
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git,curl, and localized script snippets (Python and PowerShell) to manage repositories and interact with the Bitbucket REST API. These are standard operations for the skill's intended purpose. - [CREDENTIALS_UNSAFE]: The skill provides instructions for embedding the
BITBUCKET_TOKENenvironment variable into Git remote URLs to enable non-interactive pushes. This practice results in the token being stored in the local.git/configfile. The skill mitigates this by providing URL-encoding steps and explicitly advising the agent to minimize the use of long-lived credentials in remotes.
Audit Metadata