bitbucket-automation

SUSPICIOUS: The skill’s capabilities mostly match its Bitbucket automation purpose, but trust and data-flow are weaker than presented. It relies on a discontinued/stale Rube MCP endpoint, routes OAuth and Bitbucket operations through Composio/Rube as a third-party intermediary, and enables destructive actions. This is not confirmed malware, but it is a medium-risk skill with notable credential-routing and operational-trust concerns.