OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit May 16, 2026
Independent checks from skills.sh's audit partners.
This skill provides a CLI tool ('bkt') for Bitbucket that manages sensitive authentication tokens and includes a mechanism to install and execute external extensions from Git repositories. It also processes data from Bitbucket (such as pull requests and issues) which represents a surface for indirect prompt injection.
Detected behaviors
No alerts
2 issues
2/2 files flagged
Score: 93/100 · 2 sections analyzed