ClawHub
Back to skill

Security audit

Bitbucket

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Bitbucket connector that can read and change repository data, with explicit confirmation requirements for write and destructive actions.

Install this only if you want your agent to operate Bitbucket through an OOMOL-connected account. Review write or delete requests carefully, especially repository deletion, branch deletion, pipeline variable changes, pull request merges, and pipeline stops, and only approve commands when the target and payload are clear.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The skill is configured to activate for essentially any Bitbucket-related request, including sensitive read, write, and destructive operations. This broad routing increases the chance the agent invokes a powerful external integration by default, which can lead to unintended data access, repository modification, or destructive actions if user intent is ambiguous or prompt context is manipulated.

Static analysis

No suspicious patterns detected.