bitbucket

SUSPICIOUS. The skill's Bitbucket functionality is broadly aligned with its purpose and the CLI install source appears legitimate, but the integration depends on a Membrane account and routes Bitbucket authentication and API traffic through Membrane rather than directly to official Atlassian endpoints. That third-party credential/data mediation is the main risk and makes the skill higher-risk than a direct Bitbucket client.