📦 Bitbucket — 管理仓库与团队
v1.0.2一站式连接 Bitbucket，可视化操作仓库、分支、PR、用户与团队，自动同步代码状态，支持 Webhook 触发工作流，让 Git 协作更高效。
0· 436·3 当前·3 累计
by 下载技能包
最后更新
2026/4/2
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent for integrating Bitbucket via the Membrane CLI, but take these precautions before installing/using it:
- Verify and trust the @membranehq/cli npm package before running `npm install -g @membranehq/cli` (global installs can affect your system and pull remote code).
- The skill relies on your Membrane account for access to Bitbucket; review the permissions and connected accounts in Membrane and use least-privilege credentials where possible.
- The SKILL.md allows proxying a...详细分析 ▾
✓ 用途与能力
Name/description (Bitbucket integration) matches the runtime instructions: all actions are performed via the Membrane CLI and network access to Bitbucket. No unrelated credentials, binaries, or paths are requested.
✓ 指令范围
SKILL.md only instructs installing and using the Membrane CLI (membrane login, connect, action run, request proxy). It does not ask the agent to read unrelated files, environment variables, or system-wide secrets. It documents using a browser-based auth flow and proxying API calls through Membrane, which is consistent with the stated functionality.
ℹ 安装机制
The skill is instruction-only (no install spec). It instructs the user to run `npm install -g @membranehq/cli`. This is expected for a CLI-based integration but introduces the usual supply-chain/trust considerations for installing a global npm package — the skill itself does not automatically download or run code.
✓ 凭证需求
No environment variables, config paths, or credentials are required by the skill itself. The SKILL.md relies on the user's Membrane account for auth, which is proportional to a connector-based integration.
✓ 持久化与权限
always is false and the skill is user-invocable. The skill does not request persistent system-wide privileges or modify other skills' configurations. Autonomous invocation is allowed (platform default) but not combined with other high-risk flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/6
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install bitbucket
镜像加速npx clawhub@latest install bitbucket --registry https://cn.longxiaskill.com