← 返回 Skills 市场
snowsand-enterprises

Snowsand Bitbucket

作者 snowsand-enterprises · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
253
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install snowsand-bitbucket
功能描述
Interact with Bitbucket Cloud via REST API. Use for repository management, pull request operations (list, view, create, comment, approve, merge), branch mana...
安全使用建议
This skill appears to be a legitimate Bitbucket Cloud CLI, but there are two issues to consider before installing: (1) the registry metadata does not list the required environment variables, yet the code requires BITBUCKET_USERNAME and BITBUCKET_APP_PASSWORD (and optionally BITBUCKET_WORKSPACE). Ask the publisher to correct the metadata so you know what will be requested. (2) The App Password requested needs repository and pull-request write permissions to perform create/merge/delete operations — that is powerful. Only provide an App Password with the minimal scopes you need (use read-only for listing operations), rotate and restrict the password to a dedicated service account, and test in a non-production workspace first. Also note the package has no homepage or known owner listed; prefer skills with a verifiable source or repository when possible.
功能分析
Type: OpenClaw Skill Name: snowsand-bitbucket Version: 1.0.0 The snowsand-bitbucket skill bundle provides a legitimate integration for managing Bitbucket Cloud resources via its REST API. The core logic in scripts/bitbucket.py uses standard Python libraries (urllib) to perform authenticated actions like repository management, PR operations, and pipeline triggers. No evidence of data exfiltration, malicious execution, or prompt injection was found; the script correctly uses environment variables for credentials and targets only official Bitbucket API endpoints.
能力评估
Purpose & Capability
The skill's name, description, SKILL.md, references/api.md, and scripts/bitbucket.py are consistent with a Bitbucket Cloud integration. However the registry metadata claims 'Required env vars: none' while both SKILL.md and scripts/bitbucket.py require BITBUCKET_USERNAME and BITBUCKET_APP_PASSWORD (and optionally BITBUCKET_WORKSPACE). That metadata omission is an incoherence.
Instruction Scope
The SKILL.md instructions and the CLI script confine activity to Bitbucket Cloud REST API calls. The runtime instructions and code only reference environment variables for authentication and the Bitbucket API endpoints; they do not instruct reading unrelated system files or sending data to unexpected external endpoints.
Install Mechanism
This is an instruction-only skill with an included Python script; there is no install spec, no downloads, and no archive extraction. Nothing in the manifest indicates code will be pulled from arbitrary URLs or installed system-wide.
Credentials
The script requires BITBUCKET_USERNAME and BITBUCKET_APP_PASSWORD and SKILL.md also recommends BITBUCKET_WORKSPACE. Those credentials are appropriate for Bitbucket API access, but the App Password needs Write permissions for repositories and pull requests to support create/merge/delete actions — granting such an App Password is powerful (can modify/delete repositories, merge PRs, trigger pipelines). The registry failing to declare these env vars is a mismatch that reduces transparency.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide persistence or modify other skills. It only uses environment variables for auth and performs API calls; autonomous invocation is allowed by default but not excessive given the skill purpose.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install snowsand-bitbucket
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /snowsand-bitbucket 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of snowsand-bitbucket—Bitbucket Cloud integration. - Supports repository management, pull request operations, branch and commit history, pipeline status, and workspace queries via REST API. - Includes detailed authentication instructions and required environment variables for App Password. - Provides a comprehensive command reference for all supported operations (repos, PRs, branches, commits, pipelines, workspaces). - Describes common workflows with clear CLI usage examples. - Documents merge strategies, pipeline states, and error handling. - Offers tips for direct raw API access and includes link to official API documentation.
元数据
Slug snowsand-bitbucket
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Snowsand Bitbucket 是什么?

Interact with Bitbucket Cloud via REST API. Use for repository management, pull request operations (list, view, create, comment, approve, merge), branch mana... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 253 次。

如何安装 Snowsand Bitbucket?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install snowsand-bitbucket」即可一键安装,无需额外配置。

Snowsand Bitbucket 是免费的吗?

是的,Snowsand Bitbucket 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Snowsand Bitbucket 支持哪些平台?

Snowsand Bitbucket 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Snowsand Bitbucket?

由 snowsand-enterprises(@snowsand-enterprises)开发并维护,当前版本 v1.0.0。

💬 留言讨论