# Automate Bitbucket Pipelines and DevOps Workflows

Bitbucket pipeline failures are slow to inspect across dashboards and large logs. This skill lets agents query runs, analyze failures, and manage selected workflows.

## Install

```bash
npx skillstore add apra-labs/bitbucket-devops
```

## Metadata

- Status: approved
- Slug: apra-labs-bitbucket-devops
- Skillstore revision: r2
- Version status: missing
- Tree hash: 3b32e44b3ff564f9385e3e91adca797ca8b30966f7c390e90d9532dde81b6c23
- Author: Apra-Labs
- GitHub username: Apra-Labs
- License: MIT
- Repository: https://github.com/Apra-Labs/claude-bitbucket-devops-skill/tree/main/
- Ref: 89edfdc710d0846129dcee6a929477b04f08052c
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: network, external\_commands, filesystem, scripts
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/apra-labs-bitbucket-devops
- Manifest: https://skillstore.pages.dev/api/skills/apra-labs-bitbucket-devops/manifest

## Capabilities

- Lists recent Bitbucket Cloud pipelines and retrieves runs by build number or UUID.
- Identifies failed steps and downloads pipeline logs into the current project.
- Triggers or stops pipelines and supports custom pipeline variables.
- Creates, reads, approves, merges, and declines pull requests through CLI commands.
- Lists and manages deployment environments and secured deployment variables.
- Checks credential configuration and reports available skill updates.

## Use Cases

- Diagnose failed builds: Find the latest failed run, collect failed-step logs, and summarize the likely cause.
- Operate CI pipelines: Review pipeline status, start approved runs, stop incorrect runs, and monitor progress.
- Coordinate releases: Review pull requests and prepare deployment environments or secured variables with explicit approval.

## Prompt Templates

### Check the latest pipeline

```
Show the latest pipeline for [workspace]/[repository]. Report its branch, status, build number, and failed steps.
```

### Analyze a failed build

```
Find the latest failed pipeline for [workspace]/[repository]. Download failed-step logs and summarize the root cause without changing files.
```

### Run an approved pipeline

```
Prepare pipeline [name] on branch [branch] with variables [variables]. Show the exact target and request confirmation before starting it.
```

### Plan a deployment change

```
Review environment [environment] in [workspace]/[repository]. Propose variable changes, required scopes, and rollback steps. Apply nothing without explicit confirmation.
```

## Limitations

- Requires Node.js, Git, network access, and user-provided Bitbucket credentials.
- Write operations require suitable Bitbucket scopes and can change repositories or deployments.
- Bitbucket Cloud does not expose pipeline artifact downloads through its supported API.
- The documented implementation targets Bitbucket Cloud, not self-hosted Bitbucket Server.

## Best Practices

- Start with read-only commands and verify the workspace, repository, branch, and build before any change.
- Use least-privilege scoped tokens and request explicit approval for pipeline, pull request, environment, or variable changes.
- Keep credentials and downloaded logs outside version control, restrict permissions, and remove logs after analysis.

## Anti Patterns

- Do not grant administrative scopes for pipeline inspection or log analysis.
- Do not run updates or destructive Bitbucket commands from an ambiguous request.
- Do not paste credentials, deployment secrets, or complete sensitive logs into prompts or chat output.

## Security Audit

- Audited at: 2026-07-23T05:22:41.287\+00:00
- Summary: Most static findings are false positives from Markdown syntax, expected skill paths, templates, and fixed checks. Five commands explicitly bypass PowerShell policy, and semantic review found critical path deletion plus several high-risk consent and update issues. Publication should remain blocked until these controls are corrected.

## Stats

- Views: 214
- Downloads: 10
- Favorites: 0
- Popularity score: 0