Safe Bitwarden Cli

Industrial-grade secure bridge to Bitwarden. Copy passwords and TOTP codes with Zero-trust kernel-level piping.

This skill appears to do exactly what it claims: search your Bitwarden vault and pipe passwords or TOTP codes directly to your OS clipboard using the Bitwarden CLI. Before installing, verify the following: (1) The manifest and SKILL.md both require BW_SESSION — ensure you are comfortable exporting a Bitwarden session token into your environment and that you only export it in a secure shell session. (2) Inspect scripts/main.sh yourself (it's short and readable) to confirm there are no modifications to other config or network calls. (3) Understand clipboard risk: once a secret is copied, other local apps or utilities (clipboard history managers, remote desktop sessions, clipboard-monitoring malware) could read it — consider setting a clipboard-clear policy after use. (4) Confirm you have the bw CLI and an appropriate native clipper (pbcopy/clip/xclip/wl-copy) on the devices you plan to use. (5) Fix the registry metadata discrepancy (it should declare BW_SESSION). If you require higher assurance, run the script locally in an isolated environment and test the 'setup', 'search', and 'copy' flows before granting the skill to an agent.

Type: OpenClaw Skill Name: safe-bitwarden-cli Version: 1.6.0 The skill is a well-architected bridge for the Bitwarden CLI that prioritizes security through a 'password blindness' design. The core logic in `scripts/main.sh` avoids shell injection by eschewing `eval` and uses direct kernel-level piping to send passwords and TOTP codes from the `bw` binary to the system clipboard, ensuring sensitive data never enters the AI agent's context or logs. Search results are strictly filtered via Python to only expose non-sensitive metadata (ID, name, username), and no evidence of data exfiltration or unauthorized remote execution was found.