← Back to Skills Marketplace
673
Downloads
2
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install bitwarden-secrets
Description
Safely access Bitwarden or Vaultwarden secrets via the bw CLI with redacted outputs by default. Use for vault sync, item search, metadata retrieval, and (onl...
README (SKILL.md)
Bitwarden Secrets (safe-by-default)
Use this skill to interact with Bitwarden/Vaultwarden through bw while minimizing accidental secret leakage.
Prerequisites
bwCLI installed.- Server configured (
bw config server \x3Curl>). - Logged in (
bw login --apikey) and unlocked (bw unlock) soBW_SESSIONis available.
Commands
cd skills/bitwarden-secrets
python3 scripts/vw_cli.py status
python3 scripts/vw_cli.py sync
python3 scripts/vw_cli.py search --query google
python3 scripts/vw_cli.py get --id \x3Citem_id>
Bootstrap helper (optional)
Load runtime vars + refresh session + sync in one step:
source scripts/vw_bootstrap.sh
# or after shell reload:
vw-openclaw-ready
Reveal (explicit only)
By default, do not reveal secret values in chat. Use reveal only with explicit user consent and temporary policy override:
export VW_REVEAL_ALLOW=1
python3 scripts/vw_cli.py reveal --id \x3Citem_id> --field password --confirm YES_REVEAL
unset VW_REVEAL_ALLOW
Safety policy
- Default outputs are redacted/metadata-only.
- No bulk secret dumps.
- Prefer IDs + labels and retrieve only the minimum needed field.
- Reveal requires BOTH
VW_REVEAL_ALLOW=1and--confirm YES_REVEAL.
Usage Guidance
This skill appears to do what it claims, but review these before installing/using: 1) Ensure the bw CLI is installed and you understand BW_SESSION: the scripts require an unlocked session (BW_SESSION) and will read vault items to populate BW_CLIENTID/BW_CLIENTSECRET/BW_PASSWORD into your shell when you source the bootstrap — that exposes those values to the current shell environment until you unset them. 2) Confirm the expected vault items (oc-bw-clientid, oc-bw-clientsecret, oc-bw-password or overrides) exist and contain the intended values. 3) The 'reveal' command will output secret values to stdout if you explicitly set VW_REVEAL_ALLOW=1 and pass --confirm YES_REVEAL; only use reveal in a trusted environment. 4) The registry metadata does not declare BW_SESSION/BW_PASSWORD even though the scripts use them — treat this as a metadata omission (not an immediate red flag) and avoid running in untrusted shells. 5) If you want stronger safety, run the scripts in an isolated shell or container, inspect the included scripts yourself, and avoid granting the agent unattended access to BW_SESSION or the ability to run the bootstrap automatically.
Capability Analysis
Type: OpenClaw Skill
Name: bitwarden-secrets
Version: 1.0.0
The OpenClaw AgentSkills bundle for Bitwarden/Vaultwarden is designed with strong security controls. It explicitly redacts secret outputs by default, requiring a multi-factor confirmation (environment variable and explicit argument) to reveal a single secret field, as detailed in `SKILL.md` and enforced by `scripts/vw_cli.py`. Shell scripts (`scripts/vw_bootstrap.sh`, `scripts/vw_env_export.sh`) securely handle environment variables and secret extraction from the `bw` CLI, using `subprocess.run` in Python and careful single-quoting in shell exports to prevent injection vulnerabilities. There is no evidence of data exfiltration to external endpoints, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.
Capability Assessment
Purpose & Capability
Name/description match the implementation: the code is a small wrapper around the bw CLI providing redacted metadata views, search, sync, and an explicit reveal path. Required vault items and bw session usage are consistent with Bitwarden/Vaultwarden integration.
Instruction Scope
SKILL.md instructions are specific and limited: run the Python wrapper or source the bootstrap helper. The runtime steps only invoke the local bw CLI, parse its JSON, and print redacted JSON by default. The reveal action is gated by an environment variable and an explicit confirmation token, as documented.
Install Mechanism
No install spec or external downloads; this is an instruction-only skill with included helper scripts. Nothing is fetched from remote URLs and no archives are extracted, so install risk is low.
Credentials
The registry metadata lists no required env vars, but the scripts and SKILL.md clearly require BW_SESSION (from bw unlock) and optionally BW_PASSWORD for initial unlock; vw_env_export.sh expects BW_SESSION and will read items from the vault to produce BW_CLIENTID/BW_CLIENTSECRET/BW_PASSWORD. This is proportionate to the skill's purpose, but the lack of declared required env vars in the metadata is an inconsistency the user should be aware of.
Persistence & Privilege
always:false and default autonomous invocation settings are normal. The skill does not persist system-wide changes or modify other skills; bootstrapping only exports variables into the current shell when deliberately sourced by the user.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install bitwarden-secrets - After installation, invoke the skill by name or use
/bitwarden-secrets - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial public release. Safe-by-default Bitwarden/Vaultwarden access via bw CLI with redacted output and explicit reveal guard.
Metadata
Frequently Asked Questions
What is Bitwarden Secrets?
Safely access Bitwarden or Vaultwarden secrets via the bw CLI with redacted outputs by default. Use for vault sync, item search, metadata retrieval, and (onl... It is an AI Agent Skill for Claude Code / OpenClaw, with 673 downloads so far.
How do I install Bitwarden Secrets?
Run "/install bitwarden-secrets" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Bitwarden Secrets free?
Yes, Bitwarden Secrets is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Bitwarden Secrets support?
Bitwarden Secrets is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Bitwarden Secrets?
It is built and maintained by ClawBow_ (@clawbow); the current version is v1.0.0.
More Skills