Access and manage Bitwarden passwords securely using the official bw CLI.

This skill appears to do what it says: it runs the official Bitwarden CLI (bw) to read and manage vault items. Before installing, confirm you have bw installed and that you understand the implication: the agent will need access to your BW_SESSION (a live Bitwarden session token) to operate and any commands it runs can read your vault entries. Ask the publisher to update metadata to declare BW_SESSION as a required credential so you can review it explicitly. Avoid storing BW_SESSION permanently in plain text (e.g., ~/.zshrc) if possible — prefer ephemeral sessions, manually run bw login/unlock when needed, or use short-lived session tokens. Only enable this skill if you trust the agent to handle sensitive data, and consider limiting autonomous invocation or testing in a restricted account/vault first.

Type: OpenClaw Skill Name: bitwarden-bw Version: 1.0.0 The skill bundle is benign. It provides instructions for an AI agent to interact with the legitimate Bitwarden CLI (`bw`) for password management. All commands are standard `bw` operations, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The reliance on the `BW_SESSION` environment variable is expected for non-interactive Bitwarden CLI usage. Potential shell injection risks from unsanitized user input are vulnerabilities in the agent's execution model, not malicious intent within the skill definition itself.