← 返回 Skills 市场
Vaultwarden Secrets
作者
Morten Bojer
· GitHub ↗
· v1.0.1
· MIT-0
117
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install vaultwarden-skill
功能描述
Manage Vaultwarden secrets with wrapper scripts for session handling, caching, logging, and scoped read/write operations in collections or personal vaults.
安全使用建议
This skill appears to implement the advertised Vaultwarden wrappers, but the registry metadata and SKILL.md disagree: the scripts require the Bitwarden CLI (bw) and jq plus sensitive env vars (BW_CLIENTID, BW_CLIENTSECRET, BW_PASSWORD) even though the registry lists none. Before installing: 1) verify and accept installing/using bw CLI (SKILL.md pins an older version 2023.10.0) and install jq; 2) do not supply your real secrets until you confirm the server URL and have reviewed the scripts — they write session tokens and logs to disk (defaults: /run/openclaw/vw and /var/log/openclaw/vaultwarden.log); change VW_SESSION_DIR and VW_LOG_FILE to secure locations if needed and ensure log file permissions are restricted; 3) consider testing in a non-production environment and audit that logs do not leak secret values; 4) ask the publisher to update registry metadata to list required binaries and environment variables (the current mismatch is a red flag).
能力评估
Purpose & Capability
The skill claims to manage Vaultwarden secrets and the scripts do that, but the package metadata declares no required binaries or environment variables while SKILL.md and the scripts require the Bitwarden CLI (bw), jq, and BW_CLIENTID/BW_CLIENTSECRET/BW_PASSWORD plus optional VW_* env vars. The metadata omission is an incoherence — a user installing this skill would legitimately need bw and jq and the listed env vars.
Instruction Scope
Runtime instructions and scripts are narrowly scoped to call the bw CLI and jq and to read/write session, cache, and log files under $VW_SESSION_DIR and VW_LOG_FILE. The scripts do not contain obvious network calls beyond bw (which communicates with the configured Vaultwarden server). However SKILL.md recommends a specific server URL (https://vaultwarden.mbojer.dk) as the example; ensure you configure your intended server. The scripts also write logs (names/IDs/operation outcomes) and session tokens to disk, which is expected for this purpose but should be reviewed for exposure risk.
Install Mechanism
This is instruction-only (no install spec), but SKILL.md instructs users to globally install a pinned bw CLI via npm (npm install -g @bitwarden/[email protected]). The scripts also require jq, but SKILL.md/registry metadata do not explicitly declare jq as a prerequisite. The missing dependency declarations and requirement to install a specific (older) CLI version are mismatches that users should validate before following.
Credentials
The skill requires sensitive env vars (BW_CLIENTID, BW_CLIENTSECRET, BW_PASSWORD) which are proportionate to logging in/unlocking Vaultwarden, but the registry metadata lists no required env vars — an inconsistency. Defaults for session and log paths (/run/openclaw/vw, /var/log/openclaw/vaultwarden.log) may require elevated permissions and could expose metadata if the log file is not properly protected. The number of env vars is reasonable for the stated purpose but must be handled securely.
Persistence & Privilege
The skill is user-invocable, not always-enabled, and allows normal autonomous invocation. It stores session tokens and caches in its own session directory and does not modify other skills or global agent configuration. No excessive persistence privileges are requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install vaultwarden-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/vaultwarden-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.1
Remove SSH key scripts (bw 2023.10.0 cipher bug with multiline content). Personal vault fallback working. Session persistence and caching intact.
v1.0.0
Initial release: wrapper scripts for bw CLI with session persistence, caching, and personal vault fallback
元数据
常见问题
Vaultwarden Secrets 是什么？
Manage Vaultwarden secrets with wrapper scripts for session handling, caching, logging, and scoped read/write operations in collections or personal vaults. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 117 次。
如何安装 Vaultwarden Secrets？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install vaultwarden-skill」即可一键安装，无需额外配置。
Vaultwarden Secrets 是免费的吗？
是的，Vaultwarden Secrets 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Vaultwarden Secrets 支持哪些平台？
Vaultwarden Secrets 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Vaultwarden Secrets？
由 Morten Bojer（@mbojer）开发并维护，当前版本 v1.0.1。
推荐 Skills