HomeBrowseUpload
← Back to registry
// Skill profile

Bitwarden Secrets (safe-by-default)

name: bitwarden-secrets

by clawbow · published 2026-03-22

数据处理API集成
Total installs
0
Stars
★ 0
Last updated
2026-03
// Install command
$ claw add gh:clawbow/clawbow-bitwarden-secrets
View on GitHub
// Full documentation

---

name: bitwarden-secrets

description: Safely access Bitwarden or Vaultwarden secrets via the bw CLI with redacted outputs by default. Use for vault sync, item search, metadata retrieval, and (only with explicit confirmation) revealing a single secret field.

---

# Bitwarden Secrets (safe-by-default)

Use this skill to interact with Bitwarden/Vaultwarden through `bw` while minimizing accidental secret leakage.

Prerequisites

  • `bw` CLI installed.
  • Server configured (`bw config server <url>`).
  • Logged in (`bw login --apikey`) and unlocked (`bw unlock`) so `BW_SESSION` is available.
  • Commands

    cd skills/bitwarden-secrets
    python3 scripts/vw_cli.py status
    python3 scripts/vw_cli.py sync
    python3 scripts/vw_cli.py search --query google
    python3 scripts/vw_cli.py get --id <item_id>

    Bootstrap helper (optional)

    Load runtime vars + refresh session + sync in one step:

    source scripts/vw_bootstrap.sh
    # or after shell reload:
    vw-openclaw-ready

    Reveal (explicit only)

    By default, do not reveal secret values in chat.

    Use reveal only with explicit user consent and temporary policy override:

    export VW_REVEAL_ALLOW=1
    python3 scripts/vw_cli.py reveal --id <item_id> --field password --confirm YES_REVEAL
    unset VW_REVEAL_ALLOW

    Safety policy

  • Default outputs are redacted/metadata-only.
  • No bulk secret dumps.
  • Prefer IDs + labels and retrieve only the minimum needed field.
  • Reveal requires BOTH `VW_REVEAL_ALLOW=1` and `--confirm YES_REVEAL`.
  • // Comments
    Sign in with GitHub to leave a comment.
    // Related skills

    More tools from the same signal band