A security-focused CLI bridge for Bitwarden and Vaultwarden that prioritizes redacted outputs to prevent accidental secret leakage.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install bitwarden-secrets
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install bitwarden-secrets using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Bitwarden Secrets?
The Bitwarden Secrets skill is a specialized interface designed to interact with Bitwarden or Vaultwarden via the bw CLI while maintaining a strict safe-by-default security posture. It allows developers and AI agents to perform vault operations—such as syncing, searching, and metadata retrieval—without exposing actual passwords or sensitive strings in the terminal or chat logs. This integration within Openclaw Skills ensures that sensitive data is only revealed through intentional, multi-step confirmation processes, making it ideal for automated workflows that require high security standards.
By wrapping the standard Bitwarden CLI, this skill provides a layer of protection against bulk secret dumps. It encourages the use of item IDs and labels for identification, fetching the minimum necessary information to complete a task. Whether you are managing a self-hosted Vaultwarden instance or the official Bitwarden cloud, this skill provides a unified and secure way to handle credentials in a programmatic environment.
Bitwarden Secrets Use Cases
- Synchronizing local vault state with remote Bitwarden or Vaultwarden servers.
- Searching for specific vault items by name or keyword without displaying passwords.
- Retrieving non-sensitive item metadata such as unique IDs and URI labels.
- Performing controlled secret retrieval for deployment or configuration tasks using explicit safety overrides.
How Bitwarden Secrets Works
- The skill communicates with the installed bw CLI to interface with your vault server.
- Upon unlocking the vault with a master password or API key, a session token is utilized for subsequent requests.
- Python scripts within the skill parse CLI outputs to redact sensitive fields before presenting them to the user or agent.
- If a secret must be revealed, the skill checks for a specific environment variable override and a manual confirmation flag to prevent accidental exposure.
Bitwarden Secrets Setup
To get started with this skill, ensure the Bitwarden CLI is installed and your server is configured. Follow these steps:
# Configure server and login
bw config server <your-vault-url>
bw login --apikey
bw unlock
# Navigate to the skill directory
cd skills/bitwarden-secrets
# Verify status
python3 scripts/vw_cli.py status
# Optional: Use the bootstrap helper for session management
source scripts/vw_bootstrap.sh
Bitwarden Secrets Data Schema & Taxonomy
The skill organizes vault data into a structured format focusing on identification over content. The following table describes how data is handled within Openclaw Skills:
| Attribute | Description | Policy |
|---|---|---|
| Item ID | The unique GUID for the vault entry | Visible |
| Name | The display name or label of the entry | Visible |
| Metadata | Custom fields and URI information | Visible |
| Secrets | Passwords, TOTP seeds, and hidden fields | Redacted |
| Session | Temporary BW_SESSION token | Hidden |
Bitwarden Secrets Advanced Features
- Safe-by-default architecture that automatically redacts sensitive data from all standard command outputs.
- Multi-factor safety gate for secret revelation requiring both the VW_REVEAL_ALLOW environment variable and a manual confirmation string.
- Integrated bootstrap helper script to refresh sessions and load runtime variables in a single step.
- Support for custom vault fields and metadata retrieval without exposing primary credentials.
- Compatible with both self-hosted Vaultwarden and official Bitwarden cloud environments.
SKILL.md
Loading
Related Openclaw Skills
NeonDB
A serverless Postgres skill for AI agents that provides instant database provisioning, scale-to-zero compute, and Git-like branching.
BotEmail.ai - Instant Bot Email Addresses
BotEmail.ai provides instant, permanent bot email addresses designed for automated testing, signup flows, and inbox monitoring without human intervention.
Claudius Crypto Intelligence
A comprehensive crypto intelligence skill providing real-time pricing, technical indicators, and market sentiment analysis.
Social Media Scheduler
A command-line tool to generate a comprehensive, platform-optimized weekly social media content calendar for any niche.
clawbrain
A comprehensive memory layer that gives AI agents personality, long-term learning, and secure credential storage.
CAD Agent
A rendering server that enables AI agents to generate, visualize, and iterate on 3D parametric models.
Featured*
