bw-cli

What This Skill Does

The bw-cli skill provides a comprehensive bridge between the OpenClaw AI agent and the Bitwarden command-line interface. It enables the agent to securely authenticate, manage, and retrieve sensitive credentials, notes, and organizational data stored within a Bitwarden vault. The skill is designed to handle the full lifecycle of vault management, including synchronization, secure unlocking, item retrieval via search parameters, and administrative tasks like organization member management and collection handling. By abstracting the complex CLI commands into agent-executable actions, it allows for secure password retrieval for login workflows, automated vault auditing, and credential management across different platforms and self-hosted instances.

Installation

To integrate this skill, use the following command in your terminal: clawhub install openclaw/skills/skills/0x7466/bw-cli Ensure that the Bitwarden CLI (bw) is already installed on your system. You can install it via npm install -g @bitwarden/cli or your preferred package manager (Chocolatey, Snap, or the standalone native binary). Once installed, ensure that your environment variables, specifically BW_SESSION and BW_PASSWORD, are configured or passed through the agent's secure memory to allow for automated authentication and unlocking.

Use Cases

This skill is indispensable for automating secure workflows. Key use cases include: retrieving complex API keys or database credentials for developer tasks; checking vault status before executing sensitive scripts; syncing vault items before performing operations on specific web credentials; managing organizational collections for security teams; and generating strong, unique passphrases during the account onboarding process. It is the perfect tool for users who require rapid, programmatic access to their password manager without sacrificing security.

Example Prompts

1. "Unlock my Bitwarden vault and retrieve the login credentials for the production AWS dashboard."
2. "Sync my vault and search for all entries associated with 'GitHub', then show me the username and password for the account tagged as 'Work'."
3. "Generate a new 32-character password with special characters and save it into a new secure note entry in my vault."

Tips & Limitations

Always call bw sync before performing any lookup to ensure the agent is working with the latest data. When handling sensitive output, be mindful that the agent logs may capture return values; ensure your OpenClaw instance is configured with secure memory settings. Note that the CLI requires an active session; if you are logged out, the agent will prompt for credentials. If using a self-hosted instance (Vaultwarden), remember to point the bw config server to your specific URL before attempting to authenticate.