Bitwarden Vault CLI

• Analyzed: May 12, 2026, 3:06 AM
• Findings: 1
• Version: 1.0.0
• Hash: 05cc35b82433c828000ad87c4f026c7df96b1c9b1b06ab0227a8dd43e5db730c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle for Bitwarden CLI is classified as benign. While it inherently deals with sensitive data (secrets) and requires shell/network access, these capabilities are directly aligned with its stated purpose of managing a Bitwarden vault. The `SKILL.md` file includes explicit 'Security Guardrails' instructing the AI agent to 'NEVER expose secrets in logs' and 'NEVER write secrets to disk', actively mitigating potential misuse. There is no evidence of intentional harmful behavior such as data exfiltration to unauthorized endpoints, persistence mechanisms, or malicious prompt injection attempts to subvert the agent's purpose.