Bitwarden Bw

• Analyzed: May 11, 2026, 4:36 AM
• Findings: 1
• Version: 1.0.0
• Hash: edef190cf02cafb9f1674978edec48fb57fe229e22b3c79f46fc95bedd44801f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides instructions for an AI agent to interact with the legitimate Bitwarden CLI (`bw`) for password management. All commands are standard `bw` operations, and there is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The reliance on the `BW_SESSION` environment variable is expected for non-interactive Bitwarden CLI usage. Potential shell injection risks from unsanitized user input are vulnerabilities in the agent's execution model, not malicious intent within the skill definition itself.