# Send Bitwarden Vault CLI to your agent
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
## Fast path
- Download the package from Yavira.
- Extract it into a folder your agent can access.
- Paste one of the prompts below and point your agent at the extracted folder.
## Suggested prompts
### New install

```text
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
```
### Upgrade existing

```text
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
```
## Machine-readable fields
```json
{
  "schemaVersion": "1.0",
  "item": {
    "slug": "bitwarden-vault",
    "name": "Bitwarden Vault CLI",
    "source": "tencent",
    "type": "skill",
    "category": "开发工具",
    "sourceUrl": "https://clawhub.ai/StartupBros/bitwarden-vault",
    "canonicalUrl": "https://clawhub.ai/StartupBros/bitwarden-vault",
    "targetPlatform": "OpenClaw"
  },
  "install": {
    "downloadUrl": "/downloads/bitwarden-vault",
    "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=bitwarden-vault",
    "sourcePlatform": "tencent",
    "targetPlatform": "OpenClaw",
    "packageFormat": "ZIP package",
    "primaryDoc": "SKILL.md",
    "includedAssets": [
      "SKILL.md",
      "references/cli-examples.md",
      "references/get-started.md"
    ],
    "downloadMode": "redirect",
    "sourceHealth": {
      "source": "tencent",
      "slug": "bitwarden-vault",
      "status": "healthy",
      "reason": "direct_download_ok",
      "recommendedAction": "download",
      "checkedAt": "2026-04-30T15:41:13.612Z",
      "expiresAt": "2026-05-07T15:41:13.612Z",
      "httpStatus": 200,
      "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=bitwarden-vault",
      "contentType": "application/zip",
      "probeMethod": "head",
      "details": {
        "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=bitwarden-vault",
        "contentDisposition": "attachment; filename=\"bitwarden-vault-1.0.0.zip\"",
        "redirectLocation": null,
        "bodySnippet": null,
        "slug": "bitwarden-vault"
      },
      "scope": "item",
      "summary": "Item download looks usable.",
      "detail": "Yavira can redirect you to the upstream package for this item.",
      "primaryActionLabel": "Download for OpenClaw",
      "primaryActionHref": "/downloads/bitwarden-vault"
    },
    "validation": {
      "installChecklist": [
        "Use the Yavira download entry.",
        "Review SKILL.md after the package is downloaded.",
        "Confirm the extracted package contains the expected setup assets."
      ],
      "postInstallChecks": [
        "Confirm the extracted package includes the expected docs or setup files.",
        "Validate the skill or prompts are available in your target agent workspace.",
        "Capture any manual follow-up steps the agent could not complete."
      ]
    }
  },
  "links": {
    "detailUrl": "https://openagent3.xyz/skills/bitwarden-vault",
    "downloadUrl": "https://openagent3.xyz/downloads/bitwarden-vault",
    "agentUrl": "https://openagent3.xyz/skills/bitwarden-vault/agent",
    "manifestUrl": "https://openagent3.xyz/skills/bitwarden-vault/agent.json",
    "briefUrl": "https://openagent3.xyz/skills/bitwarden-vault/agent.md"
  }
}
```
## Documentation

### Bitwarden CLI Skill

The Bitwarden command-line interface (CLI) provides full access to your Bitwarden vault for retrieving passwords, secure notes, and other secrets programmatically.

### Workflow Requirements

CRITICAL: Always run bw commands inside a dedicated tmux session. The CLI requires a session key (BW_SESSION) for all vault operations after authentication. A tmux session preserves this environment variable across commands.

### Required Workflow

Verify CLI installation: Run bw --version to confirm the CLI is available
Create a dedicated tmux session: tmux new-session -d -s bw-session
Attach and authenticate: Run bw login or bw unlock inside the session
Export session key: After unlock, export BW_SESSION as instructed by the CLI
Execute vault commands: Use bw get, bw list, etc. within the same session

### Authentication Methods

MethodCommandUse CaseEmail/Passwordbw loginInteractive sessions, first-time setupAPI Keybw login --apikeyAutomation, scripts (requires separate unlock)SSObw login --ssoEnterprise/organization accounts

After bw login with email/password, your vault is automatically unlocked. For API key or SSO login, you must subsequently run bw unlock to decrypt the vault.

### Session Key Management

The unlock command outputs a session key. You must export it:

# Bash/Zsh
export BW_SESSION="<session_key_from_unlock>"

# Or capture automatically
export BW_SESSION=$(bw unlock --raw)

Session keys remain valid until you run bw lock or bw logout. They do not persist across terminal windows—hence the tmux requirement.

### Reading Secrets

# Get password by item name
bw get password "GitHub"

# Get username
bw get username "GitHub"

# Get TOTP code
bw get totp "GitHub"

# Get full item as JSON
bw get item "GitHub"

# Get specific field
bw get item "GitHub" | jq -r '.fields[] | select(.name=="api_key") | .value'

# List all items
bw list items

# Search items
bw list items --search "github"

### Security Guardrails

NEVER expose secrets in logs, code, or command output visible to users
NEVER write secrets to disk unless absolutely necessary
ALWAYS use bw lock when finished with vault operations
PREFER reading secrets directly into environment variables or piping to commands
If you receive "Vault is locked" errors, re-authenticate with bw unlock
If you receive "You are not logged in" errors, run bw login first
Stop and request assistance if tmux is unavailable on the system

### Environment Variables

VariablePurposeBW_SESSIONSession key for vault decryption (required for all vault commands)BW_CLIENTIDAPI key client ID (for --apikey login)BW_CLIENTSECRETAPI key client secret (for --apikey login)BITWARDENCLI_APPDATA_DIRCustom config directory (enables multi-account setups)

### Self-Hosted Servers

For Vaultwarden or self-hosted Bitwarden:

bw config server https://your-bitwarden-server.com

### Reference Documentation

Get Started Guide - Installation and initial setup
CLI Examples - Common usage patterns and advanced operations
## Trust
- Source: tencent
- Verification: Indexed source record
- Publisher: StartupBros
- Version: 1.0.0
## Source health
- Status: healthy
- Item download looks usable.
- Yavira can redirect you to the upstream package for this item.
- Health scope: item
- Reason: direct_download_ok
- Checked at: 2026-04-30T15:41:13.612Z
- Expires at: 2026-05-07T15:41:13.612Z
- Recommended action: Download for OpenClaw
## Links
- [Detail page](https://openagent3.xyz/skills/bitwarden-vault)
- [Send to Agent page](https://openagent3.xyz/skills/bitwarden-vault/agent)
- [JSON manifest](https://openagent3.xyz/skills/bitwarden-vault/agent.json)
- [Markdown brief](https://openagent3.xyz/skills/bitwarden-vault/agent.md)
- [Download page](https://openagent3.xyz/downloads/bitwarden-vault)