โ† All skills
Tencent SkillHub ยท Developer Tools

Securely interact with Bitwarden/Vaultwarden vaults using rbw CLI. Use when retrieving credentials, managing vault items, or integrating secrets into scripts/systemd services. Handles authentication, field access, and non-interactive operation patterns.

Securely interact with Bitwarden/Vaultwarden vaults using rbw CLI. Use when retrieving credentials, managing vault items, or integrating secrets into scripts...

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

Securely interact with Bitwarden/Vaultwarden vaults using rbw CLI. Use when retrieving credentials, managing vault items, or integrating secrets into scripts...

โฌ‡ 0 downloads โ˜… 0 stars Unverified but indexed

Install for OpenClaw

Quick setup
  1. Download the package from Yavira.
  2. Extract the archive and review SKILL.md first.
  3. Import or place the package into your OpenClaw setup.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Yavira redirect
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
SKILL.md

Validation

  • Use the Yavira download entry.
  • Review SKILL.md after the package is downloaded.
  • Confirm the extracted package contains the expected setup assets.

Install with your agent

Agent handoff

Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.

  1. Download the package from Yavira.
  2. Extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the extracted folder.
New install

I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.

Upgrade existing

I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
1.0.0

Documentation

ClawHub primary doc Primary doc: SKILL.md 11 sections Open source page

Quick Reference

rbw unlock # unlock vault rbw list # list all items rbw list --fields "name,folder" # list with folders rbw get item_name # get password rbw get --folder folder_name item_name # get from folder rbw get --folder folder_name item_name --field url # get specific field rbw sync # sync vault

get

rbw get [OPTIONS] <NAME> [USER] Options: --folder <FOLDER> Folder to search in --field <FIELD> Specific field to retrieve (omit for password) --full Include notes in output --raw Output as JSON --clipboard Copy result to clipboard <NAME> is a positional argument. [USER] disambiguates when multiple items share the same name. All option flags (--folder, --field, etc.) must precede the positional arguments. rbw get --folder homelab portainer rbw get --folder homelab portainer --field url rbw get my_password rbw get --folder work email user@example.com # USER disambiguation

list

rbw list [OPTIONS] Options: --fields <FIELDS> Fields to display: id, name, user, folder, type --raw Output as JSON Note: rbw list does not support --folder filtering. Use rbw list --fields "name,folder" and grep if needed. rbw list --fields "name,folder" rbw list --raw | jq

add

rbw add [OPTIONS] <NAME> [USER] Options: --folder <FOLDER> Folder for the new entry --uri <URI> URI for the entry rbw will prompt for the password inline. Notes (if any) open in $EDITOR. rbw add --folder homelab my_service admin_user rbw add --folder homelab --uri https://example.com my_service

Field Names

Field names are case-sensitive and must match exactly as defined in Vaultwarden. rbw get --folder homelab item # password (no --field) rbw get --folder homelab item --field Username # default Username field (capital U) rbw get --folder homelab item --field database # custom field rbw get --folder homelab item --field api_key # custom field To inspect all fields on an item: rbw get --folder homelab item --raw | jq

Interactive

# Check status (exits 0 if unlocked, non-zero if locked) rbw unlocked # Unlock (prompts for master password) rbw unlock

Non-Interactive (Systemd/Scripts)

Security note: This pattern stores your master password in a plaintext file. Even with 600 permissions and root:root ownership, this is a security tradeoff. For higher-security environments, consider systemd's native LoadCredential= mechanism instead. 1. Create a pinentry wrapper (~/.local/bin/pinentry-rbw-systemd): #!/usr/bin/env bash if [ -n "$RBW_MASTER_PASSWORD" ]; then echo "OK Pleased to meet you" while IFS= read -r line; do case "$line" in GETPIN) echo "D $RBW_MASTER_PASSWORD" echo "OK" ;; BYE) echo "OK closing connection" exit 0 ;; *) echo "OK" ;; esac done else exec /usr/bin/pinentry-curses "$@" fi 2. Configure rbw to use it: chmod +x ~/.local/bin/pinentry-rbw-systemd rbw config set pinentry ~/.local/bin/pinentry-rbw-systemd rbw config show # verify 3. Store master password (/etc/systemd/rbw-credentials.conf, root:root, chmod 600): RBW_MASTER_PASSWORD=your_master_password_here 4. Systemd service: [Service] User=tripleight EnvironmentFile=/etc/systemd/rbw-credentials.conf ExecStart=/path/to/script.sh 5. Script pattern: #!/usr/bin/env bash set -euo pipefail if ! rbw unlocked 2>/dev/null; then rbw unlock || { echo "ERROR: Failed to unlock rbw" >&2; exit 1; } fi rbw sync USERNAME=$(rbw get --folder homelab service_name --field Username 2>/dev/null \ || { echo "ERROR: Cannot read username (homelab/service_name)" >&2; exit 1; }) PASSWORD=$(rbw get --folder homelab service_name 2>/dev/null \ || { echo "ERROR: Cannot read password (homelab/service_name)" >&2; exit 1; }) curl -u "$USERNAME:$PASSWORD" https://api.example.com

Vaultwarden Item Setup

A typical item used with rbw: Folder: homelab Name: postgres_backup Type: Login Username: postgres โ† accessed with --field Username Password: ********** โ† accessed without --field Custom fields: database production โ† accessed with --field database host db.example.com port 5432 Corresponding script access: USERNAME=$(rbw get --folder homelab postgres_backup --field Username) PASSWORD=$(rbw get --folder homelab postgres_backup) DATABASE=$(rbw get --folder homelab postgres_backup --field database) HOST=$(rbw get --folder homelab postgres_backup --field host) PORT=$(rbw get --folder homelab postgres_backup --field port)

Error Handling

Always check exit codes and provide actionable error messages: VALUE=$(rbw get --folder homelab item --field field 2>/dev/null \ || { echo "ERROR: Cannot read 'field' from vault (homelab/item)" >&2; exit 1; }) if [ -z "$VALUE" ]; then echo "ERROR: Field is empty in vault" >&2 exit 1 fi

Troubleshooting

"agent is locked" โ€” run rbw unlock. "field not found" โ€” field names are case-sensitive. Inspect the item with rbw get item --raw | jq to see exact names. Then run rbw sync to ensure the vault is current. Systemd service fails to unlock: Verify /etc/systemd/rbw-credentials.conf exists with the correct password Check permissions: sudo ls -l /etc/systemd/rbw-credentials.conf (expect root:root 600) Verify pinentry config: rbw config show Test manually: sudo -u tripleight bash -c 'export RBW_MASTER_PASSWORD=...; rbw unlock' Item not found โ€” check folder and item names with rbw list --fields "name,folder", then rbw sync.

Best Practices

Always sync before reading to ensure the latest vault state. Always check unlock status before attempting reads to avoid unnecessary prompts. Handle errors explicitly with useful messages. Never hardcode secrets โ€” use rbw for everything. Keep systemd credential files 600 root:root. Use folders to organise items across environments (production, staging, homelab, etc.).

Category context

Code helpers, APIs, CLIs, browser automation, testing, and developer operations.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
1 Docs
  • SKILL.md Primary doc