360 Secure SkillHub
360 安全技能中心

Safe Bitwarden Cli

这是一款加固的Bitwarden原生剪贴板代理工具,核心功能是通过零信任内核级管道,安全搜索Bitwarden条目,将密码或TOTP(2FA)码直接复制到系统剪贴板。具备审计透明性:纯Shell实现无Node.js风险,AI无法读取敏感信息,采用加固的二进制调用。典型场景是安全获取Bitwarden中的密码或2FA码,通过命令行传入查询词或条目ID操作,内容直接流向剪贴板无中间暴露。

chyern
chyern
热度 52.19
最近更新 2026-05-11 17:43:38
分类:安全依赖:代码执行 / 第三方 API应用场景:自动化脚本

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add safe-bitwarden-cli
Metadata
name
safe-bitwarden-cli
version
1.6.0
description
Industrial-grade secure bridge to Bitwarden. Copy passwords and TOTP codes with Zero-trust kernel-level piping.
homepage
https://github.com/chyern/Agent-Skills
repository
https://github.com/chyern/Agent-Skills.git
env_vars
{"BW_SESSION":"Active Bitwarden session token"}
requires
{"bins":["bash","python3","bw","pbcopy","clip","xclip","wl-copy"],"envs":["BW_SESSION"]}

Safe Bitwarden CLI (Skill)

AUDIT TRANSPARENCY NOTICE:

  • Pure Shell: No Node.js runtime risk.
  • AI PASSWORD BLINDNESS: Passwords and TOTP codes flow directly to the system clipboard.
  • Zero Eval: Hardened binary invocation.

Positioning & Scope

This skill is a Hardened Native Clipboard Proxy.

  • Capabilities: Securely search items and copy Passwords or TOTP (2FA) codes directly to the native clipboard via OS-level streams.

Usage Guide

  1. Environment Setup:
    Run bash scripts/main.sh setup

    • Ensure BW_SESSION is exported locally.
  2. Search Items:
    Run bash scripts/main.sh search "<query>"

  3. Secure Password Copy:
    Run bash scripts/main.sh copy "<id>"

  4. Secure TOTP Copy:
    Run bash scripts/main.sh totp "<id>"

    • Pipes the 6-digit 2FA code directly to your native clipboard.