Security Audit

bw-cli

github.com/openclaw/skills

AI SkillCommit 13146e6a3d46

TRUSTED

Scanned 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

bw-cli received a trust score of 79/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.

SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Sensitive environment variable access: $HOME, Skill facilitates storage of Bitwarden master password on disk.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on February 14, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

93%

Dependency Graph

100%

LLM Behavioral Safety

85%

Behavioral Risk Signals

Filesystem Write

1 finding

Shell Execution

2 findings

Excessive Permissions

2 findings

Security Findings2

Severity	Finding	Layer	Location
HIGH	Skill facilitates storage of Bitwarden master password on disk The `SKILL.md` documentation and the `scripts/unlock-session.sh` script explicitly guide and enable the user to store their Bitwarden master password in a file (`~/.openclaw/workspace/.secrets/bw-password.txt`). Although the skill attempts to set file permissions to `600` and add the directory to `.gitignore`, storing the master password on disk significantly increases the risk of credential exposure if the host system or the skill's execution environment is compromised. A malicious actor gaining access could read this file and gain full access to the user's Bitwarden vault. Avoid storing the master password on disk. Instead, rely on interactive input, environment variables (which should be cleared after use), or a secure secrets management system (e.g., a system keyring, hardware security module) that does not write the secret to a readable file. If disk storage is absolutely necessary, ensure robust encryption and access controls beyond basic file permissions.	LLM	SKILL.md:100
MEDIUM	Sensitive environment variable access: $HOME Access to sensitive environment variable '$HOME' detected in shell context. Verify this environment variable access is necessary and the value is not exfiltrated.	Static	skills/0x7466/bw-cli/scripts/unlock-session.sh:8

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/c8030c010faed1f9.svg)](https://skillshield.io/report/c8030c010faed1f9)