Skill collection
bitwarden/ai-plugins agent skills
- skills
- 33
- official
- 33
- GitHub stars
- 154
GitHub description: “AI plugin marketplace.”
- Stars
- 154 (21 forks)
- Licence
- Unknown
- Last push
- Oct 2026
- Created
- Oct 2025
Install all skills
npx skills add bitwarden/ai-pluginsAdd --skill <name> for a single skill and -a <agent> to choose the agent (see the agent guides).
Skills in bitwarden/ai-plugins, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Reviews Claude configuration files for security, structure, and prompt engineering quality. | bitwarden/ | 154 | — | ~4.2k | Automated safety check: Pass | Unknown | today |
| 2 | Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions… | bitwarden/ | 154 | — | ~4k | Automated safety check: Pass | Unknown | today |
| 3 | This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review encryption implementation", "assess… | bitwarden/ | 154 | — | ~2.2k | Automated safety check: Pass | Unknown | today |
| 4 | Audits an external (third-party) Claude Code plugin pinned in this marketplace for security risk before it is vendored, and writes the report to a file for downstream posting. | bitwarden/ | 154 | — | ~1.8k | Automated safety check: Pass | Unknown | today |
| 5 | Audit GitHub Actions action usage across an org. An agent skill from bitwarden/ai-plugins. | bitwarden/ | 154 | — | ~1.5k | Automated safety check: Pass | Unknown | today |
| 6 | Remediate GitHub Actions action findings identified by the action-audit skill. | bitwarden/ | 154 | — | ~1.1k | Automated safety check: Pass | Unknown | today |
| 7 | A skill your agent uses when the user is addressing pull request review comments locally and asks for help evaluating, implementing, or drafting responses to reviewer feedback - requires technical… | bitwarden/ | 154 | — | ~1.9k | Automated safety check: Pass | Unknown | today |
| 8 | Compose the conventions a Bitwarden pull request needs — the conventional commit type prefix and title, the PR template body, and the ai-review label. | bitwarden/ | 154 | — | ~1.5k | Automated safety check: Pass | Unknown | today |
| 9 | A skill your agent uses when the user provides a single Jira issue key and asks whether it is still relevant, still applicable, still pending, still a bug, has been fixed, or can be closed. | bitwarden/ | 154 | — | ~2.7k | Automated safety check: Pass | Unknown | today |
| 10 | A skill your agent uses when determining what test coverage ALREADY exists for a specific change (a PR, Jira key, Tech Breakdown doc, Testmo CSV, changed paths, or named component). | bitwarden/ | 154 | — | ~1.1k | Automated safety check: Pass | Unknown | today |
| 11 | Audit all open HackerOne-sourced VULN Jira tickets and their linked engineering child items to identify what needs action. | bitwarden/ | 154 | — | ~3.4k | Automated safety check: Pass | Unknown | today |
| 12 | Git commit conventions and workflow for Bitwarden repositories. | bitwarden/ | 154 | — | ~492 | Automated safety check: Pass | Unknown | today |
| 13 | Check a design, change, pull request, plan, or threat model against Bitwarden's Architecture Decision Records (ADRs), or locate and summarize the ADR catalog. | bitwarden/ | 154 | — | ~1.4k | Automated safety check: Pass | Unknown | today |
| 14 | Open a pull request from a branch in a Bitwarden repository. | bitwarden/ | 154 | — | ~2.9k | Automated safety check: Pass | Unknown | today |
| 15 | This skill should be used when the user asks to "find hardcoded secrets", "audit for credential leaks", "check for API keys in code", "review secret scanning alerts", "rotate a leaked secret", or… | bitwarden/ | 154 | — | ~2.1k | Automated safety check: Notes | Unknown | today |
| 16 | Locates, lists, filters, and extracts structured data from Claude Code native session logs. | bitwarden/ | 154 | — | ~2.5k | Automated safety check: Pass | Unknown | today |
| 17 | Conventional commit type keywords for PR titles and commit messages. | bitwarden/ | 154 | — | ~707 | Automated safety check: Pass | Unknown | today |
| 18 | Phase-by-phase guidance for participating in Bitwarden's Software Initiative Funnel. | bitwarden/ | 154 | — | ~3k | Automated safety check: Pass | Unknown | today |
| 19 | Performs a security-focused code review by launching multiple specialized agents and a verification agent to ensure comprehensive coverage and accurate findings. | bitwarden/ | 154 | — | ~5.5k | Automated safety check: Pass | Unknown | today |
| 20 | A skill your agent uses when emitting inline review comments, whether posted to a GitHub pull request or written to a local file under caller-declared local-file output. | bitwarden/ | 154 | — | ~1k | Automated safety check: Pass | Unknown | today |
| 21 | A skill your agent uses when posting the final summary comment, including its No Verdict form when nothing could be reviewed and no inline comments exist. | bitwarden/ | 154 | — | ~2.3k | Automated safety check: Pass | Unknown | today |
| 22 | A skill your agent uses when deciding WHICH new tests a change needs and at WHICH layer each belongs, working from a Jira key, a Testmo CSV, an assessing-test-coverage report, a PR, or a feature… | bitwarden/ | 154 | — | ~2.4k | Automated safety check: Pass | Unknown | today |
| 23 | Extract complete, unambiguous requirements from specifications. | bitwarden/ | 154 | — | ~1.3k | Automated safety check: Pass | Unknown | today |
| 24 | A skill your agent uses whenever the user mentions a Jira issue key and wants more than a surface-level lookup — "Read PROJ-123", "What's PROJ-123 about?", "Give me context on PROJ-123", "Deep dive… | bitwarden/ | 154 | — | ~1.9k | Automated safety check: Pass | Unknown | today |
| 25 | Performs comprehensive analysis of Claude Code sessions, examining git history, conversation logs, code changes, and gathering user feedback to generate actionable retrospective reports with… | bitwarden/ | 154 | — | ~4k | Automated safety check: Pass | Unknown | today |
| 26 | Reviews Claude Code agent definition files for tool-access security, triggering quality, and system prompt clarity. | bitwarden/ | 154 | — | ~2.4k | Automated safety check: Pass | Unknown | today |
| 27 | This skill should be used when the user asks to "review Dependabot alerts", "check for vulnerable dependencies", "audit third-party packages", "assess supply chain risk", "run an Aikido scan", or… | bitwarden/ | 154 | — | ~2k | Automated safety check: Pass | Unknown | today |
| 28 | Reviews CLAUDE.md files for security, structure, and directive clarity. | bitwarden/ | 154 | — | ~1.8k | Automated safety check: Pass | Unknown | today |
| 29 | This skill should be used when the user asks to "triage security findings", "fix an Aikido finding", "review Aikido issues", "dismiss a false positive", "check SAST/IaC alerts", or needs to work… | bitwarden/ | 154 | — | ~2.2k | Automated safety check: Pass | Unknown | today |
| 30 | Break down features and requirements into actionable, implementable tasks with clear scope and acceptance criteria. | bitwarden/ | 154 | — | ~1.5k | Automated safety check: Pass | Unknown | today |
| 31 | Run the Bitwarden workflow linter (bwwl) against one or more repos and report findings. | bitwarden/ | 154 | — | ~696 | Automated safety check: Pass | Unknown | today |
| 32 | Apply fixes for workflow linter findings identified by the workflow-audit skill. | bitwarden/ | 154 | — | ~1.1k | Automated safety check: Pass | Unknown | today |
| 33 | A skill your agent uses when authoring NEW manual test cases in Gherkin format from a feature description, Jira ticket, acceptance criteria, PR, or design doc — the kind a QA engineer imports into… | bitwarden/ | 154 | — | ~1.9k | Automated safety check: Pass | Unknown | today |
Questions, answered from the data.
What is the best skill in bitwarden/ai-plugins?
Reviewing Claude Config (official) from bitwarden/ai-plugins ranks first of the 33 skills in bitwarden/ai-plugins listed here, with the highest score: its repository has 154 GitHub stars, its SKILL.md loads about 4.2k tokens and it passes the automated safety check with no findings. Next come Managing Workflow Secrets and Reviewing Security Architecture.
Are the skills in bitwarden/ai-plugins official?
33 of the 33 skills in bitwarden/ai-plugins are official, published by the vendor's own GitHub organization: Reviewing Claude Config, Managing Workflow Secrets, Reviewing Security Architecture, Auditing External Claude Plugins, Action Audit and 28 more.
How do I install all skills from bitwarden/ai-plugins?
Run npx skills add bitwarden/ai-plugins in your project: the open-source skills CLI installs the repository's skills into your coding agent's skills folder. To install a single skill, open its page here for the exact command.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.