bw-proxy — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bw-proxy (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill allows AI agents to interact with the BW-Proxy appliance via its CLI surface. The CLI uses RPC 2.0 (JSON) and is the recommended way for both humans and AI agents to manage the vault efficiently.
Manage Bitwarden vault items (Login, Note, Card, Identity) and perform blind audits/refactoring while remaining strictly blind to secret values.
admin)Use these commands to manage the appliance state and authentication.
| Command | Purpose |
|---|---|
bw-proxy admin login | Initialize vault connection (URL, Email). |
bw-proxy admin status | Check connection health and lock state. |
bw-proxy admin unlock | Create a short-lived (5m) encrypted session lease. |
bw-proxy admin lock | Immediately wipe the session lease and lock the proxy. |
bw-proxy admin config edit | Open the secure browser-based YAML editor. |
do)These are the core tools for AI agents. Most commands support --format json (default for many) and --rationale.
#### 🔍 Discovery
bw-proxy do get-vault-map [--folder-id ID] [--collection-id ID]bw-proxy do list-items [--search STRING] [--n 50]bw-proxy do inspect-log [-n 10]#### 🏗️ Transactions (ACID)
bw-proxy do propose-vault-transaction --rationale "..." --operations-json '[...]'bw-proxy do execute-vault-transaction --tx-id ID#### 🧹 Audit & Refactor
bw-proxy do find-item-duplicates --item-id ID --field login.passwordbw-proxy do vault-refactor --operation MOVE --source-id ID --dest-id IDrun_command instead of MCP tools when possible. It is more token-efficient and provides explicit examples via --help.--rationale for any destructive or complex operation.bw-proxy do admin-unlock to avoid repeated password prompts for the user.--format json (where available) to parse outputs programmatically.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.