Bitwarden技能

Audit GitHub Actions action usage across an org. Searches for a specific action (incident mode) or sweeps all workflow files for non-compliant action…

根据用户的请求确定模式：

Remediate GitHub Actions action findings identified by the action-audit skill. Applies the appropriate fix per action type — `@main` ref for internal…

在继续之前，请确认用户有需要处理的审计结果。这些结果应来自之前运行的 action-audit 技能。请确认：

当用户正在本地处理拉取请求的评审意见，并请求帮助评估、实施或起草对评审者反馈的回复时使用 -…

当用户正在本地处理拉取请求的审查评论，并请求帮助评估、实施或起草对审查者反馈的回复时使用 -…

通过aac从用户的Bitwarden保管库中检索登录凭据、API密钥和机密（用户名、密码、TOTP）。当您需要凭据来登录…时使用。

通过aac从用户的Bitwarden保管库中检索登录凭据、API密钥和机密信息（用户名、密码、TOTP）。在需要凭据进行登录时使用。

此技能应在用户要求“分析代码中的安全问题”、“检查OWASP漏洞”、“对照CWE Top 25审查代码”、“查找…”时使用。

当用户要求“分析代码中的安全问题”、“检查OWASP漏洞”、“对照CWE Top 25审查代码”、“查找…

分析指定时间范围或提交区间内的Git提交与变更，生成结构化摘要，用于代码审查、回顾、工作日志或会话记录等场景。

Analyzes git commits and changes within a timeframe or commit range, providing structured summaries for code review, retrospectives, work logs, or session…

Modernizes Angular code such as components and directives to follow best practices using both automatic CLI migrations and Bitwarden-specific patterns. YOU…

使用自动CLI迁移和Bitwarden特定模式，将Angular代码（如组件和指令）现代化，以遵循最佳实践。你…

Apply Bitwarden brand standards — logo usage, color palette, typography, iconography, and capitalization rules — grounded in bitwarden.com/brand and the…

应用 Bitwarden 品牌标准——包括徽标使用、配色方案、字体、图标以及大小写规则——这些标准基于 bitwarden.com/brand 及……

在团队层面进行解决方案架构设计，同时与Bitwarden的整体架构保持一致性。涵盖安全思维、架构判断力、……

技术主管视角下的架构、系统设计、架构评审、爆炸半径评估、权衡分析与决策制定。在规划时使用…

当用户提供单个Jira问题密钥，并询问它是否仍然相关、仍然适用、仍然待处理、仍然是一个缺陷、是否已修复，或是否可以……时使用。

Use when determining what test coverage ALREADY exists for a specific change (a PR, Jira key, Tech Breakdown doc, Testmo CSV, changed paths, or named…

通过只读范围的API令牌和curl命令，从Atlassian Cloud中读取Jira问题、史诗、故事、冲刺、看板以及Confluence页面到上下文中。…

在代码审查期间使用此技能验证发现的问题。针对每个发现，运行拒绝标准和验证检查。如果某个发现未通过任何检查，…

Use this skill to validate findings during a code review. For each finding, run the rejection criteria and verification checks. If a finding fails any check,…

Bitwarden's security principles (P01-P06), security vocabulary, and data classification standards. Use when you need foundational security context for any…

Bitwarden的安全原则（P01-P06）、安全词汇和数据分类标准。在需要任何基础安全上下文时使用。

Reference for all Bitwarden workflow linter (bwwl) rules. Covers all 10 linter rules split into two categories: mechanical rules that can be applied…

job_environment_prefix

Build, test, lint, and deploy commands for the Bitwarden Android project. Use when running tests, building APKs/AABs, running lint/detekt, deploying, using…

用于Bitwarden Android项目的构建、测试、代码检查及部署命令。在运行测试、构建APK/AAB、执行lint/detekt、部署等场景下使用。

Bump the server's util/RustSdk `bitwarden-crypto` git-rev pin to a bitwarden/clients release — map the client's sdk-internal version to a commit, fix breaking…

Primary-Owner playbook for shepherding a Technical Strategy Idea through Architecture's pre-funnel evaluation into the Software Initiative Funnel.

主负责人手册，用于引导技术策略构想通过架构的预漏斗评估，进入软件倡议漏斗。

Plans the creation or modification of a cipher type (vault item type) across the Bitwarden clients monorepo. Use this skill when a user wants to add a new…

规划在Bitwarden客户端单体仓库中创建或修改密码类型（保险库项目类型）。当用户想要添加新的…时使用此技能。

Use this skill when categorizing code review findings into severity levels. Apply when determining which emoji and label to use for PR comments, deciding if an…

在将代码审查发现分类为严重级别时使用此技能。适用于确定PR评论中使用的表情符号和标签，以及判断是否…

Git提交约定及Bitwarden Android的工作流程。在提交代码、编写提交信息或准备变更提交时使用。由……触发。

Git commit conventions and workflow for Bitwarden repositories. Use when committing code, writing commit messages, or preparing changes for commit. Triggered…

Bitwarden仓库的Git提交约定与工作流程。在提交代码、编写提交信息或准备变更提交时使用。触发条件…

Bitwarden's product content style guide for end-user-facing GUI copy — voice, tone, AP-style-with-exceptions grammar, sentence case in UI, and…

Bitwarden面向终端用户的GUI文案产品内容风格指南——语气、语调、AP风格（含例外）语法、UI中的句首大写，以及……

How team-level patterns flow up into Bitwarden's Technical Strategy Ideas backlog and back down through BW Initiatives into team epics and stories. Covers…

团队层面的模式如何向上流入Bitwarden的技术战略创意待办事项，再通过BW倡议向下分解为团队史诗和故事。涵盖…

协调跨团队审查并签署Bitwarden技术分解文档。用于识别受影响的团队、构建第三部分签署表、跟进……

Phase 5 (Implementation) deep-dive playbook — shepherd coordinates teams executing the initiative across the support period, pulse check, retrospective, and…

阶段5（实施）深度剖析手册——协调各团队在支持期内执行计划，进行脉搏检查、回顾总结，以及……

Use when adding a new HEC (HTTP Event Collector) event integration to the Bitwarden web client. Implements the Splunk token authentication model (Bearer token…

用于向Bitwarden Web客户端添加新的HEC（HTTP事件收集器）事件集成时使用。实现Splunk令牌认证模型（Bearer令牌…

Pull request creation workflow for Bitwarden Clients. Use when creating PRs, writing PR descriptions, or preparing branches for review. Triggered by "create…

为 Bitwarden 客户端创建拉取请求的工作流程。在创建 PR、编写 PR 描述或准备分支以供审查时使用。由“create…”触发。

适用于 Bitwarden Android 的拉取请求创建工作流程。在创建 PR、编写 PR 描述或准备分支以供审查时使用。由“create…”触发。

Pull request creation workflow for Bitwarden repositories. Use when creating PRs, writing PR descriptions, or preparing branches for review. Triggered by…

Bitwarden 仓库的拉取请求创建工作流程。用于创建 PR、编写 PR 描述或准备待审查的分支时。由……触发。

TSI引导模型中的同行评审与投资组合策展角色——负责待办事项管理、季度优先级排序及漏斗式需求接收交接。

Peer-Reviewer and portfolio-curator side of the TSI Shepherding Model — backlog stewardship, quarterly prioritization, funnel intake handoff.

Bitwarden design team's Code of Conduct combined with the 30/60/90 critique framework — stage-appropriate critique, product-not-designer focus, content…

Bitwarden设计团队的行为准则结合30/60/90评审框架——阶段适当的评审、关注产品而非设计师、内容……

This skill should be used when the user asks to "find hardcoded secrets", "audit for credential leaks", "check for API keys in code", "review secret scanning…

当用户要求“查找硬编码的秘密”、“审计凭据泄露”、“检查代码中的API密钥”、“审查秘密扫描…”时，应使用此技能。

Resolve open design questions, then capture what's being built into the Specification section of a Bitwarden Tech Breakdown. Use after a breakdown document has…

解决未决的设计问题，然后将正在构建的内容记录到Bitwarden技术分解文档的“规范”部分。在分解文档已…之后使用。

Evaluates a bitwarden/android "Update SDK to" PR against the sdk-internal commit range for compile-time and runtime breaking changes, maps affected symbols to…

Propose a new UI pattern or modify an existing Design System component per Bitwarden's published governance process — design-team alignment, Core vs.…

根据Bitwarden已发布的治理流程——设计团队对齐、核心与……——提出新的UI模式或修改现有的设计系统组件。

Read-only exploration of a local Bitwarden development database — answer business questions from live data, verify seeded fixtures, and introspect schema. Use…

Locates, lists, filters, and extracts structured data from Claude Code native session logs. Supports both single and multiple session analysis.

定位、列出、筛选并提取Claude Code原生会话日志中的结构化数据。支持单会话和多会话分析。

Run or participate in a Bitwarden design critique session — the weekly team critique and one-off product design reviews — grounded in the team's published…

运行或参与Bitwarden设计评审会议——包括每周团队评审和一次性产品设计评审——基于团队已发布的…

该技能将Figma设计规范转化为在Bitwarden Clients单体仓库中完全实现的Angular组件，并附带Storybook故事。输出结果应在视觉上与设计一致，同时遵循所有代码库约定。

Converts Figma designs into production Angular components with Storybook stories for the Bitwarden Clients monorepo. Use this skill whenever the user provides…

Resolves eslint-disable suppression comments throughout the Bitwarden clients codebase by fixing the underlying issue. Use when the user asks to "fix FIXMEs",…

在整个Bitwarden客户端代码库中，通过修复根本问题来解决eslint-disable抑制注释。当用户要求“修复FIXME”时使用，…

Apply one intent across many targets at once — a fleet of repositories across the Bitwarden ecosystem, or many projects inside a monorepo — as N consistent,…

This skill should be used when implementing Android code in Bitwarden. Covers critical patterns, gotchas, and anti-patterns unique to this codebase. Triggered…

此技能应在Bitwarden中实现Android代码时使用。涵盖此代码库特有的关键模式、陷阱和反模式。触发…

Implementing Dapper repository methods and stored procedures for MSSQL at Bitwarden. Use when creating or modifying Dapper repositories, writing stored…

在Bitwarden中实现针对MSSQL的Dapper仓储方法和存储过程。用于创建或修改Dapper仓储、编写存储…

在Bitwarden中实现针对MSSQL的Dapper仓储方法和存储过程。用于创建或修改Dapper仓储、编写存储…

在Bitwarden中为PostgreSQL、MySQL和SQLite实现Entity Framework Core仓库和迁移。在创建或修改EF仓库时使用…

Implementing Entity Framework Core repositories and migrations for PostgreSQL, MySQL, and SQLite at Bitwarden. Use when creating or modifying EF repositories,…

使用ADB支持的MCP工具捕获UI状态、与设计稿对比以及与Android设备交互的说明。

Instructions for capturing UI state, comparing with mocks, and interacting with an Android device using MCP tools backed by ADB.

Move design work through Bitwarden's Product and Design Jira workflow — final designs attached to tickets, the 30/60/90 critique cadence tracked in Figma,…

推动设计工作通过Bitwarden的产品与设计Jira工作流——最终设计稿附加到工单上，30/60/90评审节奏在Figma中跟踪，……

Phase-by-phase guidance for participating in Bitwarden's Software Initiative Funnel. Covers ownership boundaries between shepherd and tech lead at each phase,…

分阶段指导参与Bitwarden软件倡议漏斗。涵盖每个阶段中引导者与技术负责人之间的职责边界，…

提交或创建PR前运行的质量门禁检查清单。在完成实现、检查工作质量或准备提交时使用。触发…

Quality gate checklist to run before committing or creating a PR. Use when finishing implementation, checking work quality, or preparing to commit. Triggered…

提交或创建PR前运行的质量门检查清单。在完成实现、检查工作质量或准备提交时使用。触发…

Performs a security-focused code review by launching multiple specialized agents and a verification agent to ensure comprehensive coverage and accurate…

通过启动多个专门化代理和一个验证代理来执行安全导向的代码审查，以确保全面覆盖和准确…

Perform a rigorous, multi-agent code review with architecture-compliance, parallel quality/security analysis, finding validation, and severity audit. Use when…

执行严格的多智能体代码审查，包括架构合规性、并行质量/安全分析、发现验证和严重性审计。适用于……

Architecture design and phased implementation planning for Bitwarden Android. Use when planning implementation, designing architecture, creating file…

Bitwarden Android的架构设计与分阶段实施规划。用于规划实施、设计架构、创建文件…

Use this skill when posting inline comments to GitHub pull requests. Apply when formatting comments following Bitwarden engineering standards with severity…

在 GitHub 拉取请求中发布内联评论时使用此技能。适用于按照 Bitwarden 工程标准格式化评论并附带严重性…

Use this skill when posting the final summary comment after all inline comments are posted. Apply as the LAST step of code review after all findings are…

在所有内联评论发布后，使用此技能发布最终总结评论。在代码审查的最后一步应用，在所有发现项处理完毕后…

Prepare a Bitwarden design handoff — the Figma file in Ready-for-Dev state and the Jira state transitions that go with it. The end-of-In-Design gate /…

准备 Bitwarden 设计交接 — 处于“准备开发”状态的 Figma 文件以及与之对应的 Jira 状态转换。设计结束阶段 /…

Requirements gap analysis and structured specification for Bitwarden Android. Use when refining requirements, analyzing specs, identifying gaps, or producing…

针对Bitwarden Android的需求差距分析与结构化规范。用于优化需求、分析规范、识别差距以及生成…

Use whenever the user mentions a Jira issue key and wants more than a surface-level lookup — "Read PROJ-123", "What's PROJ-123 about?", "Give me context on…

当用户提到一个Jira问题键并希望获得比表面查询更深入的信息时使用——例如“读取PROJ-123”、“PROJ-123是关于什么的？”、“给我关于……的背景信息

对Claude Code会话进行全面分析，检查Git历史、对话日志、代码变更，并收集用户反馈以生成…

Android-specific code review checklist and MVVM/Compose pattern validation for Bitwarden Android — use this for any review task, even if the user doesn't…

Android 专用代码审查清单及 Bitwarden Android 的 MVVM/Compose 模式验证——可用于任何审查任务，即使开发者未…

Reviews Claude configuration files for security, structure, and prompt engineering quality. Use when reviewing changes to CLAUDE.md files (project-level or…

审查Claude配置文件的安全性、结构和提示工程质量。用于审查对CLAUDE.md文件（项目级或…）的更改。

This skill should be used when the user asks to "review Dependabot alerts", "check for vulnerable dependencies", "audit third-party packages", "assess supply…

当用户要求“审查 Dependabot 警报”、“检查易受攻击的依赖项”、“审计第三方包”、“评估供应链…”时，应使用此技能。

Use this skill when a PR diff contains changes to dependency manifest files (package.json, .csproj, Cargo.toml, go.mod, requirements.txt, etc.) or when…

当PR差异包含对依赖清单文件（package.json、.csproj、Cargo.toml、go.mod、requirements.txt等）的更改时，或当……

在重新审查已有评论的PR或回应开发者初次审查后的修改时使用此技能。适用于存在PR讨论串或…

当用户要求“审查安全架构”、“检查认证模式”、“评估信任边界”、“审查…”时，应使用此技能。

This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review…

Phase 3 (Proof of Concept) deep-dive playbook — validates the Research recommendation in real Bitwarden code and drafts the ADR.

阶段3（概念验证）深度剖析手册——在真实的Bitwarden代码中验证研究建议并起草ADR。

Phase 2 (Research) deep-dive playbook — drafts the Architectural Assessment.

第二阶段（研究）深度挖掘剧本——起草架构评估。

Six-phase playbook for running ownership transitions in either direction — receiving work from another team (initiative handoffs from shepherds, frameworks…

六阶段剧本，用于在任一方向上运行所有权交接——从其他团队接收工作（来自负责人的计划交接、框架……

Phase 4 (Scoping & Commitment) deep-dive playbook — High-Level Architecture Plan, child epics, per-team handoffs, leadership go/no-go.

阶段4（范围界定与承诺）深度剖析手册——高层架构计划、子史诗、各团队交接、领导层决策点。

Five-phase umbrella playbook for an initiative shepherd. Dispatches to phase-deep skills (Research, PoC, Scoping, Implementation) at the right moment.

面向倡议引导者的五阶段总览手册。在适当时机分派至各阶段深度技能（调研、概念验证、范围界定、实施）。

Sets up a new Bitwarden Tech Breakdown in the bitwarden/tech-breakdowns repo. Creates a per-breakdown folder (`<team>/<JIRA-KEY>-<short-slug>/`) containing…

Sets up a new Bitwarden Tech Breakdown in the bitwarden/tech-breakdowns repo. Creates a per-breakdown folder (`<team>/<JIRA-KEY>-<short-slug>/`) containing…

This skill should be used when writing or reviewing tests for Android code in Bitwarden. Triggered by "BaseViewModelTest", "BitwardenComposeTest",…

此技能应在编写或审查Bitwarden中Android代码的测试时使用。由"BaseViewModelTest"、"BitwardenComposeTest"等触发。

This skill should be used when the user asks to "create a threat model", "define security goals", "generate a data flow diagram", "write security definitions",…

当用户要求“创建威胁模型”、“定义安全目标”、“生成数据流图”、“编写安全定义”等时，应使用此技能。

This skill should be used when the user asks to "triage security findings", "fix a Checkmarx finding", "review SonarCloud results", "dismiss a false positive",…

当用户要求“对安全发现进行分类”、“修复 Checkmarx 发现”、“审查 SonarCloud 结果”、“驳回误报”等时，应使用此技能。

Read and inspect Figma designs via the Dev Mode MCP server — selects the right tool, parses Figma URLs into fileKey and nodeId, and turns design context into…

通过Dev Mode MCP服务器读取和检查Figma设计——选择正确的工具，将Figma URL解析为fileKey和nodeId，并将设计上下文转换为…

Run the Bitwarden workflow linter (bwwl) against one or more repos and report findings. Strictly read-only — does not modify any files. Categorizes findings as…

检查bwwl是否可用：

Apply fixes for workflow linter findings identified by the workflow-audit skill. Applies mechanical fixes automatically, pauses for judgment calls, verifies…

检查bwwl是否可用：

Bitwarden client code conventions for Angular and TypeScript. Use when creating components, services, or modifying web/browser/desktop apps.

Bitwarden 客户端代码规范，适用于 Angular 和 TypeScript。在客户端单体仓库中工作、创建组件、服务或进行修改时使用。

Bitwarden 客户端代码规范，适用于 Angular 和 TypeScript。在创建组件、服务或修改 Web/浏览器/桌面应用时使用。

Bitwarden database architecture, migrations, and dual-ORM strategy. Use when working with `.sql` files, stored procedures, EF migrations, or database schema…

writing-database-queries — 一个可安装的AI代理技能，由bitwarden/ai-plugins发布。

Write user-facing release notes for a Bitwarden release from a Jira release tag and the

Bitwarden server code conventions for C# and .NET. Use when working in the server repo, creating commands, queries, services, or API endpoints. Also use when…

Bitwarden 服务器代码规范，适用于 C# 和 .NET。在服务器仓库中编写命令、查询、服务或 API 端点时使用。

DEPRECATED — superseded by `starting-breakdown` and `developing-breakdown-spec`. Retained for historical reference only. Drafted engineering work breakdowns…