Bitwarden技能

Audit GitHub Actions action usage across an org. Searches for a specific action (incident mode) or sweeps all workflow files for non-compliant action…

根據用戶的請求判斷模式：

Remediate GitHub Actions action findings identified by the action-audit skill. Applies the appropriate fix per action type — `@main` ref for internal…

在繼續之前，請確認使用者有可處理的稽核結果。這些結果應來自先前執行的 action-audit 技能。請確認：

Use when the user is addressing pull request review comments locally and asks for help evaluating, implementing, or drafting responses to reviewer feedback -…

當使用者在本地處理拉取請求的審查意見，並請求協助評估、實作或草擬回覆審查者的反饋時使用…

Retrieve login credentials, API keys, and secrets (username, password, TOTP) from the user's Bitwarden vault via aac. Use when you need credentials to sign…

從使用者的 Bitwarden 保管庫透過 aac 擷取登入憑證、API 金鑰與機密（使用者名稱、密碼、TOTP）。當需要憑證來登入時使用。

This skill should be used when the user asks to "analyze code for security issues", "check for OWASP vulnerabilities", "review code against CWE Top 25", "find…

此技能應在使用者要求「分析程式碼的安全性問題」、「檢查 OWASP 漏洞」、「根據 CWE Top 25 審查程式碼」、「找出…」時使用。

分析指定時間範圍或提交範圍內的 Git 提交與變更，提供結構化摘要，適用於程式碼審查、回顧會議、工作日誌或工作階段…

Analyzes git commits and changes within a timeframe or commit range, providing structured summaries for code review, retrospectives, work logs, or session…

Modernizes Angular code such as components and directives to follow best practices using both automatic CLI migrations and Bitwarden-specific patterns. YOU…

使用自動 CLI 遷移和 Bitwarden 特定模式，將 Angular 程式碼（如元件和指令）現代化，以遵循最佳實踐。你…

Apply Bitwarden brand standards — logo usage, color palette, typography, iconography, and capitalization rules — grounded in bitwarden.com/brand and the…

套用 Bitwarden 品牌標準 — 標誌使用、色彩調色盤、字體排版、圖示設計及大小寫規則 — 以 bitwarden.com/brand 及…為基礎

Architecting solutions at the team level while staying coherent with Bitwarden's holistic architecture. Covers security mindset, architectural judgment,…

技術主管視角，涵蓋架構、系統設計、架構審查、爆炸半徑評估、權衡分析與決策制定。適用於規劃…

Use when the user provides a single Jira issue key and asks whether it is still relevant, still applicable, still pending, still a bug, has been fixed, or can…

Use when determining what test coverage ALREADY exists for a specific change (a PR, Jira key, Tech Breakdown doc, Testmo CSV, changed paths, or named…

透過唯讀範圍的API令牌和curl命令，從Atlassian Cloud讀取Jira問題、史詩、故事、衝刺、看板以及Confluence頁面至上下文中。…

在程式碼審查期間使用此技能驗證發現。針對每個發現，執行拒絕條件與驗證檢查。若發現未通過任何檢查，…

Use this skill to validate findings during a code review. For each finding, run the rejection criteria and verification checks. If a finding fails any check,…

Bitwarden's security principles (P01-P06), security vocabulary, and data classification standards. Use when you need foundational security context for any…

Bitwarden的安全原則（P01-P06）、安全詞彙與資料分類標準。當需要任何基礎安全背景資訊時使用…

Reference for all Bitwarden workflow linter (bwwl) rules. Covers all 10 linter rules split into two categories: mechanical rules that can be applied…

job_environment_prefix

Build, test, lint, and deploy commands for the Bitwarden Android project. Use when running tests, building APKs/AABs, running lint/detekt, deploying, using…

用於 Bitwarden Android 專案的建置、測試、靜態分析與部署指令。適用於執行測試、建置 APK/AAB、執行 lint/detekt、部署等操作時使用…

Bump the server's util/RustSdk `bitwarden-crypto` git-rev pin to a bitwarden/clients release — map the client's sdk-internal version to a commit, fix breaking…

Primary-Owner playbook for shepherding a Technical Strategy Idea through Architecture's pre-funnel evaluation into the Software Initiative Funnel.

主要負責人劇本，用於引導技術策略構想通過架構的預漏斗評估，進入軟體倡議漏斗。

Plans the creation or modification of a cipher type (vault item type) across the Bitwarden clients monorepo. Use this skill when a user wants to add a new…

規劃在 Bitwarden 客戶端單一儲存庫中建立或修改密碼類型（保險庫項目類型）。當使用者想要新增一個新的…時，請使用此技能。

Use this skill when categorizing code review findings into severity levels. Apply when determining which emoji and label to use for PR comments, deciding if an…

在分類程式碼審查結果的嚴重程度時使用此技能。適用於決定在 PR 評論中使用哪個表情符號和標籤，判斷是否…

Bitwarden Android 的 Git 提交慣例與工作流程。在提交程式碼、撰寫提交訊息或準備變更以供提交時使用。由……觸發。

Git commit conventions and workflow for Bitwarden repositories. Use when committing code, writing commit messages, or preparing changes for commit. Triggered…

Bitwarden 儲存庫的 Git 提交慣例與工作流程。在提交程式碼、撰寫提交訊息或準備變更以供提交時使用。觸發條件…

Bitwarden's product content style guide for end-user-facing GUI copy — voice, tone, AP-style-with-exceptions grammar, sentence case in UI, and…

Bitwarden 的產品內容風格指南，適用於面向終端使用者的 GUI 文案——語調、語氣、採用 AP 風格但具例外情況的文法、UI 中的句子大小寫，以及……

How team-level patterns flow up into Bitwarden's Technical Strategy Ideas backlog and back down through BW Initiatives into team epics and stories. Covers…

團隊層級的模式如何向上流入 Bitwarden 的技術策略構想待辦事項，再向下透過 BW 倡議進入團隊史詩與故事。涵蓋…

協調跨團隊審查與簽核 Bitwarden 技術分解。用於識別受影響團隊、建立第三部分簽核表格、追蹤…

Phase 5 (Implementation) deep-dive playbook — shepherd coordinates teams executing the initiative across the support period, pulse check, retrospective, and…

階段5（實施）深度演練手冊——協調者統籌各團隊在支援期間、脈搏檢查、回顧等環節執行倡議。

Use when adding a new HEC (HTTP Event Collector) event integration to the Bitwarden web client. Implements the Splunk token authentication model (Bearer token…

用於在 Bitwarden 網頁客戶端新增 HEC（HTTP 事件收集器）事件整合時使用。實作 Splunk 權杖驗證模型（Bearer 權杖…

Pull request creation workflow for Bitwarden Clients. Use when creating PRs, writing PR descriptions, or preparing branches for review. Triggered by "create…

Bitwarden 客戶端的拉取請求建立工作流程。用於建立 PR、撰寫 PR 說明或準備供審查的分支。由「create…」觸發。

Bitwarden Android 的拉取請求建立流程。用於建立 PR、撰寫 PR 說明或準備供審查的分支時使用。由「create…」觸發。

Pull request creation workflow for Bitwarden repositories. Use when creating PRs, writing PR descriptions, or preparing branches for review. Triggered by…

Bitwarden 儲存庫的拉取請求建立工作流程。用於建立 PR、撰寫 PR 說明或準備分支以供審查時。由……觸發。

TSI 引導模式中的同儕審查者與投資組合策展人角色 — 負責待辦事項管理、季度優先排序、以及漏斗導入交接。

Peer-Reviewer and portfolio-curator side of the TSI Shepherding Model — backlog stewardship, quarterly prioritization, funnel intake handoff.

Bitwarden design team's Code of Conduct combined with the 30/60/90 critique framework — stage-appropriate critique, product-not-designer focus, content…

Bitwarden 設計團隊的行為準則結合 30/60/90 評論框架 — 階段適宜的評論、聚焦產品而非設計師、內容…

This skill should be used when the user asks to "find hardcoded secrets", "audit for credential leaks", "check for API keys in code", "review secret scanning…

當使用者要求「找出硬編碼的機密」、「稽核憑證外洩」、「檢查程式碼中的 API 金鑰」、「檢視機密掃描…」時，應使用此技能。

Resolve open design questions, then capture what's being built into the Specification section of a Bitwarden Tech Breakdown. Use after a breakdown document has…

解決未決的設計問題，然後將正在構建的內容記錄到 Bitwarden 技術分解文件的「規格」部分。在分解文件已…之後使用。

Evaluates a bitwarden/android "Update SDK to" PR against the sdk-internal commit range for compile-time and runtime breaking changes, maps affected symbols to…

Propose a new UI pattern or modify an existing Design System component per Bitwarden's published governance process — design-team alignment, Core vs.…

根據 Bitwarden 發布的治理流程，提議新的 UI 模式或修改現有的設計系統元件——設計團隊對齊、核心與……

Read-only exploration of a local Bitwarden development database — answer business questions from live data, verify seeded fixtures, and introspect schema. Use…

Locates, lists, filters, and extracts structured data from Claude Code native session logs. Supports both single and multiple session analysis.

定位、列出、篩選並從 Claude Code 原生對話記錄中提取結構化資料。支援單一與多重對話分析。

Run or participate in a Bitwarden design critique session — the weekly team critique and one-off product design reviews — grounded in the team's published…

執行或參與 Bitwarden 設計評審會議——包括每週團隊評審與一次性產品設計審查——以團隊已發布的內容為基礎……

此技能可將 Figma 設計規格轉換為 Bitwarden Clients 單一儲存庫中，具備 Storybook 故事的完整 Angular 元件。輸出結果應在視覺上符合設計，同時遵循所有程式碼庫慣例。

Converts Figma designs into production Angular components with Storybook stories for the Bitwarden Clients monorepo. Use this skill whenever the user provides…

Resolves eslint-disable suppression comments throughout the Bitwarden clients codebase by fixing the underlying issue. Use when the user asks to "fix FIXMEs",…

解決 Bitwarden 客戶端程式碼庫中 eslint-disable 抑制註解的問題，透過修復根本原因。當使用者要求「修復 FIXME」時使用，…

Apply one intent across many targets at once — a fleet of repositories across the Bitwarden ecosystem, or many projects inside a monorepo — as N consistent,…

This skill should be used when implementing Android code in Bitwarden. Covers critical patterns, gotchas, and anti-patterns unique to this codebase. Triggered…

此技能應在 Bitwarden 中實作 Android 程式碼時使用。涵蓋此程式碼庫特有的關鍵模式、陷阱與反模式。觸發條件…

Implementing Dapper repository methods and stored procedures for MSSQL at Bitwarden. Use when creating or modifying Dapper repositories, writing stored…

在 Bitwarden 中實作 Dapper 儲存庫方法與 MSSQL 預存程序。用於建立或修改 Dapper 儲存庫、撰寫預存…

在 Bitwarden 中實作 Dapper 儲存庫方法與 MSSQL 預存程序。用於建立或修改 Dapper 儲存庫、撰寫預存…

在 Bitwarden 中為 PostgreSQL、MySQL 和 SQLite 實作 Entity Framework Core 儲存庫與遷移。用於建立或修改 EF 儲存庫時…

Implementing Entity Framework Core repositories and migrations for PostgreSQL, MySQL, and SQLite at Bitwarden. Use when creating or modifying EF repositories,…

使用ADB支援的MCP工具，擷取UI狀態、與設計稿比對，並與Android裝置互動的操作說明。

Instructions for capturing UI state, comparing with mocks, and interacting with an Android device using MCP tools backed by ADB.

Move design work through Bitwarden's Product and Design Jira workflow — final designs attached to tickets, the 30/60/90 critique cadence tracked in Figma,…

將設計工作推進 Bitwarden 的產品與設計 Jira 工作流程 — 最終設計附加至票證，30/60/90 評論節奏在 Figma 中追蹤，…

Phase-by-phase guidance for participating in Bitwarden's Software Initiative Funnel. Covers ownership boundaries between shepherd and tech lead at each phase,…

逐階段引導參與Bitwarden的軟體倡議漏斗。涵蓋每個階段中shepherd與tech lead之間的職責邊界，…

在提交或建立PR前執行的品質關卡檢查清單。適用於完成實作、檢查工作品質或準備提交時。觸發條件…

Quality gate checklist to run before committing or creating a PR. Use when finishing implementation, checking work quality, or preparing to commit. Triggered…

在提交或建立 PR 前執行的品質關卡檢查清單。適用於完成實作、檢查工作品質或準備提交時。觸發條件…

Performs a security-focused code review by launching multiple specialized agents and a verification agent to ensure comprehensive coverage and accurate…

執行安全導向的程式碼審查，透過啟動多個專業代理程式與驗證代理程式，確保全面覆蓋與準確性…

Perform a rigorous, multi-agent code review with architecture-compliance, parallel quality/security analysis, finding validation, and severity audit. Use when…

執行嚴謹的多智能體程式碼審查，包含架構合規性、平行品質/安全性分析、發現驗證及嚴重性稽核。適用於……

Architecture design and phased implementation planning for Bitwarden Android. Use when planning implementation, designing architecture, creating file…

Bitwarden Android 的架構設計與分階段實作規劃。用於規劃實作、設計架構、建立檔案…

Use this skill when posting inline comments to GitHub pull requests. Apply when formatting comments following Bitwarden engineering standards with severity…

在 GitHub 拉取請求中張貼行內評論時使用此技能。適用於按照 Bitwarden 工程標準格式化評論，並包含嚴重性…

Use this skill when posting the final summary comment after all inline comments are posted. Apply as the LAST step of code review after all findings are…

在所有行內評論發布後，使用此技能發布最終摘要評論。作為程式碼審查的最後一步，在所有發現事項完成後套用…

Prepare a Bitwarden design handoff — the Figma file in Ready-for-Dev state and the Jira state transitions that go with it. The end-of-In-Design gate /…

準備 Bitwarden 設計交接 — 處於 Ready-for-Dev 狀態的 Figma 檔案，以及與之對應的 Jira 狀態轉換。In-Design 階段的結束閘門 /…

Requirements gap analysis and structured specification for Bitwarden Android. Use when refining requirements, analyzing specs, identifying gaps, or producing…

針對Bitwarden Android的需求差距分析與結構化規格。用於優化需求、分析規格、識別差距或產出…

Use whenever the user mentions a Jira issue key and wants more than a surface-level lookup — "Read PROJ-123", "What's PROJ-123 about?", "Give me context on…

每當使用者提及 Jira 問題金鑰，且需求不僅止於表面查詢時使用，例如「讀取 PROJ-123」、「PROJ-123 是什麼？」、「提供關於……的背景資訊」

對 Claude Code 工作階段進行全面分析，檢視 Git 歷史記錄、對話日誌、程式碼變更，並收集使用者回饋以產生…

Android-specific code review checklist and MVVM/Compose pattern validation for Bitwarden Android — use this for any review task, even if the user doesn't…

Android 專用程式碼審查檢查清單與 Bitwarden Android 的 MVVM/Compose 模式驗證 — 可用於任何審查任務，即使使用者未…

Reviews Claude configuration files for security, structure, and prompt engineering quality. Use when reviewing changes to CLAUDE.md files (project-level or…

審查 Claude 設定檔的安全性、結構與提示工程品質。用於審查 CLAUDE.md 檔案的變更（專案層級或…）

This skill should be used when the user asks to "review Dependabot alerts", "check for vulnerable dependencies", "audit third-party packages", "assess supply…

此技能應在使用者要求「審查 Dependabot 警報」、「檢查易受攻擊的依賴項」、「稽核第三方套件」、「評估供應鏈…」時使用。

Use this skill when a PR diff contains changes to dependency manifest files (package.json, .csproj, Cargo.toml, go.mod, requirements.txt, etc.) or when…

當 PR 的差異包含對依賴清單檔案（如 package.json、.csproj、Cargo.toml、go.mod、requirements.txt 等）的變更時，或當……

在重新審視已有評論的PR，或回應開發者在初次審查後的變更時，使用此技能。適用於存在PR討論串或…的情況。

當使用者要求「審查安全架構」、「檢查驗證模式」、「評估信任邊界」、「審查…」時，應使用此技能。

This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review…

Phase 3 (Proof of Concept) deep-dive playbook — validates the Research recommendation in real Bitwarden code and drafts the ADR.

第三階段（概念驗證）深入探討手冊 — 在真實的 Bitwarden 程式碼中驗證研究建議，並草擬 ADR。

Phase 2 (Research) deep-dive playbook — drafts the Architectural Assessment.

第二階段（研究）深入探討手冊——草擬架構評估。

Six-phase playbook for running ownership transitions in either direction — receiving work from another team (initiative handoffs from shepherds, frameworks…

六階段劇本，用於執行雙向的任務交接——從其他團隊接收工作（來自負責人的倡議交接、框架……

Phase 4 (Scoping & Commitment) deep-dive playbook — High-Level Architecture Plan, child epics, per-team handoffs, leadership go/no-go.

第四階段（範圍界定與承諾）深度演練手冊 — 高層級架構計畫、子史詩、各團隊交接、領導層的執行/不執行決策。

Five-phase umbrella playbook for an initiative shepherd. Dispatches to phase-deep skills (Research, PoC, Scoping, Implementation) at the right moment.

五階段總體行動手冊，適用於倡議引導者。在適當時機調度至各階段深度技能（研究、概念驗證、範圍界定、實施）。

Sets up a new Bitwarden Tech Breakdown in the bitwarden/tech-breakdowns repo. Creates a per-breakdown folder (`<team>/<JIRA-KEY>-<short-slug>/`) containing…

Sets up a new Bitwarden Tech Breakdown in the bitwarden/tech-breakdowns repo. Creates a per-breakdown folder (`<team>/<JIRA-KEY>-<short-slug>/`) containing…

This skill should be used when writing or reviewing tests for Android code in Bitwarden. Triggered by "BaseViewModelTest", "BitwardenComposeTest",…

此技能應在撰寫或審查 Bitwarden 中 Android 程式碼的測試時使用。由「BaseViewModelTest」、「BitwardenComposeTest」…觸發。

This skill should be used when the user asks to "create a threat model", "define security goals", "generate a data flow diagram", "write security definitions",…

當使用者要求「建立威脅模型」、「定義安全目標」、「生成資料流程圖」、「撰寫安全定義」…時，應使用此技能。

This skill should be used when the user asks to "triage security findings", "fix a Checkmarx finding", "review SonarCloud results", "dismiss a false positive",…

當使用者要求「分類安全發現」、「修復 Checkmarx 發現」、「審查 SonarCloud 結果」、「排除誤報」等情況時，應使用此技能。

Read and inspect Figma designs via the Dev Mode MCP server — selects the right tool, parses Figma URLs into fileKey and nodeId, and turns design context into…

透過 Dev Mode MCP 伺服器讀取並檢視 Figma 設計 — 選取正確工具、將 Figma URL 解析為 fileKey 與 nodeId，並將設計上下文轉換為…

Run the Bitwarden workflow linter (bwwl) against one or more repos and report findings. Strictly read-only — does not modify any files. Categorizes findings as…

檢查 bwwl 是否可用：

Apply fixes for workflow linter findings identified by the workflow-audit skill. Applies mechanical fixes automatically, pauses for judgment calls, verifies…

檢查 bwwl 是否可用：

Bitwarden client code conventions for Angular and TypeScript. Use when creating components, services, or modifying web/browser/desktop apps.

Bitwarden 客戶端程式碼慣例，適用於 Angular 和 TypeScript。在客戶端單一儲存庫中工作、建立元件、服務或修改時使用…

Bitwarden 客戶端程式碼慣例，適用於 Angular 與 TypeScript。用於建立元件、服務，或修改網頁/瀏覽器/桌面應用程式時使用。

Bitwarden database architecture, migrations, and dual-ORM strategy. Use when working with `.sql` files, stored procedures, EF migrations, or database schema…

writing-database-queries — 一個可安裝的AI代理技能，由bitwarden/ai-plugins發布。

Write user-facing release notes for a Bitwarden release from a Jira release tag and the

Bitwarden server code conventions for C# and .NET. Use when working in the server repo, creating commands, queries, services, or API endpoints. Also use when…

Bitwarden 伺服器程式碼慣例，適用於 C# 和 .NET。在伺服器儲存庫中建立命令、查詢、服務或 API 端點時使用。

DEPRECATED — superseded by `starting-breakdown` and `developing-breakdown-spec`. Retained for historical reference only. Drafted engineering work breakdowns…