bitwarden-personal-profile
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill ensures the confidentiality of sensitive personal information by setting restricted file permissions (chmod 600) on the local materialized profile files.
- [COMMAND_EXECUTION]: Subprocess calls to the Bitwarden CLI tools (
bwandbws) are implemented using argument lists, which prevents command injection vulnerabilities that could otherwise occur if processing untrusted input in a shell context. - [SAFE]: Profile data is loaded using
yaml.safe_load(), which is a secure method that prevents the execution of arbitrary code embedded in YAML files. - [CREDENTIALS_UNSAFE]: The skill correctly manages authentication by using environment variables for Bitwarden access tokens rather than hardcoding credentials in the source code or documentation.
- [DATA_EXFILTRATION]: The skill's operations are limited to data movement between the user's authenticated Bitwarden vault and their local filesystem, with no evidence of unauthorized network transmission of sensitive data.
Audit Metadata