Skill Claude CodeCodex
Prepare a Bitwarden design handoff — the Figma file in Ready-for-Dev state and the Jira state transitions that go with it. The end-of-In-Design gate / checklist.
140 3d ago A 44 tokens
using-figma
50Skill Claude CodeCodex
Read and inspect Figma designs via the Dev Mode MCP server — selects the right tool, parses Figma URLs into fileKey and nodeId, and turns design context into useful input for critique, copy review, handoff prep, and Design System work.
140 3d ago A 56 tokens
Plugin Claude Code
Product designer agent for Bitwarden. Holds the design team's Code of Conduct and the 30/60/90 critique framework, and dispatches into the bitwarden-design-tools toolkit for content style, Figma reads, brand application, handoff prep, Design System governance, and the Product and Design Jira workflow.
140 3d ago A
tokens not measured
Agent
Bitwarden product designer. Holds the team's Code of Conduct and the 30/60/90 critique framework, and dispatches into the design toolkit for everything else — content style, Figma reads, brand application, handoff prep, Design System governance, and Jira choreography. Use when reviewing or critiquing a design…
140 3d ago A 624 tokens
Skill Claude CodeCodex
Bitwarden design team's Code of Conduct combined with the 30/60/90 critique framework — stage-appropriate critique, product-not-designer focus, content evaluated alongside visual design at 60% and 90%.
140 3d ago A 46 tokens
Skill Claude CodeCodex
Run or participate in a Bitwarden design critique session — the weekly team critique and one-off product design reviews — grounded in the team's published etiquette guide and the Product Design Review Guidelines.
140 3d ago A 44 tokens
Plugin Claude Code
GitHub Actions workflow compliance, action security auditing, and org-wide CI/CD remediation.
140 3d ago A
tokens not measured
action-audit
56Skill Claude CodeCodex
Audit GitHub Actions action usage across an org. Searches for a specific action (incident mode) or sweeps all workflow files for non-compliant action references (audit mode). Produces a read-only report of findings with compliance status and resolved SHAs. Does not modify any files. User: We need to check if any repos…
140 3d ago A 124 tokens
Skill Claude CodeCodex
Remediate GitHub Actions action findings identified by the action-audit skill. Applies the appropriate fix per action type — @main ref for internal bitwarden/ actions, full SHA with inline version comment for external actions, or full replacement — across selected repos and creates draft PRs. Run the action-audit…
140 3d ago A 151 tokens
Skill Claude CodeCodex
Reference for Bitwarden GitHub Actions naming conventions that the workflow linter (bwwl) does not enforce. Covers three standards — job IDs (kebab-case), step names (Sentence case imperative), and workflow file names (kebab-case.yml, prefix for reusable) — plus an advisory canonical step-name glossary and…
140 3d ago A 157 tokens
Skill Claude CodeCodex
Reference for all Bitwarden workflow linter (bwwl) rules. Covers all 10 linter rules split into two categories: mechanical rules that can be applied automatically (namecapitalized, permissionsexist, pinnedjobrunner, steppinned, underscoreoutputs, jobenvironmentprefix, checkprtarget) and judgment rules requiring user…
140 3d ago A 170 tokens
Skill Claude CodeCodex
Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions composite actions (azure-login → get-keyvault-secrets → azure-logout), consume it safely, and get it beyond the job or into a…
140 3d ago A 178 tokens
Skill Claude CodeCodex
Run the Bitwarden workflow linter (bwwl) against one or more repos and report findings. Strictly read-only — does not modify any files. Categorizes findings as mechanical or judgment using the bitwarden-workflow-linter-rules skill. Supports single repo, multiple repos, or single file/directory scope. User: Run the…
140 3d ago A 125 tokens
workflow-fix
62Skill Claude CodeCodex
Apply fixes for workflow linter findings identified by the workflow-audit skill. Applies mechanical fixes automatically, pauses for judgment calls, verifies with a re-lint, and creates draft PRs. Run the workflow-audit skill first to identify findings before using this skill. User: Go ahead and fix the linter findings…
140 3d ago A 116 tokens
Plugin Claude Code
Initialize Claude Code configuration with Bitwarden's standardized template format.
140 3d ago A
tokens not measured
Plugin Claude Code
Product analyst agent for creating comprehensive Bitwarden requirements documents from multiple sources, and writing user-facing release notes.
140 3d ago A
tokens not measured
Agent
Use when analyzing requirements, synthesizing specifications from multiple sources, or conducting product research. Trigger phrases: "analyze requirements", "create specification", "create spec", "write spec", "spec out", "spec document", "create a requirements doc", "research feature", "document requirements"…
140 3d ago A 0 tokens
Skill Claude CodeCodex
Extract complete, unambiguous requirements from specifications. Use when analyzing feature requests, processing enhancement specifications, or identifying missing information. Trigger phrases: "extract requirements", "analyze specification", "identify requirements", "clarify ambiguities". After extracting…
140 3d ago A 0 tokens
Skill Claude CodeCodex
Break down features and requirements into actionable, implementable tasks with clear scope and acceptance criteria. Use when planning implementation, organizing complex work, or creating task lists. Trigger phrases: "break down tasks", "create work plan", "organize implementation", "plan development". This skill works…
140 3d ago A 0 tokens
Skill Claude CodeCodex
Write user-facing release notes for a Bitwarden release from a Jira release tag and the.
140 3d ago A 22 tokens
Plugin Claude Code
Application security engineering assistant for vulnerability triage, threat modeling, and secure code analysis at Bitwarden.
140 3d ago A
tokens not measured
Agent
Application security engineer specializing in vulnerability triage, threat modeling, and secure code analysis. Use for security findings remediation, threat model generation, dependency audits, and architecture security review.
140 3d ago A 41 tokens
Skill Claude CodeCodex
This skill should be used when the user asks to "analyze code for security issues", "check for OWASP vulnerabilities", "review code against CWE Top 25", "find injection vulnerabilities", "do a security code review", or needs manual security analysis against OWASP Top 10, API Top 10, Mobile Top 10, or CWE/SANS…
140 3d ago A 80 tokens
Skill Claude CodeCodex
Audit all open HackerOne-sourced VULN Jira tickets and their linked engineering child items to identify what needs action. Use this skill whenever the user wants to: check VULN ticket status, see which HackerOne findings need status updates, identify vulnerabilities ready to verify or close, run a remediation audit…
140 3d ago A 0 tokens