Bitwarden skills collection

Preparing Design Handoff

Prepare a Bitwarden design handoff — the Figma file in Ready-for-Dev state and the Jira state transitions that go with it. The end-of-In-Design gate / checklist.

Recommending Test Layers

Guidance for tasks where deciding WHICH new tests a change needs and at WHICH layer each belongs, working from a Jira key, a Testmo CSV, an assessing-test-coverage report, a PR, or a feature description. Triggers on "should I add…

Researching Jira Issues

Use whenever the user mentions a Jira issue key and wants more than a surface-level lookup — "Read PROJ-123", "What's PROJ-123 about?", "Give me context on PROJ-123", "Deep dive PROJ-123", "What's blocking PROJ-123?", "Summarize PROJ-123…

Retrospecting

Performs comprehensive analysis of Claude Code sessions, examining git history, conversation logs, code changes, and gathering user feedback to generate actionable retrospective reports with insights for continuous improvement.

Reviewing Agent Definitions

Reviews Claude Code agent definition files for tool-access security, triggering quality, and system prompt clarity.

Reviewing Claude Config

Reviews Claude configuration files for security, structure, and prompt engineering quality.

Reviewing Command Definitions

Reviews Claude Code slash command and prompt files for purpose clarity, completeness, shell-execution safety, and correct skill references.

Reviewing Dependencies

This skill should be used when the user asks to "review Dependabot alerts", "check for vulnerable dependencies", "audit third-party packages", "assess supply chain risk", "run an Aikido scan", or needs to evaluate dependency health…

Reviewing Dependency Changes

Guidance for tasks where a PR diff contains changes to dependency manifest files (package.json, .csproj, Cargo.toml, go.mod, requirements.txt, etc.) or when reviewing Renovate/Dependabot bot PRs. Evaluates new dependencies for AppSec…

Reviewing Project Guidance

Reviews CLAUDE.md files for security, structure, and directive clarity.

Reviewing Runtime Configuration

Reviews Claude Code settings and hook definitions for security, permission scoping, and command safety.

Reviewing Security Architecture

This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review encryption implementation", "assess authorization design", or needs to evaluate…

Running A Proof Of Concept

Phase 3 (Proof of Concept) deep-dive playbook — validates the Research recommendation in real Bitwarden code and drafts the ADR.

Running An Architectural Assessment

Phase 2 (Research) deep-dive playbook — drafts the Architectural Assessment.

Running Work Transitions

Six-phase playbook for running ownership transitions in either direction — receiving work from another team (initiative handoffs from shepherds, frameworks from Platform, operational responsibilities from SRE), or originating a transition…

Scoping And Handing Off To Teams

Phase 4 (Scoping & Commitment) deep-dive playbook — High-Level Architecture Plan, child epics, per-team handoffs, leadership go/no-go.

Shepherding An Initiative

Five-phase umbrella playbook for an initiative shepherd. Dispatches to phase-deep skills (Research, PoC, Scoping, Implementation) at the right moment.

Threat Modeling

This skill should be used when the user asks to "create a threat model", "define security goals", "generate a data flow diagram", "write security definitions", "perform an initial security assessment", or needs to produce threat model…

Triaging Security Findings

This skill should be used when the user asks to "triage security findings", "fix an Aikido finding", "review Aikido issues", "dismiss a false positive", "check SAST/IaC alerts", or needs to work with Aikido feed issues, GitHub Dependabot…

Using Figma

Read and inspect Figma designs via the Dev Mode MCP server — selects the right tool, parses Figma URLs into fileKey and nodeId, and turns design context into useful input for critique, copy review, handoff prep, and Design System work.