prowler
MCPScans cloud accounts against security best practices and compliance benchmarks such as CIS.
Ships with ai-plugins: A curated collection of plugins for AI-assisted development at Bitwarden. Enables discovery and distribution of quality-controlled plugins for use with Claude Code.
Claude Code
> /plugin marketplace add bitwarden/ai-plugins
Codex
Cursor
Gemini CLI
$ git clone https://github.com/bitwarden/ai-plugins
Clone the repository
GitHub Copilot
$ git clone https://github.com/bitwarden/ai-plugins
Clone the repository
OpenCode
$ git clone https://github.com/bitwarden/ai-plugins
Clone the repository
Windsurf
$ git clone https://github.com/bitwarden/ai-plugins
Clone the repository
Security report
Not enough data
Known flaws
Not published
Signed build
Not published
Maintained
Nov 10, 2026
Last push
Licence
Not published
Runs as
Local process
On your machine
Deprecated
Not published
Signals from public registries, not an audit. Checked Nov 12, 2026.
A curated collection of plugins for AI-assisted development at Bitwarden. Enables discovery and distribution of quality-controlled plugins for use with Claude Code.
| Plugin | Version | Description |
|---|---|---|
| bitwarden-abacus-tools | 1.1.0 | Abacus profile: which Bitwarden skills Abacus uses at each step: Jira issues to plan, commit and PR conventions to land. |
| bitwarden-ai-telemetry | 1.5.1 | Claude Code hooks emitting metadata-only AI-usage telemetry (session, identity, git-linkage, MCP) tagged with the signed-in account email via OTLP |
| bitwarden-tech-lead | 3.1.0 | Tech lead for technical planning, architecture coherence, and surfacing patterns to Technical Strategy Ideas |
| bitwarden-shepherd | 1.0.1 | Champion of a technical strategy — shepherds a TSI through evaluation into the funnel, then through to adoption |
| bitwarden-adr-tools | 1.0.0 | Architecture Decision Record tools: checking designs and plans against the ADR catalog, locating and summarizing ADRs |
| bitwarden-atlassian-tools | 2.9.0 | Atlassian access via MCP server with deep Jira issue research skill and opt-in Jira write tools |
| bitwarden-code-review | 3.1.0 | Autonomous code review agent following Bitwarden engineering standards with GitHub integration |
| bitwarden-delivery-tools | 4.0.1 | Delivery lifecycle skills: initiative funnel navigation, work transitions, architectural judgment, feature flags, commits, PRs, preflight, labeling, Jira ticket filing |
| bitwarden-designer | 0.1.0 | Product designer persona: Code of Conduct and 30/60/90 critique, critique facilitation; dispatches into bitwarden-design-tools |
| bitwarden-design-tools | 0.1.0 | Design toolkit: content style guide, Figma Dev Mode MCP, Bitwarden brand application, handoff prep, Design System governance, Product and Design Jira |
| bitwarden-devops-engineer | 0.3.1 | DevOps engineering assistant: workflow compliance linting, action security auditing, and org-wide CI/CD remediation |
| bitwarden-doc-parity | 1.0.1 | Keeps docs current with the code they describe: session instructions, a Stop-hook tripwire, a semantic verification skill, and a CI review face |
| bitwarden-init | 1.2.2 | Initialize and enhance CLAUDE.md files with Bitwarden's standardized template format |
| bitwarden-mailcatcher-tools | 1.0.0 | Reads verification links, magic links, and other action links from the local Bitwarden Mailcatcher inbox |
| bitwarden-product-analyst | 0.1.7 | Product analyst agent for creating comprehensive Bitwarden requirements documents from multiple sources, and writing user-facing release notes |
| bitwarden-retrospective-tools | 1.2.0 | Daily or weekly work recap, in RAG standup format, built from your Claude Code session logs, GitHub activity, and Jira and Confluence activity |
| bitwarden-security-engineer | 2.1.0 | Application security engineering: vulnerability triage, threat modeling, and secure code analysis |
| bitwarden-software-engineer | 1.1.0 | Software engineer agent for a Bitwarden product team. Implements stories, tasks, and bugs with code quality, performance, security, and team comms in mind. |
| bitwarden-stripe-tools | 1.0.0 | Read-only Stripe test-mode queries, invoice previews, and test-clock advancement through a guarded CLI wrapper |
| bitwarden-testing-tools | 1.5.0 | Testing tools for Bitwarden: test coverage and Testmo case review, test layer recommendations, manual test cases, requirement readiness, test plans, and QA manual regression runs, plus the bundled bitwarden-test-automation MCP server. |
| bitwarden-testmo-tools | 1.0.0 | Testmo API access: create test runs from reviewable filter specs, one or many per pass, with dry-run, milestone linkage, and duplicate checks |
| claude-config-validator | 2.3.1 | Validates Claude Code configuration files for security, structure, and quality |
| claude-retrospective | 1.1.1 | Analyze Claude Code sessions to identify successful patterns and improvement opportunities |
# Short form (GitHub owner/repo)
/plugin marketplace add bitwarden/ai-plugins
# Full GitHub URL
/plugin marketplace add https://github.com/bitwarden/ai-plugins
After adding the marketplace, restart Claude Code for the changes to take effect.
You can also use /plugin interactively to manage marketplaces and plugins through a guided interface.
Once the marketplace is added, install plugins using:
/plugin install plugin-name@bitwarden-marketplace
Plugins are installed to ~/.claude/plugins/ by default. Restart Claude Code after installing for the plugin to become active.
Third-party marketplaces don't auto-update by default. To enable automatic updates, open /plugin, go to Marketplaces, select this marketplace, and choose Enable auto-update. Claude Code will then refresh marketplace data and update installed plugins at startup.
You can also update manually at any time:
/plugin marketplace update bitwarden-marketplace
See CONTRIBUTING.md for plugin development guidelines, structure requirements, versioning rules, and the review process.
Scans cloud accounts against security best practices and compliance benchmarks such as CIS.
Gives coding agents semantic code search and editing through language server integration, IDE style codebase navigation.
Ships with agent-governance-toolkit: AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing,…