Menu
Unlock rbw (Bitwarden CLI) via a Home Assistant phone notification. Use when rbw commands fail with "not unlocked", before calling rbw::get/rbw::find, or whenever the vault needs to be unlocked.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use when working with the NetBox inventory at netbox.brkn.lol, especially for device metadata, purchase data, product/support URLs, asset tags, device type synchronization, and radio or MAC-address modeling. Read `references/conventions.md` before making NetBox changes.
Use when working with the Home Assistant configuration for the `hv` VM, especially for YAML config changes, `config.d/` edits, MCP-backed inspection or control, hass-cli inspection, API calls, Lovelace dashboard editing (`.storage/lovelace.*`), and validation before or after changes. Read `AGENTS.md` in the repo before editing.
Use for system-level changes to NixOS hosts and Home Manager configurations. Handles Nix code updates, host deployments, and repository-wide Nix standards. Refer to AGENTS.md for foundational environment and deployment rules.
Use for read-only lookup of invoices, order confirmations, and related email records on bichon.brkn.lol. Often used in conjunction with the NetBox skill for verifying purchase details.
Use when writing, editing, reviewing, or generating shell code in bash, sh, or zsh. Applies to scripts, sourced shell files, functions, and shell snippets. Enforces the repo shell style and safe entrypoint/error-handling patterns.
Edit local zsh plugins at ~/.config/zsh/plugins/local. Use when the user wants to add, modify, or debug personal zsh functions, aliases, or plugin files.
| name | rbw |
| description | Unlock rbw (Bitwarden CLI) via a Home Assistant phone notification. Use when rbw commands fail with "not unlocked", before calling rbw::get/rbw::find, or whenever the vault needs to be unlocked. |
Use this skill when rbw needs to be unlocked before a command can run.
rbw unlocked
Returns 0 if unlocked, non-zero if locked.
POST to the HA webhook to send an actionable notification to the phone.
On Accept, HA SSHes to the target host and pipes the master password
from HA secrets to rbw unlock --stdin.
curl -fsS -X POST "http://10.5.1.1:8123/api/webhook/rbw_unlock_request" \
-H "Content-Type: application/json" \
-d "{\"host\": \"${HOST:-fnuc}\", \"agent\": \"Claude\"}"
The host field is optional and defaults to fnuc. Known short names that
HA maps to SSH targets (<name>.lan): fnuc, ge2, x13, gk4.
The agent field is shown in the phone notification (defaults to Claude
if omitted).
After triggering the webhook, poll until unlocked (2-minute timeout):
for i in $(seq 1 24); do
rbw unlocked 2>/dev/null && break
sleep 5
done
rbw unlocked || { echo "rbw unlock timed out"; exit 1; }
if ! rbw unlocked 2>/dev/null; then
echo "Requesting rbw unlock on ${HOST:-fnuc} via Home Assistant..."
curl -fsS -X POST "http://10.5.1.1:8123/api/webhook/rbw_unlock_request" \
-H "Content-Type: application/json" \
-d "{\"host\": \"${HOST:-fnuc}\", \"agent\": \"Claude\"}" || {
echo "Failed to reach HA webhook" >&2; exit 1
}
echo "Waiting for Accept tap on phone (up to 2 minutes)..."
for i in $(seq 1 24); do
rbw unlocked 2>/dev/null && { echo "rbw unlocked"; break; }
sleep 5
done
rbw unlocked || { echo "rbw unlock timed out"; exit 1; }
fi