ArmorClaw provides a secure, AES-256 encrypted local vault to manage API keys and credentials for AI agents without relying on vulnerable plain-text environment files.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install armorclaw
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install armorclaw using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is ArmorClaw?
ArmorClaw is a specialized security framework designed to eliminate the risks of storing sensitive credentials in plain-text .env files. By leveraging AES-256-CBC encryption and PBKDF2-HMAC-SHA256 key derivation, it ensures that your API keys and tokens remain protected at rest. As a core component of the Openclaw Skills ecosystem, it allows developers to centralize secret management while adding advanced layers of security like machine and IP binding.
The skill provides a seamless bridge between security and usability, allowing AI agents to programmatically access secrets while maintaining a rigorous audit log of every access event. Whether you are running a single bot or a multi-agent swarm, ArmorClaw ensures that credentials are only accessible to authorized skills on verified hardware.
ArmorClaw Use Cases
- Replacing insecure .env files with encrypted local storage for high-stakes API keys.
- Migrating legacy environment configurations into a centralized secure vault via one-command import.
- Implementing machine-level locking to prevent sensitive credentials from being used if files are copied to unauthorized hardware.
- Auditing secret access patterns to see exactly which Openclaw Skills are requesting specific credentials and when.
How ArmorClaw Works
- The user initializes a local vault and establishes a master password with optional hardware or IP binding.
- Credentials are encrypted using AES-256 and stored in a local database where no plain-text data ever touches the disk.
- Openclaw Skills request secrets through a secure Python API or CLI, which verifies the master password or environmental unlock token.
- ArmorClaw validates the integrity of the vault using HMAC to detect any unauthorized tampering before releasing the secret.
- Every successful and failed access attempt is recorded in a persistent audit log for security reporting.
ArmorClaw Setup
Install the skill using the following commands:
npx clawhub@latest install armorclaw
pip install ./skills/armorclaw
Initialize the vault and import your existing secrets:
# Initialize the secure vault
armorclaw init
# Import an existing .env file
armorclaw import ~/.openclaw/openclaw.env
ArmorClaw Data Schema & Taxonomy
ArmorClaw organizes data into an encrypted vault structure with the following metadata taxonomy:
| Data Type | Storage Method | Purpose |
|---|---|---|
| Secret Values | AES-256 Encrypted | Core API keys and credentials |
| Access Logs | Persistent JSON/DB | Tracking skill name, timestamp, and action |
| Machine ID | Hashed MAC Address | Binding the vault to specific hardware |
| Integrity Hashes | HMAC-SHA256 | Detecting data corruption or tampering |
ArmorClaw Advanced Features
- Machine Binding: Locks the vault to a specific MAC address to prevent portable data theft.
- Static IP Restriction: Ensures the vault only unlocks when requested from a verified network environment.
- Cross-Skill Secret Sharing: Allows multiple Openclaw Skills to reference a single source of truth for shared API keys.
- Automated Bot Unlocking: Support for the
ARMORCLAW_PASSWORDenvironment variable to allow headless agent operations. - Detailed Usage Reporting: Generate reports to analyze secret consumption across your entire AI agent fleet.
SKILL.md
Loading
Related Openclaw Skills
GDPR/PCI Compliance Checklist
An automated compliance engine that generates tailored GDPR and PCI-DSS validation frameworks based on your specific industry and company type.
CraftClose
CraftClose provides AI-driven Minecraft server monitoring with automated crash recovery and smart alerts.
Amazon A+ Content Builder
An intelligent strategist for designing, writing, and auditing Amazon A+ and Premium A+ content to maximize product detail page conversions.
Memory Hygiene
A maintenance-focused skill designed to audit, wipe, and optimize the LanceDB vector memory for efficient AI performance.
12306 Train Query
A high-performance CLI utility for querying real-time China Railway 12306 train schedules and ticket availability.
Melo
Melo provides a robust interface for AI agents to manage audio transcription and project-related tasks through Membrane integration.
Featured*
