A secure management system for encrypting agent secrets and organizing configuration profiles across multiple environments.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install env-manager
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install env-manager using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Environment Manager?
The Environment Manager is a critical component for any developer looking to standardize how sensitive data is handled within their agentic workflows. As one of the core Openclaw Skills, it provides a structured way to store API keys, database credentials, and system configurations with AES-256 encryption at rest, ensuring that agent sessions remain secure and compliant with modern security standards.
This skill eliminates the risk of hardcoding secrets by providing a centralized repository that supports environment-specific profiles. By integrating this into your workflow, you can seamlessly switch between development, staging, and production environments while maintaining a clear audit trail of credential access and enforcing mandatory rotation policies.
Environment Manager Use Cases
- Storing and encrypting sensitive API keys for LLM providers and external services.
- Managing distinct configuration sets for development, staging, and production environments.
- Automating the injection of secrets into agent sessions without exposing raw values in logs.
- Tracking the age of credentials to facilitate regular security rotations and compliance audits.
How Environment Manager Works
- Secrets are written to a secure directory with restricted file permissions (chmod 600).
- Environment profiles are defined in .env files, referencing the encrypted secrets stored on disk.
- The agent sources the specific environment profile at the beginning of a session or heartbeat.
- Access logs and file metadata are used to monitor secret usage and prompt for periodic rotations.
- Multi-agent workflows can utilize encrypted channels to pass credentials securely between agents.
Environment Manager Setup
To get started with this environment management skill, initialize your local storage structure and secure your first secret:
# Create the directory structure for secrets and profiles
mkdir -p ~/.agent-env/secrets ~/.agent-env/profiles
# Securely store a secret key
echo "your-api-key-here" > ~/.agent-env/secrets/OPENAI_KEY
chmod 600 ~/.agent-env/secrets/OPENAI_KEY
# Define a production environment profile
cat > ~/.agent-env/profiles/production.env << 'ENVEOF'
API_BASE=https://api.openai.com/v1
API_KEY=${secrets:OPENAI_KEY}
LOG_LEVEL=warn
ENVEOF
Environment Manager Data Schema & Taxonomy
The skill organizes data within a dedicated hidden directory structure for maximum isolation:
| Component | Path | Purpose |
|---|---|---|
| Secrets Store | ~/.agent-env/secrets/ |
Individual files containing encrypted credential values. |
| Profiles | ~/.agent-env/profiles/ |
.env files defining environment-specific variables. |
| Audit Logs | System Metadata | Tracking access and modification times for rotation logic. |
Environment Manager Advanced Features
- Support for AES-256 encryption at rest for all stored agent credentials.
- Flexible profile switching allowing agents to toggle between infrastructure environments dynamically.
- Built-in credential age tracking via CLI to identify stale keys requiring rotation.
- Compatibility with ClawSwarm for secure, encrypted agent-to-agent credential passing in swarm architectures.
- Automated session loading hooks that ensure Openclaw Skills have the required context before execution.
SKILL.md
Loading
Related Openclaw Skills
Cross-Platform Poster
A unified automation tool for publishing content simultaneously across multiple social and messaging platforms using AI agent capabilities.
Cron Helper
An intuitive scheduling tool for AI agents to automate recurring tasks and periodic workflows without complex cron syntax.
Whale Watcher — Hedera Large Transfer Alerts
Track large HBAR and Hedera Token Service (HTS) transfers in real-time using the free Mirror Node API.
Agent Wallet
A specialized skill for equipping AI agents with native Hedera (HBAR) wallet capabilities for autonomous financial transactions.
Heartbeat Pro
A sophisticated utility for AI agents to automate service health checks, log uptime, and discover peer agents through decentralized network protocols.
Moltbook Refugee
A migration utility to rescue AI agent identities from the defunct Moltbook platform and transition them to the decentralized ClawSwarm ecosystem.
Featured*
