A high-performance CLI password manager for teams that leverages GPG and Git for secure, decentralized secret storage.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install gopass
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install gopass using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Gopass Password Manager?
The Gopass skill integrates the power of the Gopass CLI directly into your AI agent environment. It allows developers and teams to handle sensitive credentials, API keys, and configuration secrets using industry-standard GPG encryption and Git-based versioning. By using this Openclaw Skills extension, you can automate secret retrieval and generation while maintaining a robust security posture across distributed environments.
Gopass is designed for power users who prefer the command line and need a tool that supports collaborative workflows. It handles everything from simple password storage to complex metadata management and multi-factor authentication (TOTP) generation, making it an essential component for any automated DevOps or security pipeline.
Gopass Password Manager Use Cases
- Automating the retrieval of environment variables or API keys during local development or deployment.
- Generating secure, complex passwords for new service accounts without leaving the terminal.
- Syncing credentials across team members using a shared Git repository to ensure consistent access.
- Retrieving Time-based One-Time Passwords (TOTP) for automated multi-factor authentication flows.
- Managing multiple password stores via mounts to separate personal, client, and internal organizational secrets.
How Gopass Password Manager Works
- Initialize the GPG environment and the Gopass store to establish the encryption foundation within the Openclaw Skills environment.
- Execute CRUD operations by inserting, editing, or generating secrets using specific path-based identifiers.
- Retrieve passwords or specific metadata fields (like usernames or URLs) for use in automated scripts or manual developer workflows.
- Synchronize changes across the team using Git-based push and pull mechanisms to ensure all members have the latest secrets.
- Manage granular access control by adding or removing GPG recipient keys for specific stores or sub-stores.
Gopass Password Manager Setup
To get started with Gopass in your Openclaw Skills setup, ensure you have the gopass binary installed and a GPG key ready. Use the following commands to prepare your environment:
# Guided first-time setup
gopass setup
# Or initialize with a specific GPG key ID
gopass init <gpg-id>
# Verify the installation
gopass version
Ensure your agent has the necessary permissions to access the GPG keychain for encryption and decryption tasks.
Gopass Password Manager Data Schema & Taxonomy
Gopass organizes data in a hierarchical file-system-like structure. Each secret is stored as an encrypted GPG file on disk. The internal structure follows a specific taxonomy:
| Element | Description |
|---|---|
| Entry Path | A directory-style path (e.g., services/aws/prod-key) used to locate the secret. |
| Secret (Line 1) | The first line of the file is always the primary password or secret string. |
| Metadata | Key-value pairs (e.g., username: admin) stored on subsequent lines for machine readability. |
| Mounts | External repositories mapped to sub-folders in the main hierarchy for multi-tenancy. |
| Recipients | A .gpg-id file in each store listing authorized GPG public keys for decryption. |
Gopass Password Manager Advanced Features
- Full TOTP support for generating two-factor authentication codes directly from the entry metadata.
- Multi-store mounting capabilities allow for seamless switching between different organizational vaults within Openclaw Skills.
- Non-interactive mode support using flags like --yes and GOPASS_NO_NOTIFY=true for seamless integration into CI/CD pipelines.
- Recursive management for bulk operations including moving, copying, or deleting entire folder structures.
- Clipboard integration for secure, short-lived secret handling during manual operations.
SKILL.md
Loading
Related Openclaw Skills
Observability Skill
A dedicated monitoring suite for tracking API expenditures and diagnosing session failures within the OpenClaw environment.
Docling Document & Web Content Extraction
A high-performance document parsing skill that converts URLs, PDFs, and office files into clean, structured Markdown or text using GPU-accelerated ML models.
Claw Club
A social networking skill for AI agents to register, post updates, and engage with other bots in specialized communities.
Virtually Us
Virtually Us is a professional managed hosting service that deploys and configures your private AI assistant using Openclaw Skills within 24 hours.
Auto Doc Index
A zero-dependency automation tool to synchronize documentation index tables with file frontmatter to prevent metadata drift.
Assimilate MCP
A comprehensive Model Context Protocol implementation for controlling professional-grade color grading and virtual production software via AI agents.
Featured*
