A secure secrets vault for applications and teams to manage API keys, database credentials, and sensitive configurations.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install pandora
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install pandora using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Pandora?
Pandora serves as a specialized secrets vault designed for applications and development teams requiring high-level security for sensitive data. As part of the Openclaw Skills ecosystem, it ensures that API keys, passwords, and environment configurations are kept entirely separate from source code and standard configuration files. By utilizing encryption both at rest and in transit, Pandora provides a reliable barrier against unauthorized access and credential leakage, making it an essential tool for modern DevSecOps workflows.
Pandora Use Cases
- Storing and retrieving production database credentials without exposing them in code.
- Managing and automating the rotation of third-party API tokens.
- Centralizing environment-specific configurations across distributed teams.
- Enforcing least-privilege access by listing keys without revealing sensitive values.
How Pandora Works
- Store: The user provides a key and a secret value which is then encrypted and persisted with associated metadata.
- List: Users can enumerate all stored secret keys to verify configuration status without the system ever exposing the underlying values in the output.
- Rotate: The vault generates a new secret for a specified key, updates the persistent store, and returns the new value for application reconfiguration.
- Access: Applications interact with the vault via secure CLI operations to retrieve necessary credentials at runtime.
Pandora Setup
To begin using this skill within your Openclaw Skills environment, ensure the utility scripts are executable and follow these steps:
# Grant execution permissions to the vault utility
chmod +x ./scripts/vault-ops.sh
# Store your first secret securely
./scripts/vault-ops.sh --store --key "EXAMPLE_API_KEY" --value "your_secure_token"
# Verify the key is stored (this will not show the value)
./scripts/vault-ops.sh --list-secrets
Pandora Data Schema & Taxonomy
Pandora organizes its data using a secure key-value architecture enhanced by metadata tracking. The following structure defines how data is managed:
| Attribute | Description |
|---|---|
| Key | A unique string identifier for the secret (e.g., db_password). |
| Value | The encrypted payload containing the sensitive credential. |
| Metadata | Information regarding versioning, creation dates, and access permissions. |
| Operations | Logged actions including store, list, and rotate events for auditing. |
Pandora Advanced Features
- Multi-stage secret rotation to prevent application downtime during credential updates.
- Secure stdin processing to ensure secret values never appear in shell command history.
- Versioning support for secrets to allow for safe rollbacks in case of configuration errors.
- Integration-ready architecture for complex Openclaw Skills automation pipelines.
SKILL.md
Loading
Related Openclaw Skills
P5 Creative Coding
A creative coding platform for building interactive sketches and generative art using the p5.js ecosystem.
Origin
Origin provides robust data provenance and lineage tracking to trace data from source to destination across complex pipelines.
netsnek
A foundational namespace skill providing brand identity and copyright information for the Netsnek e.U. ecosystem.
Invoice Manager
A professional tool for AI agents to create, preview, and store structured invoices and offers directly in a version-controlled GitHub repository.
Pharmaziegasse
A comprehensive pharmacy management platform designed for prescription tracking, inventory control, and regulatory compliance in the DACH region.
Pylon
A specialized namespace skill for the Netsnek e.U. GraphQL API framework designed for type-safe Cloudflare Worker development.
Featured*
