A secure agent protocol for credential intake and environment injection using local GPG-encrypted storage and one-time web forms.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install passwordstore-broker
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install passwordstore-broker using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Passwordstore Broker?
The Passwordstore Broker is a security-first protocol designed to solve the leak problem in AI agent workflows. It ensures that sensitive credentials, such as API keys or database passwords, never enter the LLM chat context, logs, or command history. By utilizing a local GPG-encrypted password store and providing a one-time HTTPS intake mechanism, this skill allows users to provide credentials safely even across a local network.
This approach empowers Openclaw Skills to perform authenticated tasks—like deploying infrastructure or interacting with private APIs—while maintaining a strict zero-leak policy. The broker acts as a middleware that handles the lifecycle of a secret from initial collection via a secure web form to its eventual injection into a runtime environment through a protected wrapper script.
Passwordstore Broker Use Cases
- Providing an API key to an agent without pasting it into the chat window.
- Securely inputting deployment credentials from a mobile device using LAN-mode intake.
- Running CLI tools that require environment variables without exposing those variables in shell history.
- Managing multiple scoped secrets (e.g., GitHub, AWS, OpenAI) within a single AI-driven workflow.
How Passwordstore Broker Works
- Identification: The agent identifies a missing environment variable or credential required for a specific task.
- Secure Intake: The agent generates a one-time local HTTPS URL using the get_password_from_user.py script.
- User Entry: The user enters the secret into the ephemeral web form. If using LAN mode, a TOTP code is required for additional verification.
- Encrypted Storage: The secret is captured and stored directly into the local GPG-encrypted password store.
- Safe Execution: The agent uses the run_with_secret.sh wrapper to execute the target command, injecting the secret as an environment variable only for that specific process.
- Cleanup: The intake server shuts down immediately after one use, and secrets remain encrypted at rest.
Passwordstore Broker Setup
Before utilizing this capability within Openclaw Skills, ensure you have the required system dependencies installed.
# Install system dependencies (Example for Debian/Ubuntu)
sudo apt-get install pass gpg openssl python3 qrencode
Initialize the TOTP enrollment for secure LAN access by running the setup script:
python3 scripts/setup_totp_enrollment.py
Verify your configuration by checking for the existence of the setup_completed_at.txt file in the .passwordstore-broker directory.
Passwordstore Broker Data Schema & Taxonomy
The skill organizes data using the standard pass hierarchy and localized configuration files for security metadata.
| Component | Location | Description |
|---|---|---|
| Vault Storage | ~/.password-store/ | Standard GPG-encrypted files managed by the pass utility. |
| TOTP Secret | ~/.passwordstore-broker/totp.secret | Encrypted secret used to validate LAN-mode submissions. |
| Enrollment Marker | ~/.passwordstore-broker/setup_completed_at.txt | Timestamp verifying the initial security setup. |
| Scoped Keys | service/environment/key | Recommended naming convention for vault entries (e.g., github/prod/token). |
Passwordstore Broker Advanced Features
- LAN Mode Support: Enables credential intake from secondary devices like smartphones via private network autodetection.
- TOTP Validation: Mandatory two-factor authentication for LAN-based intake to prevent unauthorized network interception.
- Process Isolation: Uses a dedicated wrapper script to ensure secrets never touch the global shell environment or system logs.
- Scoped Secret Management: Supports hierarchical naming for complex multi-cloud or multi-environment Openclaw Skills projects.
SKILL.md
Loading
Related Openclaw Skills
DOCX to HTML Converter
Transform Microsoft Word documents into clean, semantic HTML optimized for web display and AI-driven data processing.
Intelligent Email Auto-Reply
An automated email management tool that detects incoming messages and triggers context-aware replies using customizable templates.
OpenTIL
A powerful CLI-based tool for capturing, structuring, and publishing technical insights to the OpenTIL platform using AI-driven automation.
MoltTribe
MoltTribe is a specialized platform where AI agents exchange stories and behavioral patterns learned from human interactions to build collective interpersonal intelligence.
Terminal Command Execution
A reliable framework for AI agents to execute, validate, and troubleshoot terminal commands safely.
Lead Inbox Automator
A professional lead management skill that connects Supabase and Make.com to automate lead capture and email follow-ups for AI agents.
METADATA
Featured*
