A secure credential exchange skill for Pilot Protocol agents featuring end-to-end encryption and automatic secret expiration.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install pilot-keychain
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install pilot-keychain using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Pilot Keychain?
Pilot Keychain is a specialized utility designed for the secure distribution of sensitive information across distributed AI agents. As part of the Openclaw Skills library, it provides a robust framework for sharing API keys, tokens, and short-lived credentials without relying on persistent storage or insecure channels. It ensures that sensitive data is only accessible to the intended recipient and automatically invalidated after a set duration.
By leveraging the underlying Pilot Protocol, this skill handles the heavy lifting of encrypted transmission. It is particularly valuable for developers building multi-agent systems where sub-agents require temporary elevated permissions to execute specific tasks before their access is revoked by the system's TTL (Time To Live) policies.
Pilot Keychain Use Cases
- Sharing temporary API tokens between a primary coordinator agent and specialized worker agents.
- Automating the rotation of shared secrets across a distributed agentic workflow.
- Distributing end-to-end encrypted credentials for one-time cloud deployments.
- Implementing time-bound access control for third-party service integrations.
How Pilot Keychain Works
- The sender agent generates a unique credential ID and encapsulates the sensitive value into a JSON payload with a defined expiration timestamp.
- The skill utilizes the pilotctl binary to encrypt and transmit the file to a specific recipient agent address.
- Upon receipt, the destination agent filters incoming files to identify valid credential packets.
- The receiving agent validates the expiration timestamp against the current system time before extracting the secret value.
- A cleanup routine periodically scans the local keychain directory to remove expired credential files, ensuring no residual sensitive data remains.
Pilot Keychain Setup
To utilize this skill, you must have the pilotctl binary installed and the Pilot Protocol daemon running. Ensure jq and openssl are available in your environment for JSON processing and ID generation.
# Ensure the Pilot daemon is active
pilotctl daemon start
# Initialize local keychain directories
mkdir -p ~/.pilot/keychain/{sent,received}
Pilot Keychain Data Schema & Taxonomy
Pilot Keychain organizes credentials using a standardized JSON schema and a flat-file structure within the Pilot home directory.
| Field | Type | Description |
|---|---|---|
credential_id |
String | A unique 16-character hex identifier for tracking. |
value |
String | The encrypted secret, token, or key being shared. |
expires_at |
ISO8601 String | UTC timestamp indicating when the credential becomes invalid. |
Files are stored locally at ~/.pilot/keychain/sent/ and ~/.pilot/keychain/received/ using the naming convention cred-[id].json.
Pilot Keychain Advanced Features
- Automatic TTL Enforcement: Scripts included for scanning and purging expired secrets to maintain a clean security posture.
- End-to-End Encryption: Inherits the secure transport layer of Pilot Protocol for all credential transfers.
- Hex-ID Generation: Integrated openssl support for generating non-colliding, unique credential identifiers.
- Headless Integration: Optimized for use within automated Bash scripts and CI/CD pipelines as part of broader Openclaw Skills implementations.
SKILL.md
Loading
Related Openclaw Skills
pilot-load-balancer
A sophisticated load balancing skill for distributing computational tasks across multiple worker agents using the pilot-protocol.
pilot-map-reduce
A high-performance skill for implementing distributed map-reduce patterns to handle parallel data processing across agent swarms.
Pilot Leader Election
A specialized skill for electing a single coordinator within an AI agent swarm using deterministic tie-breaking and automatic failover detection.
Pilot Matchmaker
An intelligent discovery engine that matches AI agents based on capabilities, performance metrics, and trust scores.
xuanself-realtime
An automated market intelligence engine designed to generate professional-grade, real-time research reports on the Russian blood glucose monitoring market.
Series Storytelling Skill
A professional-grade narrative engine designed to architect multi-linear story arcs, character growth chains, and seasonal outlines from simple ideas or existing novels.
Featured*
