Proton Pass CLI for Openclaw

A powerful command-line interface for managing Proton Pass vaults, items, and injecting secrets into development workflows.

kakatkarakshay
v1.1.0
Jan 30, 2026
0
3.2k
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install proton-pass

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install proton-pass using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is Proton Pass CLI?

The Proton Pass CLI skill provides a comprehensive bridge between the Proton ecosystem and your terminal environment. As a key component of Openclaw Skills, it allows developers to handle password management, SSH key storage, and secret injection without leaving the command line. By leveraging end-to-end encryption, users can securely store and retrieve credentials, generate TOTP codes, and manage sharing permissions across technical teams using a simple URI-based syntax.

Proton Pass CLI Use Cases

  • Automating secret injection into CI/CD pipelines and local application runtimes.
  • Managing SSH keys directly within the terminal agent for secure remote access.
  • Creating, updating, and sharing secure password vaults across development teams.
  • Generating secure passphrases and analyzing password strength for new accounts.
  • Processing configuration templates by populating them with encrypted secret references.

How Proton Pass CLI Works

  1. Install the CLI tool to begin using Openclaw Skills for advanced password management.
  2. Authenticate using the web-based login flow or interactive terminal session for secure access.
  3. Reference secrets using the pass://vault/item/field URI syntax for high precision.
  4. Use the run command to inject secrets as environment variables directly into your application runtime.
  5. Execute the inject command to populate local template files with decrypted secret values.

Proton Pass CLI Setup

Quick Install

# macOS/Linux
curl -fsSL https://proton.me/download/pass-cli/install.sh | bash

# Homebrew (macOS)
brew install protonpass/tap/pass-cli

Authentication

# Web login (Recommended)
pass-cli login

Configuration

# Set a default vault for easier item management
pass-cli settings set default-vault --vault-name "My Vault"

Proton Pass CLI Data Schema & Taxonomy

Object Type Description
Vault A secure container for organizing items, identified by a Share ID or unique name.
Item Specific credential types including Logins, SSH Keys, Aliases, Notes, and Identities.
URI The pass://vault/item/field format used to reference specific fields programmatically.
Share A relationship defining access roles (Viewer, Editor, Manager, Owner) for collaboration.

Proton Pass CLI Advanced Features

  • Integrated SSH agent support to load vault-stored private keys without local file exposure.
  • Flexible key providers (Filesystem, Keyring, or Env) optimized for Docker and headless environments.
  • Automatic secret masking in standard output to prevent accidental credential leaks in logs.
  • Multi-vault management with persistent default settings for streamlined workflows.
  • Programmable TOTP generation for automated multi-factor authentication requirements.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*