A high-security, AES-256-GCM encrypted vault designed to manage API keys, database credentials, and sensitive tokens for developers.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install secrets-vault
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install secrets-vault using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Secrets Vault?
Secrets Vault provides a robust framework for managing sensitive data with military-grade encryption. This addition to your Openclaw Skills library ensures that critical credentials like database hosts, API tokens, and certificates are stored securely using PBKDF2-HMAC-SHA256 derivation and AES-256-GCM authenticated encryption.
By centralizing secrets management, this tool prevents the dangerous practice of hardcoding credentials in source code and simplifies secure sharing across development teams. It is an essential component for any developer looking to harden their local environment or CI/CD pipelines while using Openclaw Skills.
Secrets Vault Use Cases
- Securing OpenAI, Anthropic, or AWS API keys for automated agent workflows.
- Injecting production database credentials into local development or CI/CD environments safely.
- Generating and auditing password strength to detect potential breaches and weak security practices.
- Creating time-limited, one-time-use encrypted share links for sensitive credentials during team collaboration.
How Secrets Vault Works
- Initialize the vault using a master password which generates a unique 256-bit encryption key via 600,000 PBKDF2 iterations.
- Unlock the vault to allow the system to decrypt the sensitive storage into memory for the active session.
- Add, list, or retrieve secrets such as API keys, database connection strings, or certificates through the CLI.
- Utilize the environment injection script to map vault secrets directly to shell variables or .env files for application consumption.
- Lock the vault or rely on restricted file permissions (600) to ensure that the encrypted vault.enc remains protected at rest.
Secrets Vault Setup
To integrate this into your environment, follow these installation steps:
# Install required dependencies
pip install cryptography
# Initialize your new vault within your Openclaw Skills setup
python ~/.secrets-vault/scripts/secrets_manager.py init
# Optional: Set your master password for automated environments
export SECRETS_VAULT_PASSWORD="your-strong-password"
Secrets Vault Data Schema & Taxonomy
The skill organizes its data within a dedicated directory, ensuring a clean separation between configuration and encrypted content. The structure is as follows:
vault.enc: The primary AES-256-GCM encrypted storage file containing all secrets.config.json: Vault configuration and metadata.shares/: Metadata directory for tracking active, time-limited share links.
| Data Component | Security Implementation | Description |
|---|---|---|
| Master Password | PBKDF2-HMAC-SHA256 | Derived into a 256-bit key with 600k iterations. |
| Secret Values | AES-256-GCM | Authenticated encryption with a random salt per entry. |
| File Access | OS-level Permissions | Restricted to owner-only access (chmod 600). |
Secrets Vault Advanced Features
- Auto Environment Injection: Seamlessly export secrets as shell variables or generate .env files on the fly.
- Password Auditing: Run comprehensive security reports to detect duplicate, weak, or breached passwords within your Openclaw Skills.
- Cross-Device Sync: Support for syncing the encrypted vault.enc via iCloud, Dropbox, or symlinked cloud drives.
- Secure One-Time Sharing: Generate encrypted links that automatically self-destruct after a specific number of views or a set expiration time.
SKILL.md
Loading
Related Openclaw Skills
Code Security Audit
A unified security audit toolkit for scanning vulnerabilities, detecting hardcoded secrets, and validating AI agent logic within modern codebases.
OpenClaw Config Manager Skill
A professional configuration management tool providing backup, recovery, migration, and version control for the OpenClaw ecosystem.
Skill Creator Ultra
An advanced AI framework designed to architect, generate, and optimize production-grade agent skills through structured interviews and rigorous evaluation.
Git Commit Formatter
An intelligent utility that transforms git diffs or text descriptions into standardized Conventional Commit messages in seconds.
Security Audit Enhanced
An advanced framework for automated security scanning, scoring, and hardening of AI agent environments.
Creative Ops Copilot
A production-ready planning agent that turns messy client briefs into structured VFX and motion design workflows.
Featured*
