A secure local password manager that uses AES-256-GCM encryption to protect API keys and credentials via a command-line interface.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install vault
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install vault using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Vault?
Vault is a specialized security tool designed for developers who need a robust way to handle sensitive data locally. By integrating with Openclaw Skills, this tool allows users to encrypt passwords, API tokens, and other credentials using industry-standard AES-256-GCM encryption protected by a master key.
The skill focuses on providing a secure-by-default environment where secrets are never stored in plain text. It leverages scrypt for key derivation and ensures data integrity with authentication tags, making it a reliable choice for managing secrets within the Openclaw Skills ecosystem.
Vault Use Cases
- Storing sensitive API keys for AI models like OpenAI or Anthropic.
- Managing environment-specific credentials without risking exposure in version control.
- Maintaining a local, encrypted repository for personal or team-shared tokens.
- Automating credential retrieval for other Openclaw Skills during development workflows.
How Vault Works
- The user initializes the skill and sets a mandatory VAULT_MASTER_KEY environment variable.
- When saving a password, the skill generates a unique 32-byte salt and 12-byte initialization vector (IV).
- A cryptographic key is derived using scrypt, and the value is encrypted using AES-256-GCM.
- The encrypted payload, salt, IV, and authentication tag are saved to a local JSON storage file.
- To retrieve a secret, the skill uses the master key to decrypt the entry and verify its integrity before displaying it in the terminal.
Vault Setup
To install this skill as part of your Openclaw Skills collection, run:
clawhub install vault
You must configure a master key to enable encryption:
export VAULT_MASTER_KEY="your-secure-master-key-here"
You can also define the configuration in your local settings:
{
"plugins": {
"vault": {
"masterKey": "your-secure-master-key-here",
"storageFile": ".vault/passwords.json"
}
}
}
Vault Data Schema & Taxonomy
The skill manages its data in a structured JSON format. Below is the metadata taxonomy used for stored credentials:
| Attribute | Description |
|---|---|
| Key | The unique identifier for the stored credential. |
| Ciphertext | The AES-256-GCM encrypted value. |
| Salt | Random 32-byte value for scrypt derivation. |
| IV | 12-byte initialization vector per entry. |
| Tag | GCM authentication tag for integrity checks. |
| Timestamps | Automated ISO 8601 strings for creation and updates. |
Vault Advanced Features
- Advanced scrypt key derivation ensuring high resistance to brute-force attacks.
- Full GCM authentication tag support to prevent data tampering or corruption.
- Customizable storage paths to integrate with specific project structures or hidden directories.
- Detailed timestamp tracking for all credential modifications to assist in security auditing.
- Seamless CLI integration for rapid secret management within Openclaw Skills environments.
SKILL.md
Loading
Related Openclaw Skills
Semantic Memory
A locally-hosted semantic memory plugin that allows OpenClaw agents to store and recall conversation context using vector search and Transformers.js.
memory-qdrant
A local semantic memory skill that enables AI agents to store, search, and recall conversation context using vector embeddings without external API keys.
memory-qdrant
A local semantic memory plugin for Openclaw Skills providing vector-based context storage and recall without external API dependencies.
Feishu Edge TTS Voice Sender (Windows)
A specialized Windows skill for converting text to speech and sending it as native Feishu voice bubbles.
MAL Lookup
A high-performance lookup tool for MyAnimeList that bypasses standard API issues using internal endpoints.
Feishu Operations Guide
A comprehensive operational guide and technical toolkit for mastering Feishu (Lark) features including document collaboration, bitables, and automated workflows.
Featured*
