passwordstore-broker
Enforce safe secret handling by collecting secrets through one-time HTTPS forms, storing them in pass.
Setup & Installation
Install command
clawhub install bieggerm/passwordstore-brokerIf the CLI is not installed:
Install command
npx clawhub@latest install bieggerm/passwordstore-brokerOr install with OpenClaw CLI:
Install command
openclaw skills install bieggerm/passwordstore-brokeror paste the repo link into your assistant's chat
Install command
https://github.com/openclaw/skills/tree/main/skills/bieggerm/passwordstore-brokerWhat This Skill Does
Manages credential handling for AI agents by collecting secrets through one-time local HTTPS forms and storing them in pass (passwordstore). Commands run with secrets injected as environment variables via a wrapper script. Raw values never appear in chat context, logs, or commit history.
Unlike passing secrets inline or via dotenv files, collection and injection happen entirely through dedicated scripts, so raw values never touch chat transcripts, command logs, or repo files.
When to Use It
- Providing an API key to an agent without typing it in chat
- Storing AWS credentials for automated deployment scripts
- Collecting a secret from a phone over LAN with TOTP verification
- Rotating a service token in the local vault without re-exposing it
- Running authenticated CLI tools without leaking credentials into shell history
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Providing an API key to an agent without typing it in chat
- 1Providing an API key to an agent without typing it in chat
- 2Storing AWS credentials for automated deployment scripts
- 3Collecting a secret from a phone over LAN with TOTP verification
- 4Rotating a service token in the local vault without re-exposing it
- 5Running authenticated CLI tools without leaking credentials into shell history
Enforce safe secret handling by collecting secrets through one-time HTTPS forms, storing them in pass.
Security Audits
These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.