secret-manager

Coding Agents & IDEs
v1.0.0
Benign

Manage API keys securely via GNOME Keyring and inject them into OpenClaw config.

997 downloads997 installsby @jswortz

Setup & Installation

Install command

clawhub install jswortz/secret-manager

If the CLI is not installed:

Install command

npx clawhub@latest install jswortz/secret-manager

Or install with OpenClaw CLI:

Install command

openclaw skills install jswortz/secret-manager

or paste the repo link into your assistant's chat

Install command

https://github.com/openclaw/skills/tree/main/skills/jswortz/secret-manager

What This Skill Does

CLI tool that stores API keys in GNOME Keyring via libsecret and syncs them to OpenClaw config files and the systemd user environment. Supports keys for OpenAI, Gemini, Discord, GIPHY, Google Places, LinkedIn, and Ollama. Restarts the OpenClaw Gateway inside a Distrobox container after updates.

Keeps credentials in the OS keyring rather than plaintext config files, reducing the risk of accidental exposure via dotfiles or version control.

When to Use It

  • Storing an OpenAI API key without hardcoding it in config files
  • Rotating a Discord bot token across all OpenClaw services at once
  • Listing all currently configured API keys from the command line
  • Setting up a fresh OpenClaw installation with all required credentials
  • Propagating a new Gemini API key to the running gateway without manual restarts

Example Workflow

Here's how your AI assistant might use this skill in practice.

INPUT

User asks: Storing an OpenAI API key without hardcoding it in config files

AGENT
  1. 1Storing an OpenAI API key without hardcoding it in config files
  2. 2Rotating a Discord bot token across all OpenClaw services at once
  3. 3Listing all currently configured API keys from the command line
  4. 4Setting up a fresh OpenClaw installation with all required credentials
  5. 5Propagating a new Gemini API key to the running gateway without manual restarts
OUTPUT
Manage API keys securely via GNOME Keyring and inject them into OpenClaw config.

Share this skill

Security Audits

VirusTotalBenign
OpenClawBenign
View full report

These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.

Details

LanguageMarkdown
Last updatedFeb 28, 2026