Encrypt and store credentials in a local AES-256-GCM vault.
npx skills add https://github.com/JansenAnalytics/claudex --skill secret-vault-jansenanalytics
Please help me install this Agent Skill. Skill: secret-vault Source: https://github.com/JansenAnalytics/claudex/tree/main/skills/secret-vault Command: npx skills add https://github.com/JansenAnalytics/claudex --skill secret-vault-jansenanalytics
Encrypts and stores credentials securely in a local vault.
Store your first secret using vault.cjs set NAME VALUE to begin using encrypted storage.
High-intent search queries and answers about installing and using this skill.
You can securely store API tokens and passwords locally by using AES-256-GCM encryption with per-secret IVs and authentication tags. The vault encrypts credentials into a single file at ~/.openclaw/vault.enc, with the key stored separately at ~/.openclaw/vault.key.
Yes, you can manage encrypted credentials in Node.js automation scripts using the included vault.cjs script. It provides programmatic access and CLI commands to set, get, list, delete, export, and check secrets directly from your code.
The best way to encrypt and retrieve secrets via CLI is using the vault.cjs script. You can store a secret with the set command and retrieve it with the get command, ensuring credentials are encrypted with AES-256-GCM and authenticated before storage.
No external dependencies are required to manage credentials in this local secret vault. It operates independently using built-in Node.js capabilities to handle AES-256-GCM encryption and file storage operations.
You can export encrypted secrets for other automation workflows using the export command provided by the vault.cjs CLI. This allows you to retrieve and integrate your stored credentials into separate scripts or external systems securely.
A limitation of using a local encrypted file for credential management is that the vault and key are stored locally at ~/.openclaw/, restricting access to the specific workstation where they reside and requiring manual secure transfer for cross-machine automation.
mathruffian-dotSet up Codex environments across desktop, CLI, and IDE extensions.
benjaminshafiiConfigure Bitwarden CLI with API key authentication to retrieve vault credentials.
julianobarbosaRetrieve and inject 1Password secrets via op CLI and Kubernetes operators.
testdriveraiManage passwords and secrets in TestDriver tests with secret: true.
