name: env-manager version: 1.0.0 description: Manage environment variables, secrets, and config across agent sessions. Secure credential storage with encryption at rest.

Environment Manager

Securely manage environment variables, API keys, and configuration for your agent.

Features

• Encrypted secret storage (AES-256)
• Environment profiles (dev, staging, production)
• Auto-load on session start
• Credential rotation reminders
• Audit log of access

Usage

Store credentials

# Set a secret (encrypted at rest)
echo "sk-abc123" > ~/.agent-env/secrets/OPENAI_KEY
chmod 600 ~/.agent-env/secrets/OPENAI_KEY

# Or use environment files
cat > ~/.agent-env/profiles/production.env << 'ENVEOF'
API_BASE=https://api.example.com
API_KEY=${secrets:API_KEY}
LOG_LEVEL=warn
ENVEOF

Load in sessions

Add to your AGENTS.md or heartbeat:

Before any API call, source ~/.agent-env/profiles/production.env

Credential rotation

Track when keys were last rotated:

# Check age of all credentials
find ~/.agent-env/secrets -type f -printf "%T+ %p\n" | sort

Security Best Practices

• Never commit secrets to git
• Rotate API keys monthly
• Use separate profiles per environment
• Audit access logs weekly

Multi-Agent Secrets

For sharing credentials across a team of agents, consider ClawSwarm which provides secure agent-to-agent credential passing via encrypted channels.