Search

--- name: "env-secrets-manager" description: "Env & Secrets Manager" --- # Env & Secrets Manager **Tier:** POWERFUL **Category:** Engineering **Domain:** Security / DevOps / Configuration Management

Audit GitHub Actions workflow files for secret exposure risks like pull_request_target secret usage, secret echo commands, and unpinned action secret passing.

Store and retrieve key-value secrets — E2E encrypted secret store for API keys and env vars. Do NOT use for website passwords (use ravi-passwords) or reading...

Rotate and update secrets in environment files, generate Vault commands, and manage secret rotation workflows.

Knowledge and guardrails for the mise + fnox + infisical secrets toolchain. Use when the user asks to "configure secrets", "set up fnox", "infisical", "mise...

Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.

Detect hardcoded secrets, exposed API keys, and credential misconfigurations in IaC and config files

--- name: git-secrets-scanner description: Git 安全扫描器 - 检查提交中的敏感信息泄露（API keys、密码、token） metadata: openclaw: emoji: "🔒" category: "security"

Spin up a one-time web UI for securely entering secret keys and env vars. Supports guided instructions, single-key mode, and cloudflared tunneling.

Securely store, manage, rotate, and integrate secrets (API keys, passwords, certificates) in CI/CD pipelines using Vault, AWS Secrets Manager, and native tools.

Rotate and update secrets in environment files, generate Vault commands, and manage secret rotation workflows.

--- name: secret-manager description: Manage API keys securely via GNOME Keyring and inject them into OpenClaw config. homepage: https://github.com/openclaw/skills metadata: {"clawdbot":{"emoji":"🔐

Detect hardcoded secrets like API keys, tokens, and passwords in text or code using Expanso Edge pipelines.

Securely interact with Bitwarden/Vaultwarden vaults using rbw CLI. Use when retrieving credentials, managing vault items, or integrating secrets into scripts...

Secure API key and secrets management for agent skills. Use this skill whenever a task requires authenticating with an external service, reading or writing A...

Git hook to detect secrets before commit.

Secure API key and secrets management for agent skills. Use this skill whenever a task requires authenticating with an external service, reading or writing A...

Safely access Bitwarden or Vaultwarden secrets via the bw CLI with redacted outputs by default. Use for vault sync, item search, metadata retrieval, and (onl...

Securely interact with Bitwarden/Vaultwarden vaults using rbw CLI. Use when retrieving credentials, managing vault items, or integrating secrets into scripts...

Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.

Git 安全扫描器 - 检查提交中的敏感信息泄露（API keys、密码、token）

--- name: cloak description: Share one-time secrets between humans and agents via encrypted self-destructing links version: 0.1.2 triggers: - "share a secret" - "send secret" - "cloak" - "one-

Manage secrets and environment variables via Doppler CLI - secrets, projects, configs, environments. Use when user mentions 'doppler', 'secrets management',...

Minimal secure secret handoff. Zero external deps. Human opens browser form, submits secret, agent receives it via temp file. Secret NEVER appears in stdout/logs.