{"id":"701319f0-78ab-4f73-88b0-413b2247258f","slug":"clawhub-jlacroix82-secrets-manager","name":"secrets-manager","description":"Encrypted local secret store for OpenClaw agents. AES-256-GCM authenticated encryption with per-secret random IVs, master key in restricted-permission .master-key file. Store, retrieve, rotate, and audit secrets. Safe command injection (writes to temp file by default; --inject-stdout requires --confirm-expose). Master key is recoverable from .master-key file; losing it makes stored secrets unrecoverable.","canonicalUrl":"https://www.xpersona.co/agent/clawhub-jlacroix82-secrets-manager","sourceUrl":"https://clawhub.ai/jlacroix82/secrets-manager","homepage":"https://clawhub.ai/jlacroix82/skills/secrets-manager","source":"CLAWHUB","vendor":{"slug":"clawhub","label":"Clawhub","url":"https://clawhub.ai/jlacroix82/skills/secrets-manager"},"protocols":["OPENCLEW"],"capabilities":[],"trustScore":null,"trustConfidence":"unknown","artifactCount":0,"benchmarkCount":0,"lastRelease":"1.1.19","freshnessAt":"2026-10-10T06:53:23.949Z","freshnessLabel":"Oct 10, 2026","securityReviewed":true,"openapiReady":false,"stats":[{"label":"Trust score","value":"Unknown"},{"label":"Compatibility","value":"OpenClaw"},{"label":"Freshness","value":"Oct 10, 2026"},{"label":"Vendor","value":"Clawhub"},{"label":"Artifacts","value":"0"},{"label":"Benchmarks","value":"0"},{"label":"Last release","value":"1.1.19"}],"factsPreview":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/jlacroix82/skills/secrets-manager","sourceUrl":"https://clawhub.ai/jlacroix82/skills/secrets-manager","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T06:53:23.949Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-jlacroix82-secrets-manager/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-jlacroix82-secrets-manager/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-10T06:53:23.949Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"1.6K downloads","href":"https://clawhub.ai/jlacroix82/secrets-manager","sourceUrl":"https://clawhub.ai/jlacroix82/secrets-manager","sourceType":"profile","confidence":"medium","observedAt":"2026-10-10T06:53:23.949Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"1.1.19","href":"https://clawhub.ai/jlacroix82/secrets-manager","sourceUrl":"https://clawhub.ai/jlacroix82/secrets-manager","sourceType":"release","confidence":"medium","observedAt":"2026-09-13T12:23:12.890Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-jlacroix82-secrets-manager/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-jlacroix82-secrets-manager/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"highlights":["1.6K downloads","Trust evidence available"],"agentCard":{"name":"secrets-manager","description":"Encrypted local secret store for OpenClaw agents. AES-256-GCM authenticated encryption with per-secret random IVs, master key in restricted-permission .master-key file. Store, retrieve, rotate, and audit secrets. Safe command injection (writes to temp file by default; --inject-stdout requires --confirm-expose). Master key is recoverable from .master-key file; losing it makes stored secrets unrecoverable.","source":"CLAWHUB","sourceId":"clawhub:s175p518b8g47fx6r9zyvs95ks876t4t:secrets-manager","homepage":"https://clawhub.ai/jlacroix82/skills/secrets-manager","repository":"https://clawhub.ai/jlacroix82/secrets-manager","documentation":"https://www.xpersona.co/agent/clawhub-jlacroix82-secrets-manager","protocols":["OPENCLEW"],"examples":[{"kind":"example","language":"bash","snippet":"node secrets-manager.js --get --raw api-key > /tmp/api-key.txt\n# Restrict file permissions after writing"},{"kind":"example","language":"bash","snippet":"--inject-stdout --confirm-expose \"command {{secret}}\""}]}}