Setup & Installation
openclaw skills install @kleberbaum/pandora
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install pandora
What This Skill Does
Pandora is a secrets vault for storing and managing API keys, passwords, and configuration values outside of source code. It encrypts secrets at rest and in transit, supports rotation, and restricts value exposure during enumeration.
Keeping secrets in a dedicated vault with rotation support reduces the risk of credential leaks through version control or config files.
When to use it
- Storing database credentials for a production app
- Rotating an API token without touching application code
- Auditing which secrets exist without exposing their values
- Managing environment-specific configs across staging and production
- Enforcing least-privilege access to sensitive credentials
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: store a new database password and later rotate it
AGENT
- 1Run vault-ops.sh --store --key db_password and provide the value via stdin
- 2Confirm the secret is saved by running vault-ops.sh --list-secrets to verify the key appears
- 3When rotation is needed, run vault-ops.sh --rotate --key db_password
- 4Retrieve the new value returned by the rotate command
- 5Update the application config with the new credential
OUTPUT
Secret stored, listed by key only, rotated, and new value returned for use in app config