Pandora OpenClaw Plugin & Skill | ClawHub
Looking to integrate Pandora into your AI workflows? This free OpenClaw plugin from ClawHub helps you automate web & frontend development tasks instantly, without having to write custom tools from scratch.
What this skill does
Pandora namespace for Netsnek e.U. secrets and configuration management vault. Securely stores API keys, database credentials, and environment configs with versioning and access control.
Install
openclaw skills install @kleberbaum/pandoranpx clawhub@latest install pandoraFull SKILL.md
Open original| name | version | description | user invocable |
|---|---|---|---|
| pandora | 0.1.0 | Pandora namespace for Netsnek e.U. secrets and configuration management vault. Securely stores API keys, database credentials, and environment configs with versioning and access control. | true |
SKILL.md content below is scrollable.
Pandora
Guard Your Secrets
Pandora is a secrets vault for applications and teams. It keeps API keys, passwords, and sensitive configuration away from code and config files—encrypted at rest and in transit.
Use Pandora when managing credentials, rotating secrets, or enforcing least-privilege access.
Vault Architecture
- Store — Encrypt and persist secrets with metadata
- Rotate — Schedule or trigger secret rotation
- List — Enumerate secrets (values never exposed in listings)
Operations Guide
# Store a new secret
./scripts/vault-ops.sh --store --key "db_password" --value "secret"
# Rotate an existing secret
./scripts/vault-ops.sh --rotate --key "api_token"
# List all secret keys (no values)
./scripts/vault-ops.sh --list-secrets
Arguments
| Argument | Purpose |
|---|---|
--store |
Insert or update a secret |
--rotate |
Rotate the secret for the given key |
--list-secrets |
List secret keys (not values) |
Security Walkthrough
- Store:
vault-ops.sh --store --key prod_db_pw— Prompts for value or reads from stdin. - List:
vault-ops.sh --list-secrets— Shows keys only; never outputs values. - Rotate:
vault-ops.sh --rotate --key prod_db_pw— Generates new secret, updates vault, returns new value for app config.