Openclaw Vault

Credential lifecycle security for agent workspaces. Audit credential exposure, detect misconfigured permissions, inventory all secrets, and identify stale credentials needing rotation. Free alert layer — upgrade to openclaw-vault-pro for automated remediation, credential rotation, and access control.

This skill appears to implement credential discovery and remediation and runs locally with only Python. However: 1) the code contains modifying operations (fix-permissions, quarantine, protect) that are not fully reflected in the SKILL.md Commands section — treat those as potentially destructive until you inspect them; 2) it will scan sensitive files (shell histories, keys, git history) in whatever workspace it targets (defaulting to OPENCLAW_WORKSPACE, cwd, or ~/.openclaw/workspace) — point it only at a safe copy or test workspace first; 3) review scripts/vault.py (especially the implementations of quarantine, fix-permissions, protect, gitguard, rotate-check) before running to confirm behavior and where it writes/moves files; 4) run read-only commands (audit, exposure, inventory, status) first and do not run remediation commands until you have backups and understand what changes will be made; 5) prefer obtaining this skill from a known repository/author or verify the code hash if you must install it. If you want, I can scan the remainder of vault.py for specific filesystem operations and show the exact lines that perform moves/permission changes and where quarantined files are stored.

Type: OpenClaw Skill Name: openclaw-vault Version: 1.0.2 The OpenClaw Vault skill bundle is a credential lifecycle security tool designed to detect and remediate exposed secrets. Its Python script (`scripts/vault.py`) performs extensive local file system scanning, permission checks, and interacts with Git history via `subprocess.run`. While it possesses powerful capabilities like modifying file permissions (`os.chmod`, `icacls`) and moving files to a quarantine directory (`shutil.move`), these actions are explicitly for security hardening and remediation, not for malicious purposes. The skill explicitly states and adheres to 'No external dependencies' and 'No network calls', significantly reducing data exfiltration risk. There is no evidence of prompt injection attempts in `SKILL.md` or `README.md`, nor any clear shell injection vulnerabilities in the Python code's use of `subprocess.run` or `shutil.move`.