← 返回 Skills 市场
Password Manager
作者
kaising-openclaw1
· GitHub ↗
· v1.0.0
· MIT-0
69
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install xiaoming-password-manager
功能描述
密码管理器 - 安全存储、随机生成、自动填充
安全使用建议
Do not install this skill without clarifying the open points. Ask the author to provide: (1) the exact runtime dependency (where does 'clawhub' come from? is it a trusted package?) and a reproducible install spec, (2) source code or a trusted package URL for the CLI so you can audit how passwords are stored and whether anything is sent to the network, (3) details about leak-detection and auto-fill implementations (which endpoints are used, whether data is uploaded), and (4) where local data is stored and how master password encryption is handled. If you must try it, run it in an isolated environment, verify the origin of 'clawhub' (do not run arbitrary npx installs without auditing), and prefer well-known, open-source password managers with audited code for storing real secrets.
功能分析
Type: OpenClaw Skill
Name: xiaoming-password-manager
Version: 1.0.0
The skill bundle contains metadata and documentation for a password manager tool. The SKILL.md and README.md files describe standard features such as password generation, encryption, and local storage without any indicators of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The SKILL.md describes a password manager that encrypts, generates, autofills, and checks leaks, which is a coherent set of features — but the runtime instructions assume a 'clawhub pass' CLI exists. The skill metadata (_meta.json) also lists 'curl' as a required binary while the registry summary showed no required bins. The README suggests installing via 'npx clawhub@latest install password-manager'. These discrepancies (missing declaration of the 'clawhub' CLI, conflicting install hints, and an unexplained 'curl' requirement) are not proportional to the stated purpose and make the actual runtime dependencies unclear.
Instruction Scope
SKILL.md is instruction-only and tells the agent to run 'clawhub pass' commands to generate/add/get/check passwords but does not explain where 'clawhub' comes from, how passwords are stored, or what network calls (e.g., for leak detection or cloud sync) are performed. 'Auto-fill' and 'leak detection' are listed as features but the instructions do not describe how these operate or what external services/endpoints are used. This vagueness could allow an implementation to read or transmit sensitive data without the user being informed.
Install Mechanism
There is no formal install spec (lowest-risk form), but the README instructs using 'npx clawhub@latest install password-manager' which implies installing software from the network. _meta.json claims 'curl' is required. The registry entry itself lacked an install block. The mixed signals (no install spec vs README npx command vs meta saying curl) are inconsistent and increase risk because they obscure where code would come from and what would be written/executed on the host.
Credentials
The skill declares no required environment variables or primary credential, which is good superficially, but as a password manager it will necessarily handle highly sensitive secrets. The pricing notes a 'Pro+ cloud sync' feature which would typically require cloud credentials or endpoints — none are declared. The absence of declared credentials and storage paths while claiming cloud features and leak checks is disproportionate and unclear.
Persistence & Privilege
The skill is not marked 'always:true' and does not declare installation behavior in the registry metadata, so it does not request persistent, forced inclusion. It's instruction-only and has no code files that would be written to disk by the registry metadata. Note: agent autonomous invocation is allowed by default (not flagged by itself).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xiaoming-password-manager - 安装完成后，直接呼叫该 Skill 的名称或使用
/xiaoming-password-manager触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
v1.0 密码管理器
元数据
常见问题
Password Manager 是什么？
密码管理器 - 安全存储、随机生成、自动填充. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 69 次。
如何安装 Password Manager？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xiaoming-password-manager」即可一键安装，无需额外配置。
Password Manager 是免费的吗？
是的，Password Manager 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Password Manager 支持哪些平台？
Password Manager 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Password Manager？
由 kaising-openclaw1（@kaising-openclaw1）开发并维护，当前版本 v1.0.0。
推荐 Skills