← Back to Skills Marketplace
Password Manager
by
kaising-openclaw1
· GitHub ↗
· v1.0.0
· MIT-0
69
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install xiaoming-password-manager
Description
密码管理器 - 安全存储、随机生成、自动填充
Usage Guidance
Do not install this skill without clarifying the open points. Ask the author to provide: (1) the exact runtime dependency (where does 'clawhub' come from? is it a trusted package?) and a reproducible install spec, (2) source code or a trusted package URL for the CLI so you can audit how passwords are stored and whether anything is sent to the network, (3) details about leak-detection and auto-fill implementations (which endpoints are used, whether data is uploaded), and (4) where local data is stored and how master password encryption is handled. If you must try it, run it in an isolated environment, verify the origin of 'clawhub' (do not run arbitrary npx installs without auditing), and prefer well-known, open-source password managers with audited code for storing real secrets.
Capability Analysis
Type: OpenClaw Skill
Name: xiaoming-password-manager
Version: 1.0.0
The skill bundle contains metadata and documentation for a password manager tool. The SKILL.md and README.md files describe standard features such as password generation, encryption, and local storage without any indicators of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The SKILL.md describes a password manager that encrypts, generates, autofills, and checks leaks, which is a coherent set of features — but the runtime instructions assume a 'clawhub pass' CLI exists. The skill metadata (_meta.json) also lists 'curl' as a required binary while the registry summary showed no required bins. The README suggests installing via 'npx clawhub@latest install password-manager'. These discrepancies (missing declaration of the 'clawhub' CLI, conflicting install hints, and an unexplained 'curl' requirement) are not proportional to the stated purpose and make the actual runtime dependencies unclear.
Instruction Scope
SKILL.md is instruction-only and tells the agent to run 'clawhub pass' commands to generate/add/get/check passwords but does not explain where 'clawhub' comes from, how passwords are stored, or what network calls (e.g., for leak detection or cloud sync) are performed. 'Auto-fill' and 'leak detection' are listed as features but the instructions do not describe how these operate or what external services/endpoints are used. This vagueness could allow an implementation to read or transmit sensitive data without the user being informed.
Install Mechanism
There is no formal install spec (lowest-risk form), but the README instructs using 'npx clawhub@latest install password-manager' which implies installing software from the network. _meta.json claims 'curl' is required. The registry entry itself lacked an install block. The mixed signals (no install spec vs README npx command vs meta saying curl) are inconsistent and increase risk because they obscure where code would come from and what would be written/executed on the host.
Credentials
The skill declares no required environment variables or primary credential, which is good superficially, but as a password manager it will necessarily handle highly sensitive secrets. The pricing notes a 'Pro+ cloud sync' feature which would typically require cloud credentials or endpoints — none are declared. The absence of declared credentials and storage paths while claiming cloud features and leak checks is disproportionate and unclear.
Persistence & Privilege
The skill is not marked 'always:true' and does not declare installation behavior in the registry metadata, so it does not request persistent, forced inclusion. It's instruction-only and has no code files that would be written to disk by the registry metadata. Note: agent autonomous invocation is allowed by default (not flagged by itself).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install xiaoming-password-manager - After installation, invoke the skill by name or use
/xiaoming-password-manager - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
v1.0 密码管理器
Metadata
Frequently Asked Questions
What is Password Manager?
密码管理器 - 安全存储、随机生成、自动填充. It is an AI Agent Skill for Claude Code / OpenClaw, with 69 downloads so far.
How do I install Password Manager?
Run "/install xiaoming-password-manager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Password Manager free?
Yes, Password Manager is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Password Manager support?
Password Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Password Manager?
It is built and maintained by kaising-openclaw1 (@kaising-openclaw1); the current version is v1.0.0.
More Skills