mjolnir-credential-vaultGPG AES-256 encrypted credential management. Requires: GPG (gnupg) installed, Python 3.8+, CRED_MASTER_PASS env var for non-interactive use. Use when the use...
Install via ClawdBot CLI:
clawdbot install king6381/mjolnir-credential-vaultGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses system directories or attempts privilege escalation
/proc/Calls external URL not in known-safe list
https://gpg4win.orgAI Analysis
The skill's core functionality is local credential management using GPG encryption, with no evidence of sending user data externally. The primary risk is the documented temporary plaintext file exposure during processing, and the external URL (gpg4win.org) is a legitimate, expected dependency link for Windows users.
Audited Apr 18, 2026 · audit v1.0
Generated May 23, 2026
Developers store API tokens, database passwords, and cloud service keys in a local encrypted vault. This prevents hardcoding secrets in source code and reduces risk of credential leaks in version control.
System administrators securely manage service account credentials used in cron jobs or CI/CD pipelines. The vault allows non-interactive retrieval with the master password from environment variables, enabling secure automation.
Individuals store and retrieve passwords for personal online accounts, encrypted with a single master passphrase. The vault acts as a lightweight, file-based alternative to cloud-based managers.
Small teams share access keys for shared services (e.g., AWS, payment gateways) by distributing the encrypted vault file. The master password is shared out-of-band, simplifying secret distribution without cloud dependency.
Freelancers handling multiple client accounts can store each client's credentials in separate vault files or services. The vault ensures sensitive data remains encrypted on their local machine.
The vault is offered as a free open-source tool, with revenue from paid support contracts, security audits, or custom integration services for enterprises that deploy it internally.
A cloud-hosted version of the vault with multi-device sync and team sharing, free for individuals with limited storage, and subscription tiers for teams with advanced access controls.
License the vault code to third-party software vendors who want to embed encrypted credential storage into their own products (e.g., password managers, backup tools).
💬 Integration Tip
To integrate, copy the scripts directory into your project and call the Python functions (e.g., get_credential) with the vault file path. Set CRED_MASTER_PASS as an environment variable only when needed and unset it after use to minimize exposure.
Scored Jun 29, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...