From a347908d9f201dd5feee7a3a847792d66745768e Mon Sep 17 00:00:00 2001
From: nav <nav@mgr.hangman-lab.top>
Date: Sun, 8 Mar 2026 21:38:01 +0000
Subject: [PATCH] add pass-mgr skill

---
 skills/pass-mgr/SKILL.md | 56 ++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 skills/pass-mgr/SKILL.md

diff --git a/skills/pass-mgr/SKILL.md b/skills/pass-mgr/SKILL.md
new file mode 100644
index 0000000..b72c3c4
--- /dev/null
+++ b/skills/pass-mgr/SKILL.md
@@ -0,0 +1,56 @@
+---
+name: pass-mgr
+description: Manage OpenClaw agent credentials (usernames/secrets). Use when storing, retrieving, listing, generating, or removing credentials for an agent. Trigger on requests about saving or fetching usernames, passwords, tokens, API keys, or other secrets. MUST call pass_mgr via the pcexec tool.
+---
+
+# Pass Manager
+
+## Purpose
+Use pass_mgr to store and retrieve agent-scoped credentials (username/secret pairs) and generate secrets.
+
+## Mandatory safety rule
+Always invoke pass_mgr through the `pcexec` tool. Do NOT run pass_mgr directly.
+
+## Commands (run via pcexec)
+
+- List keys for current agent
+  - `pass_mgr list`
+
+- Get username for a key
+  - `pass_mgr get-username <key>`
+
+- Get secret for a key
+  - `pass_mgr get-secret <key>`
+
+- Set a key entry (username + secret)
+  - `pass_mgr set <key> --username <username> --secret <secret>`
+
+- Remove a key entry
+  - `pass_mgr unset <key>`
+
+- Generate a random secret for a key (prints secret)
+  - `pass_mgr generate <key>`
+
+## Usage notes
+
+- Treat all outputs as sensitive. Do not echo secrets unless explicitly requested.
+- Prefer `generate` when the user wants a new secret or password.
+- Use `set` to store both username and secret in one step.
+- Use `get-username` and `get-secret` for retrieval.
+
+## Examples (pcexec)
+
+- Store credentials
+  - pcexec: `pass_mgr set github --username alice --secret <secret>`
+
+- Retrieve username
+  - pcexec: `pass_mgr get-username github`
+
+- Retrieve secret
+  - pcexec: `pass_mgr get-secret github`
+
+- Generate secret
+  - pcexec: `pass_mgr generate github`
+
+- Delete entry
+  - pcexec: `pass_mgr unset github`