add pass-mgr skill

skills/pass-mgr/SKILL.md

@@ -0,0 +1,56 @@
+---
+name: pass-mgr
+description: Manage OpenClaw agent credentials (usernames/secrets). Use when storing, retrieving, listing, generating, or removing credentials for an agent. Trigger on requests about saving or fetching usernames, passwords, tokens, API keys, or other secrets. MUST call pass_mgr via the pcexec tool.
+---
+
+# Pass Manager
+
+## Purpose
+Use pass_mgr to store and retrieve agent-scoped credentials (username/secret pairs) and generate secrets.
+
+## Mandatory safety rule
+Always invoke pass_mgr through the `pcexec` tool. Do NOT run pass_mgr directly.
+
+## Commands (run via pcexec)
+
+- List keys for current agent
+  - `pass_mgr list`
+
+- Get username for a key
+  - `pass_mgr get-username <key>`
+
+- Get secret for a key
+  - `pass_mgr get-secret <key>`
+
+- Set a key entry (username + secret)
+  - `pass_mgr set <key> --username <username> --secret <secret>`
+
+- Remove a key entry
+  - `pass_mgr unset <key>`
+
+- Generate a random secret for a key (prints secret)
+  - `pass_mgr generate <key>`
+
+## Usage notes
+
+- Treat all outputs as sensitive. Do not echo secrets unless explicitly requested.
+- Prefer `generate` when the user wants a new secret or password.
+- Use `set` to store both username and secret in one step.
+- Use `get-username` and `get-secret` for retrieval.
+
+## Examples (pcexec)
+
+- Store credentials
+  - pcexec: `pass_mgr set github --username alice --secret <secret>`
+
+- Retrieve username
+  - pcexec: `pass_mgr get-username github`
+
+- Retrieve secret
+  - pcexec: `pass_mgr get-secret github`
+
+- Generate secret
+  - pcexec: `pass_mgr generate github`
+
+- Delete entry
+  - pcexec: `pass_mgr unset github`