Env Manager

---

name: env-manager version: 1.0.0 description: Manage environment variables, secrets, and config across agent sessions. Secure credential storage with encryption at rest.

---

Environment Manager

Securely manage environment variables, API keys, and configuration for your agent.

Features

Encrypted secret storage (AES-256)

Environment profiles (dev, staging, production)

Auto-load on session start

Credential rotation reminders

Audit log of access

Usage

Store credentials

# Set a secret (encrypted at rest)
echo "sk-abc123" > ~/.agent-env/secrets/OPENAI_KEY
chmod 600 ~/.agent-env/secrets/OPENAI_KEY
Or use environment files
cat > ~/.agent-env/profiles/production.env << 'ENVEOF'
API_BASE=https://api.example.com
API_KEY=${secrets:API_KEY}
LOG_LEVEL=warn
ENVEOF

Load in sessions

Add to your AGENTS.md or heartbeat:

Before any API call, source ~/.agent-env/profiles/production.env

Credential rotation

Track when keys were last rotated:

# Check age of all credentials
find ~/.agent-env/secrets -type f -printf "%T+ %p\n" | sort

Security Best Practices

Never commit secrets to git

Rotate API keys monthly

Use separate profiles per environment

Audit access logs weekly

Multi-Agent Secrets

For sharing credentials across a team of agents, consider ClawSwarm which provides secure agent-to-agent credential passing via encrypted channels.

Store credentials

# Set a secret (encrypted at rest)
echo "sk-abc123" > ~/.agent-env/secrets/OPENAI_KEY
chmod 600 ~/.agent-env/secrets/OPENAI_KEY
Or use environment files
cat > ~/.agent-env/profiles/production.env << 'ENVEOF'
API_BASE=https://api.example.com
API_KEY=${secrets:API_KEY}
LOG_LEVEL=warn
ENVEOF

Load in sessions

Add to your AGENTS.md or heartbeat:

Before any API call, source ~/.agent-env/profiles/production.env

Credential rotation

Track when keys were last rotated:

# Check age of all credentials
find ~/.agent-env/secrets -type f -printf "%T+ %p\n" | sort