360 Secure SkillHub
360 安全技能中心

Mema Vault

这是基于AES-256加密的安全凭证管理器，需设置MEMA_VAULT_MASTER_KEY环境变量及安装cryptography包。核心功能包括存储、检索、列出敏感凭据，支持添加元信息、掩码输出（可显式查看明文），适用于管理API密钥、数据库凭据等敏感令牌，通过命令行脚本操作保障安全。

1999azzar
1999azzar
热度 60.76
最近更新 2026-05-11 16:28:08
分类：安全依赖：代码执行 / 读写文件应用场景：自动化脚本 / API 集成 / DevOps

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add mema-vault
Metadata
name
mema-vault
description
Secure credential manager using AES-256 (Fernet) encryption. Stores, retrieves, and rotates secrets using a mandatory Master Key. Use for managing API keys, database credentials, and other sensitive tokens.
metadata
{"openclaw":{"requires":{"env":["MEMA_VAULT_MASTER_KEY"]},"install":[{"id":"pip","kind":"exec","command":"pip install cryptography"}]}}

Mema Vault

Prerequisites

  • Master Key: Must be set as an environment variable MEMA_VAULT_MASTER_KEY.
  • Dependencies: Requires cryptography Python package.

Core Workflows

1. Store a Secret

Encrypt and save a new credential.

  • Usage: python3 $WORKSPACE/skills/mema-vault/scripts/vault.py set <service> <user> <password> [--meta "info"]

2. Retrieve a Secret

Fetch a credential. By default, the password is masked in output.

  • Usage: python3 $WORKSPACE/skills/mema-vault/scripts/vault.py get <service>
  • Show Raw: Use --show flag only when required for secure injection.

3. List Credentials

  • Usage: python3 $WORKSPACE/skills/mema-vault/scripts/vault.py list

Security Standards

  • Encryption: AES-256 CBC via PBKDF2HMAC (480,000 iterations).
  • Masking: Secrets are masked in standard logs/output unless explicitly requested.
  • Isolation: The Master Key should never be stored in plaintext on disk.