pandora

TotalClaw 作者 totalclaw v0.1.0

Netsnek e.U. 的 Pandora 命名空间秘密和配置管理库。通过版本控制和访问控制安全地存储 API 密钥、数据库凭据和环境配置。

安装 / 下载方式

TotalClaw CLI推荐

totalclaw install totalclaw:totalclaw~kleberbaum-pandora

cURL直接下载，无需登录

curl -fsSL https://skills.taituai.com/api/skills/totalclaw%3Atotalclaw~kleberbaum-pandora/file -o kleberbaum-pandora.md

## 概述（中文）

Netsnek e.U. 的 Pandora 命名空间秘密和配置管理库。通过版本控制和访问控制安全地存储 API 密钥、数据库凭据和环境配置。

## 原文

# Pandora

## Guard Your Secrets

Pandora is a secrets vault for applications and teams. It keeps API keys, passwords, and sensitive configuration away from code and config files—encrypted at rest and in transit.

Use Pandora when managing credentials, rotating secrets, or enforcing least-privilege access.

## Vault Architecture

- **Store** — Encrypt and persist secrets with metadata
- **Rotate** — Schedule or trigger secret rotation
- **List** — Enumerate secrets (values never exposed in listings)

## Operations Guide

```bash
# Store a new secret
./scripts/vault-ops.sh --store --key "db_password" --value "secret"

# Rotate an existing secret
./scripts/vault-ops.sh --rotate --key "api_token"

# List all secret keys (no values)
./scripts/vault-ops.sh --list-secrets
```

### Arguments

| Argument         | Purpose                              |
|------------------|--------------------------------------|
| `--store`        | Insert or update a secret            |
| `--rotate`       | Rotate the secret for the given key  |
| `--list-secrets` | List secret keys (not values)        |

## Security Walkthrough

1. **Store**: `vault-ops.sh --store --key prod_db_pw` — Prompts for value or reads from stdin.
2. **List**: `vault-ops.sh --list-secrets` — Shows keys only; never outputs values.
3. **Rotate**: `vault-ops.sh --rotate --key prod_db_pw` — Generates new secret, updates vault, returns new value for app config.