OpenClaw Secrets Hygiene

Manage and audit OpenClaw secrets by coordinating gateway restarts, converting plaintext credentials to SecretRef format, and validating configuration accuracy.

This skill appears coherent for migrating and auditing OpenClaw secrets, but proceed cautiously: - Back up all OpenClaw config files (openclaw.json, auth-profiles.json, models.json, ~/.openclaw) before making changes. - Review and run the provided scripts/edits in a staging environment first to avoid gateway downtime. - Treat OPENCLAW_GATEWAY_TOKEN and any API keys as sensitive: supply them securely, do not paste into chat logs, and ensure ~/.openclaw/secrets.json is file-permission protected (chmod 600). - Confirm that the local 'openclaw' CLI you will run is the legitimate binary for your environment. - If you have multiple agents, test the sequential gateway restart approach on one agent before bulk operations. - If you want higher assurance, request the skill author/source or a signed/reviewed version of these instructions and any scripts before applying them in production.

Type: OpenClaw Skill Name: openclaw-secrets-hygiene Version: 1.0.0 The skill bundle provides comprehensive instructions and utility scripts for managing secrets within the OpenClaw ecosystem. It includes guidance on auditing plaintext credentials, migrating to SecretRef objects, and resolving common configuration issues. The provided Python script in SKILL.md safely modifies local configuration files to adhere to OpenClaw's requirements, and the shell commands follow security best practices such as setting restrictive file permissions (chmod 600). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.