← Back to Skills Marketplace
135
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install secrets
Description
Deep workflow for secrets lifecycle—classification, storage (Vault/KMS/cloud), rotation, least privilege, developer ergonomics, audit, and incident response....
Usage Guidance
This skill is coherent and appears to be a structured advisory workflow rather than executable code, but before using it: (1) Do not paste real secrets or private keys into the chat — redact or provide examples. (2) If you want the agent to 'hunt' for secrets, prefer giving it access to sanitized artifacts or run scanning tools yourself and share the findings. (3) The publisher/source is unknown and there is no homepage; although the content is benign, prefer skills with known provenance for sensitive topics. (4) Use human review and organizational policy when following any remediation steps the skill suggests (rotations, revocations, break-glass), since those actions can cause outages if misapplied.
Capability Analysis
Type: OpenClaw Skill
Name: secrets
Version: 1.0.0
The skill bundle contains a structured workflow (SKILL.md) designed to guide an AI agent in assisting users with secrets management best practices, such as rotation, classification, and secure storage. There is no executable code, and the instructions are entirely aligned with improving security posture without any indicators of malicious intent or prompt injection.
Capability Assessment
Purpose & Capability
Name/description match the content: the SKILL.md is a structured, multi-stage secrets governance workflow. It does not request unrelated binaries, credentials, or system access.
Instruction Scope
Instructions are advisory (questions to ask, design choices, runbooks). The guide recommends 'hunting' for secrets in repos, wikis, tickets, Slack, laptops and building inventories — which is appropriate for the purpose, but could lead to collection of sensitive artifacts if the agent or user attempts automated access. The skill itself does not include commands to read files or exfiltrate data.
Install Mechanism
No install spec or code files; instruction-only skills are lowest-risk from install perspective.
Credentials
The skill declares no required environment variables, credentials, or config paths. The guidance discusses credentials conceptually but does not request or require secrets or tokens to operate.
Persistence & Privilege
Flags show default autonomy (agent invocation allowed) but not always:true and the skill makes no requests to persist itself or modify other skills. No elevated persistence or system-wide changes are requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install secrets - After installation, invoke the skill by name or use
/secrets - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: provides a deep, structured workflow for secure secrets governance.
- Guides users through five core stages: inventory/classification, storage/access model, lifecycle/rotation, developer/CI ergonomics, and verification/operations.
- Offers tailored workflows based on context (removing hardcoded secrets, backend design, CI/CD injection, audits).
- Prioritizes least privilege, secret auditability, and proper rotation procedures.
- Highlights common anti-patterns and provides actionable review and incident response checklists.
- Aims to balance strong security with developer usability and organizational fit.
Metadata
Frequently Asked Questions
What is Secrets?
Deep workflow for secrets lifecycle—classification, storage (Vault/KMS/cloud), rotation, least privilege, developer ergonomics, audit, and incident response.... It is an AI Agent Skill for Claude Code / OpenClaw, with 135 downloads so far.
How do I install Secrets?
Run "/install secrets" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Secrets free?
Yes, Secrets is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Secrets support?
Secrets is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Secrets?
It is built and maintained by mike47512 (@mike47512); the current version is v1.0.0.
More Skills