← Back to Skills Marketplace
Redshift
by
Alan Colver
· GitHub ↗
· v0.2.0
642
Downloads
0
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install redshift
Description
Manage application secrets with the Redshift CLI (https://redshiftapp.com) — decentralized, encrypted secret management built on Nostr. Use when setting, get...
Usage Guidance
This skill is coherent with the official Redshift CLI. Before installing: ensure the redshift binary on your system is the legitimate upstream release (don’t run an unknown redshift executable), avoid pasting private keys into shared shells, store REDSHIFT_NSEC/REDSHIFT_BUNKER in your CI secret store rather than local plaintext, and be cautious about allowing the agent to run redshift run since it can execute arbitrary commands with secrets injected — always confirm the exact command you want executed.
Capability Analysis
Type: OpenClaw Skill
Name: redshift
Version: 0.2.0
The skill bundle wraps the legitimate 'redshift' CLI tool for decentralized secret management. The `SKILL.md` provides comprehensive documentation, including explicit security considerations and warnings (e.g., regarding exposing the web UI or handling private keys). Crucially, it includes a defensive instruction for the AI agent to 'Only run commands the user has explicitly requested. Never construct arbitrary commands... Always confirm the command with the user before executing,' which actively mitigates prompt injection risks. All described functionalities are core to a secret management tool, and there is no evidence of malicious intent, data exfiltration, or unauthorized actions within the skill's definition.
Capability Assessment
Purpose & Capability
Name/description, required binary (redshift), and declared optional env vars (REDSHIFT_NSEC, REDSHIFT_BUNKER, REDSHIFT_CONFIG_DIR) align with a Redshift CLI secret-management integration.
Instruction Scope
SKILL.md focuses on using the redshift CLI (setup, login, secrets get/set/upload/download, run, serve). It references reading/writing redshift.yaml and secrets files and warns about command-line secrecy and host binding. This is expected for a secret manager, but special caution is warranted around redshift run (it can inject secrets into arbitrary commands) — the skill correctly instructs to confirm commands with the user before executing.
Install Mechanism
Instruction-only skill with no install spec; requires the redshift binary to already be present. This is low risk and appropriate for a CLI wrapper skill.
Credentials
No required credentials are declared. The optional env vars the SKILL.md mentions (REDSHIFT_NSEC, REDSHIFT_BUNKER, REDSHIFT_CONFIG_DIR) are directly relevant to Redshift usage (CI auth and config). Nothing requests unrelated secrets or system credentials.
Persistence & Privilege
Skill is not always-enabled and uses normal model-invocation settings. It does not request elevated or persistent platform privileges and does not attempt to modify other skills or system-wide configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install redshift - After installation, invoke the skill by name or use
/redshift - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.2.0
Remove auto-install command (no more git clone/build). Declare installHint instead — users install the binary themselves. Add agent guardrails: redshift run requires explicit user confirmation, no arbitrary command construction.
v0.1.4
Add redshiftapp.com URL to package description
v0.1.3
Install to ~/.local/bin instead of /usr/local/bin — no elevated privileges needed
v0.1.2
Replace curl|sh install with build-from-source via git clone + bun build (auditable, no piped remote scripts)
v0.1.1
Add metadata: required binary, install step, optional env vars, homepage. Add security considerations section. Add env vars reference table. Warn about network-exposed serve.
v0.1.0
Initial release: full CLI coverage for redshift v0.9.0
Metadata
Frequently Asked Questions
What is Redshift?
Manage application secrets with the Redshift CLI (https://redshiftapp.com) — decentralized, encrypted secret management built on Nostr. Use when setting, get... It is an AI Agent Skill for Claude Code / OpenClaw, with 642 downloads so far.
How do I install Redshift?
Run "/install redshift" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Redshift free?
Yes, Redshift is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Redshift support?
Redshift is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Redshift?
It is built and maintained by Alan Colver (@accolver); the current version is v0.2.0.
More Skills