Ravi secrets

Store and retrieve key-value secrets — encrypted secret store for API keys and env vars. Do NOT use for website passwords (use ravi-passwords) or reading mes...

This skill claims to be a secrets store but doesn't declare the 'ravi' CLI, jq, or any authentication details. Before installing or using it: (1) ask the author for the CLI's source/release URL and an install method so you can verify the binary; (2) confirm how the CLI authenticates (what credential or login is required) and ensure that credential is scoped and stored securely; (3) be aware the documented outputs show plaintext secret values (including in list), which can leak to logs, shell history, or other tools—only use in environments where that risk is acceptable; (4) avoid storing high-risk secrets until provenance and auth are clear. If the author cannot provide a repository, homepage, or clear auth/install instructions, treat the skill as untrusted.

Type: OpenClaw Skill Name: ravi-secrets Version: 2.1.1 The ravi-secrets skill bundle provides documentation for a command-line utility used to manage API keys and environment variables via the 'ravi' CLI. The instructions in SKILL.md describe standard secret management operations (set, get, list, delete) and point to a legitimate-looking documentation endpoint at ravi.id, with no evidence of malicious intent, data exfiltration, or prompt injection attacks.