← 返回 Skills 市场
Redshift
作者
Alan Colver
· GitHub ↗
· v0.2.0
642
总下载
0
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install redshift
功能描述
Manage application secrets with the Redshift CLI (https://redshiftapp.com) — decentralized, encrypted secret management built on Nostr. Use when setting, get...
安全使用建议
This skill is coherent with the official Redshift CLI. Before installing: ensure the redshift binary on your system is the legitimate upstream release (don’t run an unknown redshift executable), avoid pasting private keys into shared shells, store REDSHIFT_NSEC/REDSHIFT_BUNKER in your CI secret store rather than local plaintext, and be cautious about allowing the agent to run redshift run since it can execute arbitrary commands with secrets injected — always confirm the exact command you want executed.
功能分析
Type: OpenClaw Skill
Name: redshift
Version: 0.2.0
The skill bundle wraps the legitimate 'redshift' CLI tool for decentralized secret management. The `SKILL.md` provides comprehensive documentation, including explicit security considerations and warnings (e.g., regarding exposing the web UI or handling private keys). Crucially, it includes a defensive instruction for the AI agent to 'Only run commands the user has explicitly requested. Never construct arbitrary commands... Always confirm the command with the user before executing,' which actively mitigates prompt injection risks. All described functionalities are core to a secret management tool, and there is no evidence of malicious intent, data exfiltration, or unauthorized actions within the skill's definition.
能力评估
Purpose & Capability
Name/description, required binary (redshift), and declared optional env vars (REDSHIFT_NSEC, REDSHIFT_BUNKER, REDSHIFT_CONFIG_DIR) align with a Redshift CLI secret-management integration.
Instruction Scope
SKILL.md focuses on using the redshift CLI (setup, login, secrets get/set/upload/download, run, serve). It references reading/writing redshift.yaml and secrets files and warns about command-line secrecy and host binding. This is expected for a secret manager, but special caution is warranted around redshift run (it can inject secrets into arbitrary commands) — the skill correctly instructs to confirm commands with the user before executing.
Install Mechanism
Instruction-only skill with no install spec; requires the redshift binary to already be present. This is low risk and appropriate for a CLI wrapper skill.
Credentials
No required credentials are declared. The optional env vars the SKILL.md mentions (REDSHIFT_NSEC, REDSHIFT_BUNKER, REDSHIFT_CONFIG_DIR) are directly relevant to Redshift usage (CI auth and config). Nothing requests unrelated secrets or system credentials.
Persistence & Privilege
Skill is not always-enabled and uses normal model-invocation settings. It does not request elevated or persistent platform privileges and does not attempt to modify other skills or system-wide configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install redshift - 安装完成后，直接呼叫该 Skill 的名称或使用
/redshift触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.2.0
Remove auto-install command (no more git clone/build). Declare installHint instead — users install the binary themselves. Add agent guardrails: redshift run requires explicit user confirmation, no arbitrary command construction.
v0.1.4
Add redshiftapp.com URL to package description
v0.1.3
Install to ~/.local/bin instead of /usr/local/bin — no elevated privileges needed
v0.1.2
Replace curl|sh install with build-from-source via git clone + bun build (auditable, no piped remote scripts)
v0.1.1
Add metadata: required binary, install step, optional env vars, homepage. Add security considerations section. Add env vars reference table. Warn about network-exposed serve.
v0.1.0
Initial release: full CLI coverage for redshift v0.9.0
元数据
常见问题
Redshift 是什么？
Manage application secrets with the Redshift CLI (https://redshiftapp.com) — decentralized, encrypted secret management built on Nostr. Use when setting, get... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 642 次。
如何安装 Redshift？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install redshift」即可一键安装，无需额外配置。
Redshift 是免费的吗？
是的，Redshift 完全免费（开源免费），可自由下载、安装和使用。
Redshift 支持哪些平台？
Redshift 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Redshift？
由 Alan Colver（@accolver）开发并维护，当前版本 v0.2.0。
推荐 Skills