← 返回 Skills 市场

Secure Workspace

Name: Secure Workspace
Author: asistentegordito

作者 asistentegordito · GitHub ↗ · v1.0.1 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install secure-workspace

功能描述

Cifra API keys, tokens y contraseñas con age para proteger secrets del workspace.

使用说明 (SKILL.md)

Secure Workspace

Cifra secrets con age para protegerlos en repositorios y backups.

Uso

# 1. Generar par de llaves (si no existe)
bash scripts/secure/setup.sh

# 2. Cifrar un secreto
echo 'export API_KEY="..."' | bash scripts/secure/encrypt.sh scripts/secure/secrets.env.age

# 3. Descifrar al vuelo
source \x3C(bash scripts/secure/decrypt.sh scripts/secure/secrets.env.age)

Archivos

Archivo	Función
`scripts/secure/encrypt.sh`	Cifra stdin → `.age`
`scripts/secure/decrypt.sh`	Descifra `.age` → stdout
`scripts/secure/setup.sh`	Genera par de llaves

Requisitos

age (apt install age / brew install age)

Nota

La clave privada está en /root/.age/key.txt. No se sube al repo.

安全使用建议

Install only if you want a simple local age-based workflow for workspace secrets. Run setup first, verify which key path the helpers use, protect the private key carefully, and avoid sourcing decrypted secrets in shared shells, logs, CI steps, or sessions that will run untrusted commands.

能力标签

requires-sensitive-credentials

能力评估

✓ Purpose & Capability

The skill purpose is to protect API keys, tokens, and passwords with age; the artifacts only document and provide setup, encrypt, and decrypt shell helpers for that workflow.

ℹ Instruction Scope

The documented `source <(...)` usage intentionally loads decrypted secrets into the current shell environment, which is purpose-aligned but leaves secrets available to later shell commands until cleared.

ℹ Install Mechanism

The setup script creates `$HOME/.age/key.txt`, sets the directory to 700, and rewrites the helper scripts to use the home-directory key; this is disclosed behavior, though mutating shipped helper scripts is worth noticing.

ℹ Credentials

The packaged helpers initially hard-code `/root/.age/key.txt`, while setup rewrites them to `$HOME/.age/key.txt`; this is a portability and scoping caution, not evidence of hidden or unrelated behavior.

ℹ Persistence & Privilege

The skill persists a local age private key for future decryptions, which is expected for the stated purpose; no background process, privilege escalation, destructive action, or exfiltration path was found.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install secure-workspace
安装完成后，直接呼叫该 Skill 的名称或使用 /secure-workspace 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.1

Fix: standalone skill directory, only ships SKILL.md + encrypt/decrypt/setup scripts. Removed 102 unnecessary workspace files that triggered ClawScan false positive.

元数据

Slug secure-workspace

版本 1.0.1

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 2

常见问题