← Back to Skills Marketplace
Zyt credentials guard
by
zuoyuting214
· GitHub ↗
· v0.5.0
· MIT-0
183
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install zyt-credentials-guard
Description
Guide users to configure local Chanjing credentials safely via local commands only, and validate local token status when needed.
Usage Guidance
This skill appears to be a documentation-only helper for managing local Chanjing credentials and is internally consistent. Before installing/using it, consider: 1) It will read and may write ~/.chanjing/credentials.json (or $CHANJING_CONFIG_DIR); only use if you are comfortable the agent can access that file. 2) Verify the token endpoint domain (https://open-api.chanjing.cc) matches the official Chanjing service you trust. 3) The package references helper scripts and an openapi yaml that are not included — if you later install a variant that adds scripts, inspect them before running. 4) Never paste AK/SK into chat; if you accidentally do, rotate keys. If you want the agent to never access local files, do not enable this skill or avoid granting filesystem access.
Capability Analysis
Type: OpenClaw Skill
Name: zyt-credentials-guard
Version: 0.5.0
The skill is a security-conscious credential manager for the Chanjing API. It explicitly instructs the AI agent to avoid requesting or echoing secrets (AK/SK) within the chat interface, instead guiding the user to manage them in a local configuration file (~/.chanjing/credentials.json). The logic involves opening a legitimate login URL (chanjing.cc) and performing local token refreshes via the official API endpoint, with no evidence of data exfiltration or malicious execution.
Capability Assessment
Purpose & Capability
The name/description say it's a local guide for Chanjing credentials and the instructions only require reading/writing a local credentials.json and calling the Chanjing token endpoint. Requesting CHANJING_CONFIG_DIR to locate the config file is appropriate for this purpose.
Instruction Scope
The SKILL.md instructs the agent to read/write ~/.chanjing/credentials.json (or $CHANJING_CONFIG_DIR/credentials.json), open the Chanjing login page in the browser, and POST to https://open-api.chanjing.cc/open/v1/access_token to refresh tokens. Those actions match the stated scope. Minor inconsistency: the docs/reference mention a helper script path ('scripts/chanjing-config' and functions like read_config()) and a chanjing-openapi.yaml that are not included in the package — this is documentation-only and not dangerous, but it is an inconsistency to note.
Install Mechanism
No install spec and no code files — instruction-only skill. Low risk from installation because nothing is downloaded or written by an installer.
Credentials
The skill declares only CHANJING_CONFIG_DIR which is reasonable to locate the local credentials. The reference mentions CHANJING_API_BASE as a possible env var but it is not declared in requires.env; this is a minor documentation inconsistency but not an over-broad credential request. The skill does not request unrelated secrets or cloud credentials.
Persistence & Privilege
always:false and no install hooks; the skill does not request persistent/privileged presence. It does instruct reading and writing a local credential file (expected for its function) but does not attempt to modify other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zyt-credentials-guard - After installation, invoke the skill by name or use
/zyt-credentials-guard - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.5.0
Initial publish.
v0.4.0
Initial publish.
v0.3.0
Initial publish.
v0.2.0
Initial publish.
v0.1.0
Initial publish.
Metadata
Frequently Asked Questions
What is Zyt credentials guard?
Guide users to configure local Chanjing credentials safely via local commands only, and validate local token status when needed. It is an AI Agent Skill for Claude Code / OpenClaw, with 183 downloads so far.
How do I install Zyt credentials guard?
Run "/install zyt-credentials-guard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Zyt credentials guard free?
Yes, Zyt credentials guard is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Zyt credentials guard support?
Zyt credentials guard is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Zyt credentials guard?
It is built and maintained by zuoyuting214 (@zuoyuting214); the current version is v0.5.0.
More Skills