A comprehensive secrets management workflow integrating mise, fnox, and infisical to ensure secure environment variable injection and credential hygiene.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install devtools-secrets
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install devtools-secrets using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is DevTools Secrets?
DevTools Secrets is a specialized knowledge base and set of guardrails designed for the mise + fnox + infisical secrets toolchain. It provides a structured approach to managing sensitive credentials by utilizing mise for task orchestration, fnox as a unified secrets interface, and infisical as a secure remote backend. This Openclaw Skills resource ensures that developers can move away from insecure .env files and hardcoded strings toward a robust, enterprise-grade secret injection system.
The skill focuses on ensuring toolchain validity and enforcing strict security patterns. By integrating these tools, users can automate the retrieval of secrets at runtime, ensuring that API keys and tokens never touch the disk in plain text. It is an essential component for any developer looking to standardize secrets management across local development and CI/CD pipelines using Openclaw Skills.
DevTools Secrets Use Cases
- Automating the injection of remote secrets into local development environments.
- Transitioning from hardcoded environment variables to a unified fnox interface.
- Ensuring project-wide secrets hygiene through automated guardrails and hooks.
- Standardizing credential management across multiple environments like development, staging, and production.
- Integrating Infisical secret stores into mise-driven task runner workflows.
How DevTools Secrets Works
- Validation: The skill first checks for the presence of mise, fnox, and infisical on the system path.
- Configuration: It identifies or initializes critical configuration files including fnox.toml, .infisical.json, and the mise.toml env section.
- Backend Mapping: fnox.toml is used to define Infisical as the provider, mapping local profiles to remote environment slugs.
- Resolution: When a command is run via fnox exec, the tool resolves secrets from the remote backend and injects them as environment variables.
- Orchestration: mise tasks wrap these executions, allowing for a seamless developer experience where secrets are available only when needed.
- Enforcement: Built-in hooks monitor code changes and shell commands to block hardcoded secrets or bare exports that bypass the secure toolchain.
DevTools Secrets Setup
To get started with this toolchain in Openclaw Skills, ensure all components are installed and initialized:
# Install mise (if not present)
curl https://mise.run | sh
# Install fnox and infisical via mise
mise use -g fnox
mise use -g infisical
# Initialize configurations
fnox init
infisical init
infisical login
DevTools Secrets Data Schema & Taxonomy
The skill manages secret metadata and orchestration logic through several key files:
| File | Role | Committable |
|---|---|---|
fnox.toml |
Defines secret providers, profiles, and backend mappings. | Yes |
.infisical.json |
Stores project IDs and workspace configuration. | Yes |
mise.toml |
Configures task runners and environment-specific plugins. | Yes |
.claude/settings.json |
Contains regex-based hooks for blocking hardcoded secrets. | Yes |
~/.config/fnox/ |
Global configuration and authentication state for fnox. | No |
DevTools Secrets Advanced Features
- Multi-provider Support: Seamlessly switch between Infisical, age-encrypted files, and local env backends using the fnox abstraction.
- Directory-aware Injection: Leverage mise env plugins to automatically refresh and inject secrets whenever you change directories.
- Automated Guardrails: Pre-commit style blocking of sensitive prefixes like sk-, ghp_, and AKIA to prevent data leaks.
- Path-scoped Tokens: Granular control over secret access within CI/CD pipelines using scoped Infisical service tokens.
- Recursive Secret Fetching: Optimized CLI commands to retrieve nested secrets across complex project hierarchies within Openclaw Skills.
SKILL.md
Loading
Related Openclaw Skills
Blowfish Solana Token Launch
Automate the deployment of Solana tokens through the Blowfish Agent API with integrated Meteora Dynamic Bonding Curve support.
Supermetrics Marketing Data
A comprehensive integration allowing AI agents to programmatically fetch marketing performance data from over 100 platforms through a unified API.
Z.AI Web Search
A high-performance search skill for AI agents that returns structured, LLM-ready web data including summaries and metadata.
PDF Generation Skill
A comprehensive guide and skill set for generating professional-grade PDFs from HTML and CSS by mastering flow-based layouts and print-specific CSS rules.
VibeTunnel
A comprehensive tool for managing, monitoring, and controlling terminal sessions through the VibeTunnel REST API.
Pet Sitter Client Intake Form Generator
A specialized tool for pet care professionals to generate branded, fillable PDF client intake and onboarding forms with ease.
Featured*
