LESecureCl for Openclaw

A high-security cloud encryption skill that protects plain text using multiple defensive layers including PINs, passwords, MFA, and time-based access windows.

spalgorithm
v1.0.4
Apr 16, 2026
0
867
0

Install & Download

1. ClawHub CLI

The fastest way to install a skill directly from the registry.

npx clawhub@latest install lesecurecl

2. Manual Installation

Copy the skill folder to one of these locations

Global
~/.openclaw/skills/
Workspace
<project>/skills/

Priority: Workspace > Local > Bundled

3. Prompt Installation

Copy this prompt to OpenClaw to install it automatically.

Help me install lesecurecl using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).

Prefer to download?

Get the raw skill files in a ZIP archive.

What is LESecureCl?

LESecureCl is a sophisticated security integration designed for Openclaw Skills to provide defense-in-depth protection for plain text data. It interfaces with the LESecure REST API to enable layered encryption, allowing users to combine PIN codes, passphrases, phone-based Multi-Factor Authentication (MFA), and time-gated access windows. This skill is optimized for AI agents that require a secure method to handle sensitive strings without exposing them to local logs or shell history.

Built with a focus on privacy and security, LESecureCl ensures that data transmission to the remote endpoint is handled via TLS, and sensitive values are never passed as clear-text command arguments. It serves as a bridge between high-level agent tasks and robust cryptographic protocols, making it an essential tool for developers building secure automated workflows within the Openclaw Skills ecosystem.

LESecureCl Use Cases

  • Encrypting sensitive configuration strings or temporary credentials before they are stored or shared.
  • Implementing time-locked access to specific information that should only be available during a predefined window.
  • Adding an extra layer of phone-based MFA security to automated data decryption processes.
  • Protecting plain text secrets in environments where multi-agent access requires strict credential gating using Openclaw Skills.

How LESecureCl Works

  1. The skill first verifies the existence of required system dependencies like curl and Python 3.9 for time-zone calculations.
  2. It checks for a valid LESECURE_API_KEY environment variable to authenticate the request without exposing the key in the process list.
  3. For time-locked encryption, the skill calculates precise EST/EDT windows with a built-in safety buffer to prevent synchronization errors.
  4. It constructs a secure JSON payload containing the plaintext data and the specified security locks (PIN, MFA, Password).
  5. The payload is piped directly into a curl request using stdin to ensure that no sensitive data appears in shell history or process monitors.
  6. The LESecure API processes the request and returns the encrypted ciphertext or decrypted plain text based on the provided lock values.

LESecureCl Setup

To use this skill within Openclaw Skills, you must first configure your API key. Run the following command in your terminal to set the environment variable securely:

read -rs -p 'LESECURE_API_KEY: ' LESECURE_API_KEY && export LESECURE_API_KEY

Ensure you have Python 3.9+ installed to handle time-lock window calculations:

python3 -c "from zoneinfo import ZoneInfo; print('Python ZoneInfo ready')"

LESecureCl Data Schema & Taxonomy

LESecureCl organizes its encryption parameters through a specific argument array sent to the API. The following table outlines the schema for various security locks:

Flag Parameter Format Description
-e Encrypt String The plain text data to be secured.
-d Decrypt String The ciphertext to be decrypted.
-1 Pin Lock Numeric A numeric string used as a simple access code.
-w Password String A complex passphrase for added security.
-2 MFA E.164 A phone number used for SMS-based verification.
-l Time Start YYYY/MM/DD HH:MM The beginning of the decryption window (EST).
-r Time End YYYY/MM/DD HH:MM The expiration of the decryption window (EST).

LESecureCl Advanced Features

  • Multi-lock combination support allows for complex security requirements where PIN, Password, and MFA must all be present to decrypt.
  • Automated time-lock window generation using America/New_York logic to handle daylight savings transitions accurately.
  • Secure stdin piping via heredoc patterns to prevent sensitive data exposure in multi-user environments.
  • Seamless integration with Openclaw Skills workflows for automated secret rotation and secure messaging between agents.
  • PlainText output formatting to ensure decrypted data is immediately actionable by the calling agent.

SKILL.md


Loading

Related Openclaw Skills

METADATA

Github Stars: 0
forks: 0

Featured*