A secure secret-sharing skill for Openclaw agents that uses the magic-wormhole protocol to transfer sensitive data without exposing it in logs.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install magic-wormhole
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install magic-wormhole using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Magic Wormhole Skill?
The Magic Wormhole skill enables Openclaw Skills users to facilitate secure, end-to-end encrypted communication between AI agents and humans. By leveraging the PAKE (Password-Authenticated Key Exchange) protocol, it allows for the transfer of sensitive information like SSH keys, API tokens, and certificates using short, human-readable codes.
This integration is crucial for maintaining security in AI workflows, as it ensures that secrets never appear in chat histories, agent logs, or responses. Whether you are automating server deployments or rotating credentials, this skill provides a zero-exposure environment for your most critical data.
Magic Wormhole Skill Use Cases
- SSH Key Distribution: Generate and securely send SSH keys from an agent to a human user.
- API Token Transfer: Share production API tokens with an agent without leaving a trace in the chat interface.
- Credential Rotation: Automate the distribution of new passwords or secrets during scheduled rotations.
- Sensitive File Sharing: Transfer small configuration files or SSL/TLS certificates securely.
- Air-gapped Environments: Move secrets between systems where direct network access is restricted.
How Magic Wormhole Skill Works
- Secret Generation: The Openclaw agent generates a secret, such as a key or token, within its secure workspace.
- Wormhole Initiation: The agent runs the wormhole send command, which encrypts the data and generates a one-time code (e.g., 7-blue-rabbit).
- Code Exchange: The agent provides only the human-readable code to the user through the chat interface.
- Secure Receipt: The human user runs the wormhole receive command on their local machine, enters the code, and establishes an encrypted P2P link.
- Data Transfer: The secret is transferred directly between the agent and the human, after which the code expires immediately.
Magic Wormhole Skill Setup
To install the magic-wormhole capabilities into your Openclaw environment, use the provided automated script or manual commands.
Automated Installation
cd /data/.openclaw/workspace/skills/magic-wormhole
./install.sh
Manual Installation (Debian/Ubuntu)
sudo apt update
sudo apt install magic-wormhole
Verification
wormhole --version
Magic Wormhole Skill Data Schema & Taxonomy
The skill manages data temporarily during the transfer process to ensure maximum privacy.
| Component | Description | Persistence |
|---|---|---|
| Secret Text | The raw data being shared (API keys, etc.) | Volatile (In-memory/Temp file) |
| Wormhole Code | Human-readable PAKE password | Single-use |
| Relay Metadata | IPs and timing data for connection | Not logged by Openclaw |
| Temporary Files | Files stored in /tmp/ during transfer |
Deleted after success/failure |
Magic Wormhole Skill Advanced Features
- Self-Hosted Relays: Configure custom rendezvous and transit servers for enhanced privacy in enterprise environments.
- Programmatic Code Extraction: Scripts can automatically parse wormhole output to streamline multi-step agent workflows.
- Tor Integration: Support for anonymity-seeking transfers using the
--torflag. - Batch Distribution: Capability to send multiple distinct secrets to different team members using sequential one-time codes.
- Zstd Compression: Optimized transfer for larger directories or sensitive configuration bundles.
SKILL.md
Loading
Related Openclaw Skills
session-init
A rigorous session initialization protocol designed to synchronize an AI agent's memory, persona, and technical capabilities at the start of every new interaction.
M&A Due Diligence AI-Augmented Assessment
An AI-driven framework for conducting comprehensive due diligence on acquisition targets, covering financial, technical, and operational dimensions.
Memberstack CLI
A comprehensive interface for managing Memberstack accounts, members, and data tables directly from your terminal.
WhatsApp Business
A powerful WhatsApp Business API gateway featuring managed OAuth authentication for seamless message and template management.
Academic Paper Mentor
An expert research guide designed to mentor scholars through a six-stage workflow for publishing in world-class academic journals.
Memory Tiers
A sophisticated tiered memory management system that optimizes AI agent context windows using a hierarchy of hot, warm, and cold storage tiers.
Featured*
