An elegant, age-based encryption skill to protect workspace secrets, API keys, and sensitive tokens in repositories and backups.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install secure-workspace
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install secure-workspace using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Secure Workspace?
The Secure Workspace skill is a developer-first security utility designed to protect sensitive environment variables, API keys, and tokens within your development workspace. By leveraging the modern, secure age encryption tool, it ensures that your secrets are safely encrypted before being stored in git repositories or backup systems.
Integrating this utility into your development stack elevates your repository security, preventing accidental leaks of raw credentials. As part of the ecosystem of Openclaw Skills, this skill helps developers establish robust security hygiene by seamlessly managing cryptographic keys and decrypting configuration files on the fly.
Secure Workspace Use Cases
- Preventing accidental leaks of API keys, tokens, and database credentials in public or private git repositories.
- Securing workspace configuration secrets during automated backups.
- Decrypting environment variables securely on-the-fly inside active shell sessions.
- Managing cryptographic workspace identities securely on local developer machines.
How Secure Workspace Works
- Key Generation: Run the setup script to safely generate an asymmetric age public/private key pair on the host machine.
- Workspace Encryption: Feed plaintext secrets or environment variables via standard input (stdin) to the encryption script, which outputs a secure .age encrypted file.
- Runtime Decryption: Decrypt the .age file dynamically in memory and source the variables directly into the shell environment without writing plaintext files to disk.
Secure Workspace Setup
Ensure you have the age utility installed on your system:
# On macOS
brew install age
# On Debian/Ubuntu
sudo apt install age
Initialize your secure environment and generate your private key pair (saved in /root/.age/key.txt):
bash scripts/secure/setup.sh
To encrypt your secrets:
echo 'export API_KEY="your-secret-key"' | bash scripts/secure/encrypt.sh scripts/secure/secrets.env.age
To load your decrypted secrets safely into your active shell environment:
source <(bash scripts/secure/decrypt.sh scripts/secure/secrets.env.age)
Secure Workspace Data Schema & Taxonomy
The Secure Workspace skill structures its operations around several core helper scripts and file outputs:
| File / Path | Type | Description |
|---|---|---|
scripts/secure/setup.sh |
Bash Script | Generates the necessary public/private keys for asymmetric encryption. |
scripts/secure/encrypt.sh |
Bash Script | Consumes stdin to output an encrypted .age target file. |
scripts/secure/decrypt.sh |
Bash Script | Decrypts an .age file and prints the raw secrets directly to stdout. |
/root/.age/key.txt |
Key File | The local private key. Must never be committed to git. |
scripts/secure/*.env.age |
Encrypted Payload | Secure, encrypted environment files safe for repository inclusion. |
Secure Workspace Advanced Features
- Zero-Disk Decryption: Decrypt secrets on-the-fly and source them directly into memory, preventing plain-text data from ever hitting the storage drive.
- Asymmetric Cryptography: Powered by age (Actually Good Encryption), using secure X25519 curves for lightweight and modern key management.
- Git-Safe Architecture: Automatically keeps the private decryption keys isolated outside the repository workspace to avoid exposure.
- AI Agent Friendly: Seamlessly integrates with automated workflows and Openclaw Skills to load credentials dynamically for execution.
SKILL.md
Loading
Related Openclaw Skills
The Diabetes Code AI Skill
An AI-powered health toolkit designed to guide users through Dr. Jason Fung's evidence-based strategies for naturally reversing type 2 diabetes and metabolic syndrome.
SVG.js
A lightweight, zero-dependency JavaScript library for programmatically manipulating and animating SVGs using a highly readable, chainable API.
CodeGraph Tool
A local-first code intelligence tool that builds a semantic knowledge graph using tree-sitter and SQLite, exposing it to AI agents via MCP.
Separated: Trump Family Separation Policy Analysis Tool
An interactive investigation and research toolkit based on Jacob Soboroff's 'Separated' to analyze the Trump administration's family separation policy.
The New Menopause Assistant
An interactive executable toolkit based on Dr. Mary Claire Haver's 'The New Menopause' to guide users through perimenopause, menopause, and postmenopause with evidence-based medical science.
Secure Workspace
A secure workspace management utility to encrypt sensitive API keys, tokens, and passwords using age encryption, preventing secrets leak in repositories.
Featured*
