confidant

Generate time-limited URLs for secure secret handoff and credential setup.

Updated Feb 26, 2026
One-click install
npx skills add https://github.com/dfpalhano/openclaw-workspace --skill confidant
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: confidant
Source: https://github.com/dfpalhano/openclaw-workspace/tree/main/skills/confidant
Command: npx skills add https://github.com/dfpalhano/openclaw-workspace --skill confidant

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires curl, jq, npm, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a secure, out-of-band method for agents to request and receive sensitive information from users, preventing accidental exposure through chat logs or insecure channels.

Core Features & Use Cases

  • Secure Secret Handoff: Users submit secrets via a secure web form, not chat.
  • Automated Credential Management: Automatically saves secrets to designated config files or environment variables.
  • Use Case: When an agent needs an API key, it uses Confidant to generate a unique, time-limited URL. The user opens this URL, enters the key, and Confidant securely saves it for the agent to use.

Quick Start

Use the confidant skill to request the OpenAI API Key from the user.

Frequently Asked Questions about confidant

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely pass API keys to an AI agent without exposing them in chat logs?

You can securely handle secrets by generating a unique, time-limited URL where users submit sensitive information via a web form instead of chat. The submitted secrets are then automatically saved to designated environment variables or configuration files for the agent to use.

How does automated credential management work for AI agents needing API keys?

Automated credential management works by having an agent generate a time-limited URL for the user to enter an API key. Once submitted through the secure web form, the credentials are automatically saved directly to environment variables or configuration files for immediate agent access.

Do I need curl and jq installed to use this secure secret handoff process?

Yes, you need curl, jq, and npm installed to execute the scripts and manage dependencies for this secure secret handoff process. These tools are required to generate the time-limited URLs and process the submitted credentials automatically.

Can I use this credential setup method for remote users behind different networks?

Yes, this credential setup method supports remote users by offering tunneling options. This allows users on different networks to securely access the time-limited URL and submit their API keys or credentials without requiring complex network configurations.

What is the best way to request an OpenAI API key from a user during an agent session?

The best way to request an OpenAI API key is to generate a unique, time-limited URL for the user to open and enter the key. This out-of-band method prevents accidental exposure through chat logs and automatically saves the key for the agent.

Why should I use an out-of-band URL for credential setup instead of direct chat input?

You should use an out-of-band URL for credential setup to prevent accidental exposure of sensitive information through insecure channels like chat logs. It ensures secrets are submitted via a secure web form and automatically routed to the correct configuration files.