init-onecli

Migrate .env credentials into the OneCLI Agent Vault and configure the gateway.

1|2|Updated Apr 8, 2026
One-click install
npx skills add https://github.com/jboothomas/nauggieclaw --skill init-onecli
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: init-onecli
Source: https://github.com/jboothomas/nauggieclaw/tree/main/.claude/skills/init-onecli
Command: npx skills add https://github.com/jboothomas/nauggieclaw --skill init-onecli

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill protects NauggieClaw deployments by installing OneCLI, configuring its Agent Vault gateway, and migrating raw .env credentials so agents never see secrets.

Core Features & Use Cases

  • Comprehensive Pre-flight Checks: Detects existing OneCLI installations, native credential proxies, and whether the repo includes the OneCLI SDK before making changes.
  • Credential Migration Flow: Installs OneCLI, directs users through either subscription or API key registration, and migrates Anthropic plus other container-facing secrets from .env into the vault while keeping channel tokens resident.
  • Build, Restart, and Verify: Rebuilds the service, restarts it via launchctl/systemd/manual steps, and validates gateway health plus log entries to prove the migration succeeded.

Quick Start

Run /init-onecli to install OneCLI, migrate credentials from .env, and restart NauggieClaw with the new gateway.

Frequently Asked Questions about init-onecli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate .env credentials into OneCLI securely?

To migrate .env credentials into OneCLI securely, the skill installs OneCLI, moves Anthropic and outbound API secrets into the Agent Vault, and configures the gateway so agents never see raw keys.

Why does NauggieClaw need OneCLI Agent Vault for secrets?

NauggieClaw needs the OneCLI Agent Vault to prevent raw key exposure by migrating secrets from .env files into a gateway, ensuring system agents operate without direct access to Anthropic or outbound API credentials.

Do I need OneCLI installed before migrating credentials from .env?

You do not need OneCLI pre-installed; the skill performs comprehensive pre-flight checks to detect existing installations and then installs OneCLI before directing you through credential migration and vault registration.

Can I use OneCLI to migrate Anthropic API keys from host configuration files?

Yes, you can use OneCLI to migrate Anthropic API keys from host .env configuration files into the Agent Vault during NauggieClaw setup or upgrades, keeping channel tokens resident while securing outbound secrets.

What's the best way to verify OneCLI gateway health after a credential migration?

The best way to verify OneCLI gateway health is to rebuild the service, restart system agents via launchctl or systemd, and then check gateway health endpoints and log entries to confirm the migration succeeded.

What are the limitations of migrating secrets into the OneCLI Agent Vault?

A key limitation is that the migration requires verifying OneCLI installation and gathering user consent, and it specifically targets .env credentials for Anthropic and outbound APIs while keeping channel tokens resident rather than vaulting all variables.