init-onecli

Migrate API credentials from .env files into the OneCLI Agent Vault.

Updated Jul 2, 2026
One-click install
npx skills add https://github.com/tharunramagiri/bookoraaagent --skill init-onecli-tharunramagiri
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: init-onecli
Source: https://github.com/tharunramagiri/bookoraaagent/tree/main/.claude/skills/init-onecli
Command: npx skills add https://github.com/tharunramagiri/bookoraaagent --skill init-onecli-tharunramagiri

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill resolves the security risk of storing raw API keys in environment files by migrating them to a centralized, encrypted Agent Vault.

Core Features & Use Cases

  • Credential Migration: Automatically detects and moves sensitive keys like ANTHROPIC_API_KEY from .env files into the OneCLI vault.
  • Gateway Configuration: Sets up the OneCLI gateway to inject credentials at runtime, ensuring agents never access raw keys.
  • Use Case: When upgrading your Bookoraa Agent to use OneCLI, run this skill to transition your existing setup to a more secure, policy-driven credential management system.

Quick Start

Run the init-onecli skill to migrate your existing environment credentials into the secure Agent Vault.

Frequently Asked Questions about init-onecli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate API keys from .env files to a secure vault?

To migrate API keys from .env files to a secure vault, run the init-onecli skill to automatically detect and move sensitive credentials like ANTHROPIC_API_KEY into the encrypted OneCLI Agent Vault. It transitions raw keys into a centralized, policy-based management system.

Why should I use a credential vault instead of raw environment files for agent containers?

Using a credential vault prevents raw key exposure within agent containers, resolving the security risk of storing unencrypted API credentials in environment files. It configures a gateway to inject credentials securely at runtime, ensuring agents never directly access raw keys.

Do I need Docker and the OneCLI SDK to manage agent credentials?

Yes, you need Docker and the OneCLI SDK to manage agent credentials securely. These dependencies are required to manage the secret lifecycle and maintain gateway connectivity when migrating container-facing API keys into the encrypted vault.

What's the best way to secure Anthropic API keys for container-facing agents?

The best way to secure Anthropic API keys for container-facing agents is migrating them from local environment files to a centralized Agent Vault. This approach uses a gateway for policy-based runtime injection, preventing raw key exposure inside the agent containers.

Can I automatically detect and move sensitive keys to a policy-driven credential management system?

Yes, you can automatically detect and move sensitive environment keys to a policy-driven credential management system. The migration skill scans local environment files and securely transitions specific container-facing API keys into the centralized Agent Vault.