init-onecli

Migrate .env credentials to OneCLI Agent Vault secrets for NanoClaw deployments.

5|Updated Apr 2, 2026
One-click install
npx skills add https://github.com/thmtz/nanoclaw-fleet --skill init-onecli-thmtz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: init-onecli
Source: https://github.com/thmtz/nanoclaw-fleet/tree/main/.claude/skills/init-onecli
Command: npx skills add https://github.com/thmtz/nanoclaw-fleet --skill init-onecli-thmtz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Install and configure the OneCLI Agent Vault gateway for NanoClaw deployments, and migrate existing .env credentials into the vault to enforce per-agent policies and secure, on-demand injection at runtime.

Core Features & Use Cases

  • Install the OneCLI gateway and CLI tools, verify installation, and configure api-host.
  • Migrate existing credentials from .env to OneCLI secrets, then purge raw keys from the env.
  • Validate and manage container-facing secrets via OneCLI, and restart services when needed to apply changes.

Quick Start

Run this skill after updating NanoClaw to enable OneCLI integration, install OneCLI, configure the gateway, and migrate existing credentials from .env to the Agent Vault.

Frequently Asked Questions about init-onecli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate .env credentials to a secure vault for NanoClaw deployments?

Migrate .env credentials to a secure vault by installing the OneCLI Agent Vault gateway, transferring existing raw keys into OneCLI secrets, and purging the original .env file to enforce per-agent runtime injection policies.

What does OneCLI Agent Vault integration do for NanoClaw credential security?

OneCLI Agent Vault integration secures NanoClaw deployments by replacing raw .env credentials with on-demand runtime secret injection, enforcing per-agent policies through a configured gateway to prevent unauthorized access.

Do I need a working OneCLI installation to configure NanoClaw gateway secrets?

Yes, you need a working OneCLI installation and local environment access to configure the gateway, migrate .env credentials, and register container-facing secrets for NanoClaw deployments.

Can I purge raw keys from .env after migrating credentials to OneCLI?

Yes, you can purge raw keys from .env after migrating them to OneCLI secrets, but you must validate the container-facing secrets and restart services to apply the changes and ensure runtime injection works.

What's the best way to set up OneCLI in a fresh NanoClaw environment?

Set up OneCLI in a fresh NanoClaw environment by installing the OneCLI gateway and CLI tools, configuring the api-host, and registering secrets directly into the Agent Vault without needing to migrate existing .env credentials.