init-onecli

Migrate API credentials from .env files into the OneCLI Agent Vault.

Updated Jun 27, 2026

Search Tags:#security #authentication #credentials #vault #nanoclaw #onecli

Ready to run

npx skills add https://github.com/VincentChong123/nanoclaw-v2-agy-api-proxy --skill init-onecli-vincentchong123

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: init-onecli
Source: https://github.com/VincentChong123/nanoclaw-v2-agy-api-proxy/tree/main/.claude/skills/init-onecli
Command: npx skills add https://github.com/VincentChong123/nanoclaw-v2-agy-api-proxy --skill init-onecli-vincentchong123

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @onecli-sh/sdk.

What problem does it solve?

This skill resolves the security risk of storing raw API keys in environment files by migrating them into a centralized, encrypted Agent Vault.

Core Features & Use Cases

Credential Migration: Automatically moves sensitive keys from .env files into the OneCLI vault.
Agent Isolation: Ensures agents access credentials via a secure gateway rather than direct environment injection.
Use Case: Use this when upgrading your NanoClaw instance to ensure your Anthropic and third-party API keys are protected by per-agent policies and rate limits.

Quick Start

Run the init-onecli skill to migrate your existing environment credentials into the secure OneCLI Agent Vault.

Frequently Asked Questions about init-onecli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I securely migrate API credentials from environment files to a centralized vault?▼

Yes, you can secure containerized agent credentials by configuring a local gateway through this Skill. It facilitates secure credential injection and applies proxy authentication for outbound API requests without direct environment injection.

Do I need Docker to manage the secret lifecycle for agent credentials?▼

Yes, Docker is required to manage the secret lifecycle and proxy authentication. The Skill uses Docker alongside the OneCLI SDK to configure the local gateway and enforce per-agent access policies for outbound requests.

How does agent isolation work when protecting third-party API keys?▼

Agent isolation ensures agents access credentials via a secure gateway rather than direct environment injection. This approach protects third-party API keys by enforcing per-agent policies and rate limits within the OneCLI vault.

What's the best way to upgrade NanoClaw instances to protect Anthropic API keys?▼

To upgrade NanoClaw instances and protect Anthropic API keys, run this Skill to migrate existing environment credentials into the secure OneCLI Agent Vault. It ensures keys are protected by per-agent policies and rate limits.

Why should I not store raw API keys in environment files for containerized agents?▼

Storing raw API keys in environment files creates a security risk of unauthorized access. This Skill resolves that risk by migrating keys into an encrypted Agent Vault and routing access through a secure local gateway with applied access policies.