init-onecli

Migrate API credentials from .env files into the OneCLI Agent Vault.

Updated Jun 27, 2026
One-click install
npx skills add https://github.com/VincentChong123/nanoclaw-v2-agy-api-proxy --skill init-onecli-vincentchong123
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: init-onecli
Source: https://github.com/VincentChong123/nanoclaw-v2-agy-api-proxy/tree/main/.claude/skills/init-onecli
Command: npx skills add https://github.com/VincentChong123/nanoclaw-v2-agy-api-proxy --skill init-onecli-vincentchong123

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @onecli-sh/sdk.

What problem does it solve?

This skill resolves the security risk of storing raw API keys in environment files by migrating them into a centralized, encrypted Agent Vault.

Core Features & Use Cases

  • Credential Migration: Automatically moves sensitive keys from .env files into the OneCLI vault.
  • Agent Isolation: Ensures agents access credentials via a secure gateway rather than direct environment injection.
  • Use Case: Use this when upgrading your NanoClaw instance to ensure your Anthropic and third-party API keys are protected by per-agent policies and rate limits.

Quick Start

Run the init-onecli skill to migrate your existing environment credentials into the secure OneCLI Agent Vault.

Frequently Asked Questions about init-onecli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely migrate API credentials from environment files to a centralized vault?

Yes, you can secure containerized agent credentials by configuring a local gateway through this Skill. It facilitates secure credential injection and applies proxy authentication for outbound API requests without direct environment injection.

Do I need Docker to manage the secret lifecycle for agent credentials?

Yes, Docker is required to manage the secret lifecycle and proxy authentication. The Skill uses Docker alongside the OneCLI SDK to configure the local gateway and enforce per-agent access policies for outbound requests.

How does agent isolation work when protecting third-party API keys?

Agent isolation ensures agents access credentials via a secure gateway rather than direct environment injection. This approach protects third-party API keys by enforcing per-agent policies and rate limits within the OneCLI vault.

What's the best way to upgrade NanoClaw instances to protect Anthropic API keys?

To upgrade NanoClaw instances and protect Anthropic API keys, run this Skill to migrate existing environment credentials into the secure OneCLI Agent Vault. It ensures keys are protected by per-agent policies and rate limits.

Why should I not store raw API keys in environment files for containerized agents?

Storing raw API keys in environment files creates a security risk of unauthorized access. This Skill resolves that risk by migrating keys into an encrypted Agent Vault and routing access through a secure local gateway with applied access policies.