devtools-secrets

What This Skill Does

The devtools-secrets skill provides a specialized diagnostic and configuration engine for the mise + fnox + infisical secrets toolchain. It acts as an expert assistant that validates your environment, monitors secret injection practices, and enforces high-security standards for local development workflows. By unifying these tools, the skill ensures that sensitive credentials never reach your code repositories and are instead managed via secure, encrypted backend providers.

Installation

To install this skill, run the following command in your terminal:

clawhub install openclaw/skills/skills/basher83/devtools-secrets

Once installed, you can trigger the skill by asking the OpenClaw agent for help with environment variables, secrets management, or toolchain setup. The skill automatically probes your current project for fnox.toml, .infisical.json, and mise.toml configurations to provide context-aware advice.

Use Cases

This skill is designed for developers who need to bridge the gap between secure cloud secret storage and local runtime environments. Use it when setting up new projects to ensure secrets are correctly provisioned, when debugging why an environment variable isn't resolving, or when you need to switch between development, staging, and production secret environments safely. It is particularly useful for teams enforcing compliance-driven secret hygiene.

Example Prompts

1. "OpenClaw, can you help me set up fnox for this project and link it to our infisical workspace?"
2. "I'm getting an error when running my mise task; is my environment configured to correctly inject secrets from infisical?"
3. "My project environment variables aren't loading. Can you check my fnox.toml and mise.toml to see what I'm missing?"

Tips & Limitations

• Always Verify First: The skill performs an immediate diagnostic check upon activation. If it reports 'MISSING' for any component, follow the suggested installation commands provided by the agent before attempting further configuration.
• Scope: This skill does not replace the security hooks in .claude/settings.json. It complements them by providing the 'how-to' for the tools that those hooks require you to use.
• Hygiene: Avoid running export commands directly in your shell for keys like AWS_SECRET_ACCESS_KEY or OPENAI_API_KEY. Always rely on fnox exec to ensure secrets are ephemeral and managed securely through your provider, as the agent's built-in hooks will flag bare exports.