safe-encryption

What This Skill Does

The safe-encryption skill integrates the SAFE CLI into your OpenClaw environment, providing a robust, post-quantum capable encryption solution. It is designed as a modern, high-performance alternative to GPG. The skill enables you to encrypt and decrypt data seamlessly, manage cryptographic keys, and handle multi-recipient messages directly through your AI agent. It is built to prioritize automation, utilizing environment variables for passphrases and standard piping for data handling to avoid the security risks associated with temporary files.

Installation

You can install this skill via the OpenClaw terminal using the command: clawhub install openclaw/skills/skills/grittygrease/safe-encryption-skill. Upon execution, the skill automatically detects your operating system and architecture to download the appropriate binary. If automated installation is restricted, you can manually download the binary from thesafe.dev or use the provided shell one-liner provided in the documentation.

Use Cases

• Secure Communication: Encrypt sensitive messages or documents before sharing with colleagues, leveraging public-key infrastructure.
• Encrypted Storage: Protect local files or backups with post-quantum security algorithms.
• Automated CI/CD Secrets: Use the -p env:VARNAME feature to decrypt sensitive configuration files during deployment pipelines without manual password entry.
• Secure Data Pipelines: Pipe decrypted data directly into other CLI tools or processing scripts without touching the disk.

Example Prompts

1. "Encrypt the file at /home/user/documents/report.pdf for recipient 'bob' and save the output to /home/user/documents/report.pdf.safe."
2. "Decrypt the content in /home/user/vault/secret.enc and display it in the terminal."
3. "Generate a new encryption key pair and list my current available recipients to ensure I can send encrypted messages to Alice."

Tips & Limitations

To maintain security, always use absolute paths when referencing files. The skill is designed to auto-discover keys, so you rarely need to specify a key location manually unless you are managing multiple identities. Remember that while SAFE is post-quantum capable, the security of your system still depends on the protection of your private keys. Avoid storing passphrases in plain text; use environment variables or system-level secret stores. If you encounter permission issues during installation, ensure your user has write access to /usr/local/bin.