Iron Proxy Gateway for NanoClaw
nanocoai/nanoclaw
Installs or refreshes Iron Proxy and its Iron Control web console for NanoClaw, with a local Docker setup, database, credentials and a human approval bridge.
A skill your agent uses when handling API keys, passwords, tokens, private keys, or any sensitive credential.
Install Secrets Management
$ npx skills add aiming-lab/MetaClaw --skill secrets-management -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install aiming-lab/MetaClaw secrets-management --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/aiming-lab/MetaClaw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/memory_data/skills/secrets-management .claude/skills/secrets-management && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "secrets-management" agent skill from https://github.com/aiming-lab/MetaClaw/tree/main/memory_data/skills/secrets-management into .claude/skills/secrets-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "secrets-management", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/aiming-lab/MetaClaw/tree/main/memory_data/skills/secrets-managementType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add aiming-lab/MetaClaw --skill secrets-management -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install aiming-lab/MetaClaw secrets-management --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiming-lab/MetaClaw.git skills-src && mkdir -p .agents/skills && cp -r skills-src/memory_data/skills/secrets-management .agents/skills/secrets-management && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "secrets-management" agent skill from https://github.com/aiming-lab/MetaClaw/tree/main/memory_data/skills/secrets-management into .agents/skills/secrets-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "secrets-management", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiming-lab/MetaClaw --skill secrets-management -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install aiming-lab/MetaClaw secrets-management --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiming-lab/MetaClaw.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/memory_data/skills/secrets-management .cursor/skills/secrets-management && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "secrets-management" agent skill from https://github.com/aiming-lab/MetaClaw/tree/main/memory_data/skills/secrets-management into .cursor/skills/secrets-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "secrets-management", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/aiming-lab/MetaClaw.git --path memory_data/skills/secrets-management--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add aiming-lab/MetaClaw --skill secrets-management -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install aiming-lab/MetaClaw secrets-management --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiming-lab/MetaClaw.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/memory_data/skills/secrets-management .gemini/skills/secrets-management && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "secrets-management" agent skill from https://github.com/aiming-lab/MetaClaw/tree/main/memory_data/skills/secrets-management into .gemini/skills/secrets-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "secrets-management", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install aiming-lab/MetaClaw secrets-managementInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add aiming-lab/MetaClaw --skill secrets-management -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/aiming-lab/MetaClaw.git skills-src && mkdir -p .github/skills && cp -r skills-src/memory_data/skills/secrets-management .github/skills/secrets-management && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "secrets-management" agent skill from https://github.com/aiming-lab/MetaClaw/tree/main/memory_data/skills/secrets-management into .github/skills/secrets-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "secrets-management", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add aiming-lab/MetaClaw --skill secrets-management -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install aiming-lab/MetaClaw secrets-management --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/aiming-lab/MetaClaw.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/memory_data/skills/secrets-management .opencode/skills/secrets-management && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "secrets-management" agent skill from https://github.com/aiming-lab/MetaClaw/tree/main/memory_data/skills/secrets-management into .opencode/skills/secrets-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "secrets-management", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
secrets-management- GitHub stars
- 3.5k
- Token cost
- ~246 tokens
- SKILL.md length
- 91 words
- Files
- 1
- Skills in repo
- 36
- Repo updated
- First seen
- Licence
- MIT
At a glance
A skill your agent uses when handling API keys, passwords, tokens, private keys, or any sensitive credential.
- Works in 5 steps: Never hardcode secrets in source files,… → Use environment variables for local… → Use a secrets manager (AWS Secrets… → …
- Handling API keys
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
- Any sensitive credential
What it does
Secrets Management is an agent skill from aiming-lab/MetaClaw. Use this skill when handling API keys, passwords, tokens, private keys, or any sensitive credential. Never hardcode secrets in source code — apply this whenever the word "key", "token", "password", or "secret" appears in the task.
Its SKILL.md is about 250 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in DevOps & Cloud, covering Secrets management. The repository describes itself as: 🦞 Just talk to your agent — it learns and EVOLVES 🧬. The licence is MIT.
When your agent uses it
- Handling API keys
- Any sensitive credential
Example prompts
- “password”
- “secret”
- “/secrets-management”
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
- Never hardcode secrets in source files, configs committed to git, or logs.
- Use environment variables for local development (python-dotenv).
- Use a secrets manager (AWS Secrets Manager, HashiCorp Vault, 1Password CLI) in production.
- Add .env and *.pem to .gitignore before the first commit.
- Rotate secrets immediately if they are exposed (leaked in a commit, log, or error message).
What it can do on your machine
Read from SKILL.md and the folder at commit 922caf3. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Secrets Management loads about 246 tokens when it runs. Until then it costs about 62 tokens; SKILL.md has 91 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NoteMentions a .env fileSKILL.md:13
4. Add `.env` and `*.pem` to `.gitignore` before the first commit.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from aiming-lab/MetaClaw at commit 922caf3, republished under its MIT licence (© aiming-lab). 91 words, ~246 tokens.
Download SKILL.mdSave it as
.claude/skills/secrets-management/SKILL.md (or your agent's skills folder).- name
- secrets-management
- description
- Use this skill when handling API keys, passwords, tokens, private keys, or any sensitive credential. Never hardcode secrets in source code — apply this whenever the word "key", "token", "password", or "secret" appears in the task.
- category
- security
Secrets Management
Rules:
- Never hardcode secrets in source files, configs committed to git, or logs.
- Use environment variables for local development (
python-dotenv). - Use a secrets manager (AWS Secrets Manager, HashiCorp Vault, 1Password CLI) in production.
- Add
.envand*.pemto.gitignorebefore the first commit. - Rotate secrets immediately if they are exposed (leaked in a commit, log, or error message).
Scanning: Use ggshield, truffleHog, or git-secrets in CI to block secret commits.
Anti-patterns:
os.environ.get('KEY', 'hardcoded_default')in production code.- Logging full request/response bodies that may contain tokens.
© aiming-lab, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in memory_data/skills/secrets-management of aiming-lab/MetaClaw.
Open the folder on GitHubat commit 922caf3
Compare with similar skills
Secrets Management next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Secrets Management this skillaiming-lab/MetaClaw | 3.5k | — | ~246 | Automated safety check: Notes | MIT | |
| Iron Proxy Gateway for NanoClawnanocoai/nanoclaw | 31k | — | ~4.6k | Automated safety check: Notes | MIT | |
| LangBot Deployment Guidelangbot-app/LangBot | 18k | — | ~1.2k | Automated safety check: Notes | Apache-2.0 | |
| Env Var Conventionssgl-project/sglang | 37k | 2 repos | ~2.9k | Automated safety check: Pass | Apache-2.0 | |
| Mac Fleet Maintenancesteipete/agent-scripts | 7.3k | — | ~4.8k | Automated safety check: Pass | MIT | |
| Add Config Env Varbaserow/baserow | 6.1k | — | ~1.1k | Automated safety check: Pass | Custom licence |
Similar skills
LangBot Deployment Guide
langbot-app/LangBot
Deploys and configures a LangBot instance with Docker Compose or Kubernetes, covering config.yaml, the Box sandbox runtime, the plugin runtime and the global API key.
Env Var Conventions
sgl-project/sglang
Conventions for SGLang environment variables — where to define, how to access, how to name, and how to deprecate.
Mac Fleet Maintenance
steipete/agent-scripts
Inventories and maintains a fleet of Macs from a desired-state file: package updates, repo and Xcode sync, and disk, backup and security health reports.
Add Config Env Var
baserow/baserow
Add a Baserow configuration environment variable for the backend, frontend, or both, and propagate it through settings, Nuxt runtime config, Docker Compose, documentation, consumers, and tests as…
Edgeone Makers CLI
TencentEdgeOne/edgeone-makers-tools
EdgeOne Makers CLI command reference. An agent skill from TencentEdgeOne/edgeone-makers-tools.
More from aiming-lab/MetaClaw
All 36 skills in this repoData Validation First
aiming-lab/MetaClaw
Use this skill before any data analysis, transformation, or modeling.
Input Validation And Sanitization
aiming-lab/MetaClaw
A skill your agent uses when implementing any endpoint, form handler, CLI tool, or function that accepts external input.
Robust Error Handling In Scripts
aiming-lab/MetaClaw
A skill your agent uses when writing shell scripts, Python automation, or any unattended batch job.
Structured Logging And Observability
aiming-lab/MetaClaw
A skill your agent uses when building production services, pipelines, or automation that needs to be debugged, monitored, or audited.
Agent Task Handoff
aiming-lab/MetaClaw
A skill your agent uses when delegating a subtask to a sub-agent, spawning a parallel worker, or handing off work across sessions.
Async Communication Etiquette
aiming-lab/MetaClaw
A skill your agent uses when writing messages in async channels (Slack, GitHub issues, email threads) where the reader may not have context and cannot ask follow-up questions immediately.
Related
Categories
Questions about Secrets Management
What does Secrets Management do?
A skill your agent uses when handling API keys, passwords, tokens, private keys, or any sensitive credential. Secrets Management is an agent skill from aiming-lab/MetaClaw. Use this skill when handling API keys, passwords, tokens, private keys, or any sensitive credential.
When should I use Secrets Management?
Secrets Management fits situations like: handling API keys; any sensitive credential.
How do I install Secrets Management in Claude Code?
Run `npx skills add aiming-lab/MetaClaw --skill secrets-management -a claude-code`. Or copy the skill folder (memory_data/skills/secrets-management in aiming-lab/MetaClaw) into .claude/skills/secrets-management in your project. Claude Code loads it when a task matches its description.
How do I install Secrets Management in Codex?
Run `npx skills add aiming-lab/MetaClaw --skill secrets-management -a codex`. Or copy the skill folder (memory_data/skills/secrets-management in aiming-lab/MetaClaw) into .agents/skills/secrets-management in your project. Codex loads it when a task matches its description.
Can I use Secrets Management in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add aiming-lab/MetaClaw --skill secrets-management -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/secrets-management, .gemini/skills/secrets-management, .github/skills/secrets-management and .opencode/skills/secrets-management in your project.
What does Secrets Management need to run?
SKILL.md names no scripts, command-line tools or credentials: Secrets Management is instructions for the agent only.
Does Secrets Management access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Secrets Management safe to install?
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Secrets Management use?
Secrets Management is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Secrets Management use?
About 246 tokens (SKILL.md is roughly 984 characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Secrets Management?
Skills that share tags, products or a category with Secrets Management: Iron Proxy Gateway for NanoClaw (nanocoai/nanoclaw, 31k stars), LangBot Deployment Guide (langbot-app/LangBot, 18k stars), Env Var Conventions (sgl-project/sglang, 37k stars) and Mac Fleet Maintenance (steipete/agent-scripts, 7.3k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Secrets Management?
aiming-lab (a GitHub organization) maintains it in aiming-lab/MetaClaw, which has 3,458 GitHub stars. The repository holds 36 skills in this directory. The repository was last updated on June 7, 2026.
Source: aiming-lab/MetaClaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.