Keys

该 Skill 提供 keys-broker 命令行代理，以 JSON 参数代发对 OpenAI、Anthropic、Stripe、GitHub 等预配置服务的 HTTP 请求，密钥保存在系统密钥链中且不暴露给 agent 上下文；另含 setup.md 首次安装说明与 manage.md 密钥增删轮换流程。仅在 macOS/Linux 且系统密钥链可用的环境下工作。

ivangdavila

热度 75.46

最近更新 2026-05-18 12:02:15

分类：安全依赖：代码执行 / 第三方 API应用场景：API 集成 / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add keys

Metadata

name: Keys
description: Secure API key management with broker. Keys never exposed to agent context.
metadata: {"clawdbot":{"emoji":"🔑","requires":{"bins":["curl","jq","bash"]},"os":["linux","darwin"]}}

Usage

Make authenticated API calls without seeing the key:

keys-broker call '{"action":"call","service":"openai","url":"https://api.openai.com/v1/chat/completions","method":"POST","body":{"model":"gpt-4","messages":[{"role":"user","content":"Hello"}]}}'

Response:

{"ok": true, "status": 200, "body": {...}}

Supported Services

Only preconfigured services work (security: prevents key exfiltration):

openai → api.openai.com
anthropic → api.anthropic.com
stripe → api.stripe.com
github → api.github.com

To add services, edit ALLOWED_URLS in keys-broker.sh.

Rules

Never retrieve keys directly — always use keys-broker call
Never ask user to paste keys in chat — guide them to keychain commands

Other Tasks

First time setup → see setup.md (install keys-broker.sh)
Add/remove/rotate keys → see manage.md

Limitations

Does NOT work in: Docker containers, WSL, headless Linux servers (no keychain access).