360 Secure SkillHub
360 安全技能中心

Gateway Env Injector

核心功能：通过1Password CLI读取密钥，用PlistBuddy注入到macOS LaunchAgent plist的EnvironmentVariables区块，注入后自动重启服务，支持自定义密钥映射。典型场景：在macOS运行OpenClaw时，需为LaunchAgent配置敏感密钥，避免明文风险。输入为执行bash脚本，依赖op、bash及OP_SERVICE_ACCOUNT_TOKEN；输出为更新后的plist，服务重启。注意固定Node路径防TCC权限失效。

nissan
nissan
热度 69.79
最近更新 2026-05-18 12:14:59
分类：安全依赖：代码执行 / 读写文件 / 第三方 API应用场景：DevOps / 自动化脚本

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add gateway-env-injector
Metadata
name
gateway-env-injector
version
1.0.0
description
Safely inject API keys from 1Password into macOS LaunchAgent plists using PlistBuddy. Use when running OpenClaw on macOS and storing secrets in 1Password — avoids plaintext keys on disk while keeping LaunchAgent env vars populated. Requires 1Password CLI (op).
metadata
{"openclaw":{"emoji":"🔐","requires":{"bins":["op","bash"],"env":["OP_SERVICE_ACCOUNT_TOKEN"]},"primaryEnv":"OP_SERVICE_ACCOUNT_TOKEN","network":{"outbound":true,"reason":"Reads secrets from 1Password via op CLI (1password.com). Writes locally to plist files only."}}}

Gateway Environment Injector

Bake secrets from 1Password into macOS LaunchAgent plists without leaving plaintext keys on disk. Uses op read to fetch secrets and /usr/libexec/PlistBuddy to inject them directly into the plist's EnvironmentVariables block.

Why This Exists

  • launchctl setenv doesn't inject into a plist's own EnvironmentVariables block
  • Environment variables in .zshrc aren't available to LaunchAgents
  • Plaintext key files are a security risk
  • 1Password service accounts provide read-only, rotatable access

Usage

bash scripts/inject-gateway-env.sh

Reads each key from 1Password, injects into the gateway plist, then restarts the service.

What It Injects

Configurable list of op://Vault/Item/field references mapped to environment variable names. Modify the script's KEYS array for your setup.

Key Lesson

Changing the Node binary path (even to a symlink) can silently revoke macOS TCC permissions. Always keep the gateway plist locked to the Homebrew Cellar path, not an NVM symlink.

Files

  • scripts/inject-gateway-env.sh — Injection script with 1Password integration