Setup & Installation
openclaw skills install @grittygrease/safe-encryption-skill
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install safe-encryption-skill
What This Skill Does
SAFE is a command-line encryption tool that replaces GPG with a simpler interface, post-quantum key support, and composable credential paths. It handles key generation, file encryption, and multi-recipient scenarios where any one or all recipients must provide credentials to decrypt.
Unlike GPG, SAFE supports composable AND/OR credential paths, post-quantum ML-KEM keys, and encryption to GitHub usernames without prior key exchange.
When to use it
- Encrypting .env files before pushing to a shared repository
- Sharing API credentials with a teammate using their public key
- Password-protecting backups before uploading to cloud storage
- Rotating passwords on encrypted files without re-encrypting data
- Sending encrypted messages between automated agents via GitHub Gist
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: Encrypt my .env file so only my teammate Alice can open it
AGENT
- 1Check if `safe` is installed; install the platform binary from thesafe.dev if missing
- 2Run `safe keys` to see if alice is already a known recipient
- 3Import Alice's public key: `safe keys add alice.x25519.pub --name alice`
- 4Encrypt the file: `safe encrypt .env -o .env.safe -r alice`
- 5Confirm success and instruct Alice to run `safe decrypt .env.safe` on her machine
OUTPUT
.env.safe file encrypted for Alice, decryptable only with her private key