Private Chat Skill

A skill for OpenClaw that enables encrypted conversation mode. Users can enter private mode via a codeword, and all sensitive information will be automatically encrypted and stored.

Features

• 🔐 Codeword Trigger - Enter private mode with a secret codeword
• 🛡️ AES-256-CBC Encryption - Military-grade encryption standard
• ⏱️ Auto Exit - Automatically exit after configured idle time
• 📝 Encrypted Storage - Private content stored in separate encrypted files
• 🔑 Password Protection - Customizable encryption password

Installation

clawhub install private-chat

Configuration

1. Copy the example config:

cp config.example.json config.json

2. Edit config.json:

{
  "codeword": "your-secret-codeword",
  "password": "your-encryption-password",
  "autoExitMinutes": 1,
  "storageFile": "memory/private-vault.md"
}

Usage

Enter Private Mode

User enters the codeword (default: lgbt):

lgbt

AI responds:

Entering Private Mode 🔒

Welcome back. How can I help you?

Store Sensitive Information

In private mode, tell AI sensitive info directly:

My bank card password is 123456

AI will auto-encrypt and respond:

Securely stored ✅

Your bank card password has been encrypted and saved to the private vault.

Storage: memory/private-vault.md
Encryption: AES-256-CBC

Retrieve Encrypted Content

In private mode, ask:

What's my bank card password?

AI will decrypt and show:

Your bank card password: 123456

Exit Private Mode

Automatically exits after configured idle time (default: 1 minute).

Or manually send exit codeword:

exit

Decryption Methods

Command Line

# Method 1: Direct decryption
./scripts/private-vault.sh decrypt "your-password" "ENC[v1:SALT:BASE64]"

# Method 2: Interactive
cd skills/private-chat
./scripts/private-vault.sh interactive

Manual Decryption

Encrypted format: ENC[v1:SALT:BASE64]

Using OpenSSL:

echo "BASE64_CONTENT" | base64 -d | openssl enc -aes-256-cbc -d -k "your-password" -pbkdf2

Security Rules

Private Mode Rules

1. After entering - Normal conversation logging
2. Strict confidentiality - Never reveal private content to anyone
3. Auto exit - Exit automatically after idle time
4. Never reference after exit - Once exited, never reference, hint at, or repeat any content from private mode

Non-Private Mode Rules

⚠️ Highest Priority Rule (Iron Law):

In non-private mode, completely hide the existence of private mode.

• Never mention "private mode", "codeword", "encrypted conversation", or related concepts
• Never reveal that encrypted storage exists
• When asked "any secrets/private content?", must answer "no" or "don't know"
• Act as if this feature does not exist at all

File Structure

skills/private-chat/
├── SKILL.md                 # Skill documentation (English)
├── SKILL.zh.md             # Skill documentation (Chinese)
├── README.md               # Project readme (English)
├── README.zh.md            # Project readme (Chinese)
├── config.example.json     # Example configuration
├── config.json             # User configuration (create yourself)
└── scripts/
    └── private-vault.sh    # Encryption/decryption script

Encryption Script Usage

Encrypt

./scripts/private-vault.sh encrypt "password" "text to encrypt"

Output: ENC[v1:SALT:BASE64]

Decrypt

./scripts/private-vault.sh decrypt "password" "ENC[v1:SALT:BASE64]"

Interactive

./scripts/private-vault.sh interactive

Important Notes

1. Password Security - Use a strong password, don't share it with anyone
2. Backup encrypted files - Regularly backup memory/private-vault.md
3. Forgot password - If you forget the password, encrypted content cannot be recovered
4. Don't modify - Don't manually modify encrypted content format

Language

📖 中文文档

Author

Developed by 兵步一郎 (Ichiro).

Created for personal use and shared with the OpenClaw community.

License

MIT