Carapace vs Shortcut Toolkit

Carapace is a local-only security companion for OpenClaw. Carapace helps you move sensistive secrets into your OpenClaw host safely, even over insecure chat channels. How it works: 1. OpenClaw generates a public key and shows it as a QR code (or ask your agent to send it to you) 2. In Carapace, you load that key by live scan, photo import or paste 3. You enter any secret (API key, token, password etc) 4. Carapace encrypts it locally and copies a payload: carapace:v1:ciphertext. 5. You paste that payload into your message channel and send it to your OpenClaw 6. OpenClaw decrypts locally and stores the secret on the host Security Model: No backend No cloud sync No Firebase No network calls from Carapace Encryption is done on device with Libsodium sealed-box cryptography. Requirements: 1. OpenClaw host companion package: @oakroadapps/openclaw-carapace-vault 2. OpenClaw host setup is required for decryption/import (add to your soul.md) Ideal for users who want a lightweight, local-first way to provision secrets into OpenClaw without pasting plaintext into chat.

Shortcut Toolkit extends Apple Shortcuts with native, background actions for advanced automation. Build more dependable AI and agent workflows with tools to validate, extract, and safely repair JSON; validate dictionary schemas; build compact AI context; estimate tokens; and wrap action results in predictable formats. Keep local workflow state on your device with temporary values, persistent values, agent state, and conversation memory. Clean AI responses, process text and lists, create identifiers and hashes, work with URLs, and cache results without leaving Shortcuts. Create safe reusable custom blocks in the companion app, then select them directly in Shortcuts. Audio Spectrum blocks can analyze an audio file and return a PNG spectrum graph for the next step in your workflow. Shortcut Toolkit is designed to stay out of the way: actions run inside Shortcuts wherever Apple permits, return results directly to the next action, and keep data on-device unless you choose a Shortcut action that sends it elsewhere.