Skills env-manager

📦

env-manager

Name: env-manager
Author: CuriousLearner

Content revision r1 High Risk ⚙️ External commands🌐 Network access🔑 Env variables

Manage Environment Configuration

Environment variables are easy to miss, misname, or expose during development. This skill helps Claude, Codex, and Claude Code document variables, validate formats, and improve secret-handling practices.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "env-manager" from https://skillstore.io/skills/curiouslearner-env-manager.md and its manifest at https://skillstore.io/api/skills/curiouslearner-env-manager/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/curiouslearner-env-manager.md Signed manifest GET /api/skills/curiouslearner-env-manager/manifest Signed lockfile GET /api/skills/curiouslearner-env-manager/lockfile

Test it

Using "env-manager". Document the environment variables for a Node.js API.

Expected outcome:

A grouped list of required application, database, cache, and security variables.
A template with placeholder values and short comments.
Validation recommendations for ports, URLs, booleans, and log levels.

Using "env-manager". Check whether our configuration is safe for production.

Expected outcome:

A finding that production secrets should be stored in a secrets manager.
A warning to avoid committing local .env files.
A checklist for required variables and environment-specific settings.

Using "env-manager". Help onboard a new developer to local configuration.

Expected outcome:

A concise setup guide that explains required variables, safe placeholder values, and validation steps.

Security Audit

High Risk

v10 • 7/9/2026 Open versioned report

The static analyzer flagged many examples related to .env files, credential names, URLs, Markdown backticks, and secret-management commands. Review found these are documentation examples for environment validation and defensive secret handling, with no prompt injection, hidden execution path, or data exfiltration intent in SKILL.md.

Files scanned

500

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

High

SKILL.md:354

Ransomware file extensions

sops -e .env > .env.encrypted

The static pattern could not be fully classified from the available context, so it is retained for fail-closed review.

Risk Factors

⚙️ External commands (46)

🌐 Network access (3)

SKILL.md:96 SKILL.md:169 SKILL.md:176

🔑 Env variables (46)

Detected Patterns

Ransomware file extensions

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/curiouslearner-env-manager/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/curiouslearner-env-manager/security.svg)](https://skillstore.io/skills/curiouslearner-env-manager?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/curiouslearner-env-manager?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/curiouslearner-env-manager/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/curiouslearner-env-manager.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

CuriousLearner. (2026). env-manager security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/curiouslearner-env-manager/audits/10

BibTeX citation

@techreport{curiouslearner-curiouslearner-env-manager-2026,
  author = {CuriousLearner},
  title = {env-manager security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/curiouslearner-env-manager/audits/10},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "env-manager security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
  - name: "CuriousLearner"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/curiouslearner-env-manager/audits/10"
identifiers:
  - type: other
    value: "skillstore:curiouslearner-env-manager:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare a New Service

Generate a clean environment variable template before a new application is shared with the team.

Audit Deployment Configuration

Check whether required variables are documented and validated before staging or production release.

Improve Onboarding Docs

Create readable setup instructions that explain each variable and safe local defaults.

Try These Prompts

List Environment Variables

Use env-manager to list the environment variables used by this project. Group them by required and optional variables.

Create an Example File

Use env-manager to draft a .env.example template for this service. Use placeholders only and include short descriptions.

Validate Configuration Rules

Use env-manager to propose validation rules for each environment variable, including type, allowed values, defaults, and required status.

Audit Secret Handling

Use env-manager to review our environment configuration for secret-handling risks. Do not print secret values. Report only variable names, risk level, and remediation.

Best Practices

Share variable names and placeholders, not real secret values.
Validate required variables during application startup.
Keep committed templates separate from local or production secret files.

Avoid

Do not paste production secrets into prompts or generated documentation.
Do not rely on undocumented defaults for required deployment settings.
Do not commit .env files that contain credentials or private endpoints.

Frequently Asked Questions

Can this skill create a .env.example file?

Yes. It can draft a template with placeholders, descriptions, required status, and safe example values.

Does it read my real secrets?

It should not need real secret values. Provide variable names, code references, or redacted samples instead.

Can it validate environment variable types?

Yes. It can suggest validation for URLs, ports, numbers, booleans, strings, and allowed choices.

Which tools can use this skill?

The report lists support for Claude, Codex, and Claude Code.

Is this a secret manager?

No. It documents and reviews configuration practices, but it does not store, rotate, or provision secrets.

Can it help with production readiness?

Yes. It can review required variables, unsafe defaults, missing validation, and secret-management recommendations.

Developer Details

Author

CuriousLearner

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/CuriousLearner/devkit/tree/main/skills/env-manager

Ref

7db9b9f06e0ab79c575b58bc48c4d8dc9849f424

Maintenance freshness

7/18/2026

Usage

4 downloads · 266 views

File structure

📄 SKILL.md