Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →borghei/env-secrets-manager
Environment and secrets management lifecycle: .env scaffolding, validation, leak detection, and rotation across Vault, AWS SSM, 1Password, and Doppler.
Passed 12 of 22 test cases with the skill, and 7 of 22 without it.
and 3 more in the full report
6 fixed6 passed either way9 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.
Before revoking a compromised OAuth client secret that has been leaked, what is the first step in the 4-step credential rotation playbook before generating a replacement key?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies scope analysis as the first step to discover all services, cron jobs, and background workers utilizing the secret. | Missed | Passed |
| Emphasizes mapping all dependent systems to prevent accidental outage during rotation. | Passed | Passed |
The instructions your model reads when the skill loads.
Complete environment variable and secrets management lifecycle: .env file structure across dev/staging/production, .env.example auto-generation that strips sensitive values, required-variable validation at startup, secret leak detection in git history, credential rotation playbooks, environment drift detection, and integration with HashiCorp Vault, AWS SSM, 1Password CLI, and Doppler.
.env.example (strips secrets), environment-specific files, and fail-fast startup validation.Before running, confirm these inputs. If any is unknown or vague, ASK — do not assume:
.env, scan for leaked secrets, or check env drift (selects env_validator.py vs secret_scanner.py vs env_sync_checker.py).env/.env.example files or directory to scan (the input the tools read)Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.
| Tool | Purpose | Command |
|---|---|---|
env_validator.py | Validate a .env against .env.example: missing/extra vars, empty secrets, leaked credentials | python scripts/env_validator.py .env.example .env --strict --check-secrets |
secret_scanner.py | Scan a directory/file for hardcoded secrets via pattern matching | python scripts/secret_scanner.py ./src --severity high --json |
env_sync_checker.py | Compare env configs across dev/staging/prod and report drift | python scripts/env_sync_checker.py .env.* --baseline .env.example |
test cases passed, vs 7 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.