Env Validator & .env.example Generator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements and instructions are consistent with its stated purpose (validating and documenting .env files) and it does not request unrelated credentials or installs, but it is instruction-only so you should be cautious about supplying real secret contents.
This skill appears coherent with its purpose, but it will need to read your .env contents to do its job — and .env files often contain sensitive secrets. Before using it: (1) Prefer running validation locally or pasting a redacted copy (replace actual secret values with placeholders) so real secrets aren't exposed; (2) Confirm how the agent handles outputs and logs (are values redacted in logs/outputs?); (3) If you must provide real .env contents, limit scope and duration and review the results carefully; (4) If you need to automate checks on CI, prefer integrating a vetted local tool or linter rather than sending secrets to a remote agent.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
No VirusTotal findings