Env File Toolkit

• Outcome: Review
• Latest audit: Sep 15, 2026 · 1:09 AM UTC
• Version: 1.0.0

Overview

This skill mostly does what it claims, but it handles secret-bearing .env files and can write or display sensitive values with unsafe serialization behavior.

Review this before installing if you use .env files containing production secrets. Avoid `--with-values` and `--keep-values` unless you are working locally in a controlled context, do not commit generated files that preserve real values, and do not source merged or generated env files in shell workflows unless their contents have been reviewed and safely quoted.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Error

• Location: scripts/env_toolkit.py:31

Finding

Protective quoting is removed before environment values are serialized

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (43)

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md

---
name: env-file-toolkit
description: Manage .env files with validate, diff, template generation, merge, and missing-key checks. Use when working with environment variable files, comparing .env.local vs .env.production, generating .env.example templates, validating .env syntax, merging env files, or checking for missing environment variables.
---

# Env File Toolkit

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

md

---
name: env-file-toolkit
description: Manage .env files with validate, diff, template generation, merge, and missing-key checks. Use when working with environment variable files, comparing .env.local vs .env.production, generating .env.example templates, validating .env syntax, merging env files, or checking for missing environment variables.
---

# Env File Toolkit

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 43)May include surrounding context.

md

---
name: env-file-toolkit
description: Manage .env files with validate, diff, template generation, merge, and missing-key checks. Use when working with environment variable files, comparing .env.local vs .env.production, generating .env.example templates, validating .env syntax, merging env files, or checking for missing environment variables.
---

# Env File Toolkit

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

Compare two .env files — shows keys only in one file and changed values:

bash

python3 scripts/env_toolkit.py diff .env.local .env.production

Template

Credential Access

High

• Category: Privilege Escalation
• Confidence: 91% confidence

Finding

The documented template .env --keep-values command explicitly preserves actual secret values when generating a template-like artifact. This creates a real risk of credential disclosure through copied example files, terminal history, shared outputs, or accidental commits, making the credential-access concern substantive here rather than a mere filename mention.

Content

Scanner excerpt · SKILL.md (reported line 35)May include surrounding context.

bash

python3 scripts/env_toolkit.py template .env
python3 scripts/env_toolkit.py template .env -o .env.example
python3 scripts/env_toolkit.py template .env --keep-values  # keep actual values

Merge

Credential Access

High

• Category: Privilege Escalation
• Confidence: 93% confidence

Finding

The list-keys .env --with-values example explicitly instructs displaying environment variable values, which may include secrets such as API keys and passwords. This turns a benign inspection feature into a concrete secret-exposure risk via console output, logs, screenshots, or agent responses.

Content

Scanner excerpt · SKILL.md (reported line 52)May include surrounding context.

bash

python3 scripts/env_toolkit.py list-keys .env
python3 scripts/env_toolkit.py list-keys .env --with-values

Check Missing

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 3)May include surrounding context.

md

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 17)May include surrounding context.

md

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.

md

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

md

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 51)May include surrounding context.

md

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 60)May include surrounding context.

md

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · SKILL.md (reported line 61)May include surrounding context.

md

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 2)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 15)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 45)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 77)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 125)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 163)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 189)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 199)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 234)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 239)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 240)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Credential Access

High

• Category: Privilege Escalation
• Confidence: 60% confidence

Finding

Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Content

Scanner excerpt · scripts/env_toolkit.py (reported line 243)May include surrounding context.

python

#!/usr/bin/env python3
"""Toolkit for .env file management.

Commands: validate, diff, template, merge, list-keys, check-missing.
"""

Static analysis

No suspicious patterns detected.