Env File Toolkit

Manage .env files with validate, diff, template generation, merge, and missing-key checks. Use when working with environment variable files, comparing .env.l...

Security Scan

The skill's code and runtime instructions are consistent with its stated purpose (managing .env files); it uses only local file I/O and stdlib operations and does not request credentials or network access.

Purpose & Capability

Name/description match the included CLI script (scripts/env_toolkit.py). The declared capabilities (validate, diff, template, merge, list-keys, check-missing) are implemented in the code and the SKILL.md commands map directly to the script. Nothing in the manifest asks for unrelated credentials or tools.

Instruction Scope

SKILL.md instructs the agent to run the included Python script against local .env files. The script only reads and writes files specified by the user and prints results; it does not access other system paths, environment variables, or external endpoints. The instructions are narrowly scoped to .env file management.

Install Mechanism

There is no install spec (instruction-only with an included script). The script uses only Python stdlib; nothing is downloaded or extracted. This presents low install risk.

Credentials

The skill declares no required environment variables, no primary credential, and no config paths. The code does not attempt to read process env vars or external credentials. The requested permissions are proportional to the task of reading/writing .env files.

Persistence & Privilege

always is false and the skill does not request persistent or elevated platform privileges. It does not modify other skills or global agent settings; it only reads/writes files the user supplies.

Assessment

This skill appears to do only local .env file management and is internally consistent. Before running it: (1) Inspect the included script (it's small and uses only the Python stdlib). (2) Be mindful that commands like template --keep-values, merge (without -o), and list-keys --with-values can expose secrets to stdout or to the output file — avoid running them on sensitive production files unless you intend to. (3) Run the tool in a safe directory or with explicit input/output paths you control. No network access or credentials are requested by the skill.

Swiss-army knife for .env file management. Validate syntax, diff environments, generate templates, merge files, and check for missing keys.

Commands

Validate

Check .env syntax, find duplicates, empty values, and formatting issues:

python3 scripts/env_toolkit.py validate .env

Diff

Compare two .env files — shows keys only in one file and changed values:

python3 scripts/env_toolkit.py diff .env.local .env.production

Template

Generate a .env.example with smart placeholders (strips secrets, infers types):

python3 scripts/env_toolkit.py template .env
python3 scripts/env_toolkit.py template .env -o .env.example
python3 scripts/env_toolkit.py template .env --keep-values  # keep actual values

Merge

Merge multiple .env files (later files override earlier):

python3 scripts/env_toolkit.py merge .env.defaults .env.local -o .env.merged

List Keys

List all variable names in a .env file:

python3 scripts/env_toolkit.py list-keys .env
python3 scripts/env_toolkit.py list-keys .env --with-values

Check Missing

Verify a target .env has all keys from a template:

python3 scripts/env_toolkit.py check-missing .env.example .env
python3 scripts/env_toolkit.py check-missing .env.example .env --strict

Dependencies

• Python 3.8+ (stdlib only, no pip packages needed)