How does this skill help with Vercel and Convex parity?

It provides standardized workflows to ensure shared secrets, such as webhook tokens, are identical across both platforms to prevent authentication mismatches.

What causes the 'Invalid character in header' error in environment variables?

This is typically caused by trailing whitespaces or newline characters (\n) accidentally added during a copy-paste or when using 'echo' to set variables via CLI.

Why should I use printf instead of echo for setting environment variables?

Standard 'echo' commands often append a hidden newline character at the end of the string, which can corrupt sensitive tokens and cause silent failures.

Can it validate Stripe and Clerk API keys?

Yes, the skill includes specific regex patterns for Stripe (sk_live, whsec) and Clerk to verify that variables match the expected service format.

Environment Variable Hygiene

Name: Environment Variable Hygiene
Author: phrazzld

byphrazzld

•

デプロイメントとDevOps

Maintains clean, secure, and consistent environment variable configurations across Vercel, Convex, and other deployment platforms.

概要

Environment Variable Hygiene provides best practices and automated checks to prevent common deployment failures caused by malformed secrets and configuration drift. It helps developers eliminate cryptic errors like 'Invalid character in header' by identifying trailing whitespaces, ensures cross-platform parity between frontend and backend environments, and validates API key formats for services like Stripe and Clerk. This skill is essential for maintaining robust production environments and avoiding silent failures in webhook signatures or authentication flows during deployment.

主な機能

2 GitHub stars
Detects and prevents trailing whitespaces and hidden newline characters in secrets
Ensures cross-platform secret parity between Vercel and Convex environments
Differentiates between development and production environment stores to prevent configuration leaks
Validates API key formats for Stripe, Clerk, and other services using regex patterns
Provides safe CLI commands using printf to avoid shell-injected characters

ユースケース

Debugging 'Invalid character in header' or ERR_INVALID_CHAR errors during production deploys
Synchronizing webhook secrets and API tokens between separate frontend and backend platforms
Auditing production environment variables for formatting errors before a major release

概要

主な機能

2 GitHub stars
Detects and prevents trailing whitespaces and hidden newline characters in secrets
Ensures cross-platform secret parity between Vercel and Convex environments
Differentiates between development and production environment stores to prevent configuration leaks
Validates API key formats for Stripe, Clerk, and other services using regex patterns
Provides safe CLI commands using printf to avoid shell-injected characters

ユースケース

Debugging 'Invalid character in header' or ERR_INVALID_CHAR errors during production deploys
Synchronizing webhook secrets and API tokens between separate frontend and backend platforms
Auditing production environment variables for formatting errors before a major release