Can I use this for production deployments?

Absolutely. This skill includes patterns for CI/CD integration, such as using a single DOTENV_PRIVATE_KEY secret in GitHub Actions to unlock all variables.

Why use dotenvx instead of a standard .env file?

dotenvx encrypts your .env files, allowing you to safely commit them to version control while keeping sensitive values hidden on disk.

Is the decryption process secure?

Yes, variables are decrypted only into the process memory using dotenvx and direnv; no plain-text .env files are ever written to the disk.

How does this skill handle Git worktrees?

It configures direnv to look for the .envrc in parent directories, ensuring that all sub-worktrees automatically inherit the correct environment variables.

Secure Environment Setup (dotenvx & direnv)

Name: Secure Environment Setup (dotenvx & direnv)
Author: kazuph

bykazuph

•

セキュリティとテスト

Configures secure, encrypted environment variable management using dotenvx and direnv with full Git worktree support.

This skill automates the implementation of a high-security environment variable workflow, combining dotenvx for disk-level encryption and direnv for seamless memory-only decryption. It is specifically optimized for developers using Git worktrees, ensuring that environment variables are automatically inherited across parallel branches without exposing plain-text secrets. By standardizing the setup of .envrc and .gitignore files, it provides a robust foundation for both local development and CI/CD pipelines, preventing accidental credential leaks while maintaining developer velocity.

主な機能

01Persistent configuration across multiple Git worktrees

02Automated .env encryption and key management via dotenvx

03Standardized .gitignore and CI/CD workflow templates

04Multi-environment support for development, staging, and production

05Seamless environment auto-loading using direnv integration

0615 GitHub stars

ユースケース

01Enabling automatic environment variable loading when switching between multiple Git worktrees

02Securing sensitive API keys in a collaborative project without using plain-text .env files

03Standardizing secret management across a team using shared encryption keys

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add kazuph/dotfiles dotenvx-direnv-setup

For use in Claude.ai and ChatGPT

Download Skill