How does this skill prevent secret leaks?

It provides scripts and pre-commit hooks that use regex patterns to scan staged changes and git history for common credential formats like AWS keys, Stripe tokens, and private keys.

Does it support different environments like staging and production?

Yes, it defines a canonical layout for .env files across local, staging, and production environments with specific validation rules for each tier.

Can I use this with existing secret managers?

Yes, it includes integration patterns and workflows for HashiCorp Vault, AWS SSM, 1Password CLI, and Doppler.

Is the .env.example generation automated?

Yes, it includes a Python-powered shell script that automatically strips sensitive values from your local .env while preserving keys, comments, and safe defaults for the team.

Environment & Secrets Manager

Name: Environment & Secrets Manager
Author: oabdelmaksoud

byoabdelmaksoud

0•

Security & Testing

Manages environment variable lifecycles and implements robust secret leak detection to secure development and deployment workflows.

This skill provides a comprehensive framework for managing environment variables and sensitive credentials across the entire software development lifecycle. It automates the creation of .env.example files, validates required variables at startup to prevent runtime failures, and integrates proactive secret scanning into git hooks to block accidental credential leaks. With built-in playbooks for credential rotation and support for major secret managers like HashiCorp Vault and AWS SSM, it ensures that your application configuration remains secure, consistent, and audit-ready from local development to production.

Key Features

01Automated .env.example generation and synchronization

02Fail-fast environment variable validation scripts for CI/CD and startup

03Multi-layer secret leak detection for git history and working trees

04Pre-commit hook installation for automated security gatekeeping

05Standardized credential rotation workflows and post-incident playbooks

060 GitHub stars

Use Cases

01Scaffolding secure environment configurations and validation for new projects

02Preventing accidental commits of API keys, tokens, or database credentials

03Auditing legacy git history for leaked secrets and performing remediation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/superclaw env-secrets-manager

For use in Claude.ai and ChatGPT

Key Features

01Automated .env.example generation and synchronization

02Fail-fast environment variable validation scripts for CI/CD and startup

03Multi-layer secret leak detection for git history and working trees

04Pre-commit hook installation for automated security gatekeeping

05Standardized credential rotation workflows and post-incident playbooks

060 GitHub stars

Use Cases

01Scaffolding secure environment configurations and validation for new projects

02Preventing accidental commits of API keys, tokens, or database credentials

03Auditing legacy git history for leaked secrets and performing remediation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/superclaw env-secrets-manager

For use in Claude.ai and ChatGPT