dmno-devdmno-devOfficialยท3 Agent Skills Included

varlock

Manage environment variables and secrets safely with AI agents

Validates and loads environment variables from a single .env.schema file while keeping secret values hidden from AI agents and logs. Scans code for leaked secrets, redacts sensitive output, and pulls credentials securely from 1Password, AWS, Vault, and other providers. Gives agents full config context through the schema so they can edit environment setup without ever touching raw secrets.
npx skills add dmno-dev/varlock --all -g -y
Available:

Gives AI agents working in this monorepo its package layout, Bun-based commands, testing and release rules, and writing conventions so they make changes correctly without human correction.

All Skills in This Repository (3)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install varlock?โ–ผ

Run `npx skills add dmno-dev/varlock --all -g -y` in your terminal to install all skills in this suite globally.

How does varlock keep secrets safe from AI agents?โ–ผ

Agents read only the .env.schema file, which contains variable names, types, and validation rules but no secret values. Commands like varlock load mask sensitive values, and varlock scan catches leaked secrets in code.

Can varlock pull secrets from 1Password or AWS?โ–ผ

Yes. Plugins let your schema reference secrets from 1Password, AWS Secrets Manager, HashiCorp Vault, Azure Key Vault, Doppler, and many other providers, fetched securely at load time.

Does varlock work with Next.js, Vite, and other frameworks?โ–ผ

Yes. Official integrations exist for Next.js, Vite, Astro, Nuxt, SvelteKit, Cloudflare, and Expo, and they automatically load and inject validated env vars during dev and build.

Can I use varlock without writing code?โ–ผ

Yes. Once installed, your AI agent can create and edit the .env.schema, run validation, and wire up plugins based on plain-English requests.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’