env-chain-tracer

Trace direnv source_up chains and report loaded .envrc variables with masked secrets.

1|Updated Nov 25, 2025
One-click install
npx skills add https://github.com/89jobrien/dotfiles --skill env-chain-tracer
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: env-chain-tracer
Source: https://github.com/89jobrien/dotfiles/tree/main/dot-claude/skills/env-chain-tracer
Command: npx skills add https://github.com/89jobrien/dotfiles --skill env-chain-tracer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Trace the full direnv source_up chain for any project directory. Maps which .envrc files are loaded, which op:// references each one injects, and which environment variables end up in scope.

Core Features & Use Cases

  • Trace the direnv chain from project to root to enumerate every .envrc encountered.
  • Identify op:// references and which variables they may inject.
  • Help diagnose missing or misloaded environment variables in complex project hierarchies.

Quick Start

From any project directory, run the tracer to print the full chain of .envrc files and their injections.

Frequently Asked Questions about env-chain-tracer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I trace which .envrc files direnv loads in my project?

To trace which .envrc files direnv loads, this Skill follows the full source_up chain from your project directory to root, enumerating every encountered file and mapping its injected variables.

How can I debug missing environment variables in a complex direnv hierarchy?

Debug missing environment variables by tracing the direnv chain to identify loaded .envrc files, their injections, and where misconfigured variables or op:// references fail to load.

Can I detect op:// references within my direnv source_up chain?

Yes, you can detect op:// references by parsing the direnv source_up chain, identifying 1Password CLI integrations and reporting the specific variables each reference attempts to inject.

Does this tracer expose the secret values of my injected environment variables?

No, the tracer does not expose secret values; it reports loaded environment variables with all secret values masked to ensure sensitive information remains secure during debugging.

Why does direnv fail to load my op:// integration in local development?

direnv may fail to load op:// integrations due to misconfigured references or broken source_up chains; tracing the .envrc hierarchy identifies the exact file where injection fails.