env-debug

DeliverableNameHere

1|Updated Nov 25, 2025

Search Tags:#environment #secrets #direnv #1password #op-run #env-debug #source_up

Ready to run

npx skills add https://github.com/89jobrien/dotfiles --skill env-debug-89jobrien

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: env-debug
Source: https://github.com/89jobrien/dotfiles/tree/main/dot-claude/skills/env-debug
Command: npx skills add https://github.com/89jobrien/dotfiles --skill env-debug-89jobrien

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematic diagnosis of the secrets environment chain: direnv → source_up → 1Password → op run.

Core Features & Use Cases

Trace and verify the full environment secret intake pipeline from direnv to op run, identifying where secrets fail to load or get overridden.
Provide concrete steps to restore proper secret propagation, including direnv allowances, source_up tracing, and op connectivity checks.
Quick guidance for Claude context to reliably resolve op:// URIs and secrets.

Quick Start

Run the diagnostic steps to verify direnv, trace the source_up chain, and test op connectivity to ensure secrets load in Claude.

Frequently Asked Questions about env-debug

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

Why are environment secrets not loading in Claude when using direnv and 1Password?▼

The diagnostic traces the full environment secret intake pipeline from direnv to op run, identifying exactly where secrets fail to load or get overridden. It then provides concrete remediation steps, including direnv allowances and source_up tracing, to restore proper secret propagation.

How do I fix op run cannot resolve op:// URIs?▼

To fix op run URI resolution failures, the diagnostic verifies 1Password connectivity and tests reading secrets with op read. It then provides guided remediation steps to ensure op run can reliably resolve op:// URIs within your environment.

How do I trace the direnv source_up chain to find blocked environment variables?▼

Tracing the source_up chain requires inspecting direnv status and following variable propagation through nested environments. The diagnostic identifies missing direnv allowances or overridden variables blocking secrets from loading.

Does this diagnostic require 1Password and direnv to already be installed?▼

Yes, diagnosing the environment secret chain requires direnv and 1Password CLI installed to inspect their status and trace interactions. The diagnostic verifies existing configurations and connectivity rather than performing initial installations.

What is the best way to diagnose a broken direnv and 1Password secret pipeline?▼

The best way to diagnose a broken secret pipeline is systematically checking each stage: inspect direnv status, trace the source_up chain, verify op connectivity, and test op read. This isolates the exact failure point across the full intake pipeline.