env-secrets-manager

Manage environment variable and secret lifecycles across development, staging, and production.

Updated Mar 12, 2026
One-click install
npx skills add https://github.com/Fantasia1999/claude-skills-zh --skill env-secrets-manager-fantasia1999
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: env-secrets-manager
Source: https://github.com/Fantasia1999/claude-skills-zh/tree/main/translations/engineering/env-secrets-manager
Command: npx skills add https://github.com/Fantasia1999/claude-skills-zh --skill env-secrets-manager-fantasia1999

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the entire lifecycle of environment variables and secrets, from development to production, ensuring security and consistency across all environments.

Core Features & Use Cases

  • .env Lifecycle Management: Handles creation, validation, and synchronization of .env files.
  • Secret Leak Detection: Scans Git history and working trees for accidental secret exposure.
  • Integration with Secret Managers: Supports HashiCorp Vault, AWS SSM, 1Password CLI, and Doppler.
  • Use Case: Automatically generate a .env.example file from your .env file, removing sensitive values, and then use a pre-commit hook to scan for any accidentally staged secrets before you commit.

Quick Start

Use the env-secrets-manager skill to generate a .env.example file from your .env file.

Frequently Asked Questions about env-secrets-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a .env.example file from my .env file?

To generate a .env.example file from your .env file, the Skill automatically parses your environment variables and strips sensitive values, leaving only the keys for safe sharing and documentation.

How do I detect secret leaks in my Git history?

To detect secret leaks in Git history, the Skill scans your working trees and commit history for accidental secret exposure, preventing sensitive environment variables from being pushed to remote repositories.

Does this environment variables manager work with HashiCorp Vault and AWS SSM?

Yes, this environment variables manager integrates directly with HashiCorp Vault, AWS SSM, 1Password CLI, and Doppler to synchronize secrets across development, staging, and production environments.

What is the best way to manage environment variables across staging and production environments?

The best way to manage environment variables across staging and production is by automating .env file synchronization and validation, ensuring security and consistency throughout the entire lifecycle.

Can I use a pre-commit hook to scan for accidentally staged secrets?

Yes, you can use a pre-commit hook to scan for accidentally staged secrets, blocking commits if sensitive environment variables or configuration leaks are detected in your working tree.

Why do I need to validate .env files during the development lifecycle?

You need to validate .env files during the development lifecycle to ensure environment variables are correctly formatted and synchronized, preventing configuration errors and security vulnerabilities before deployment.