Mask environment variables and validate secrets via the Varlock CLI.
npx skills add https://github.com/smith-horn/skillsmith --skill varlock
Please help me install this Agent Skill. Skill: varlock Source: https://github.com/smith-horn/skillsmith/tree/main/.claude/skills/varlock Command: npx skills add https://github.com/smith-horn/skillsmith --skill varlock
Secrets leakage in Claude Code sessions is a critical risk. This Skill provides secure-by-default environment variable management to mask and restrict secrets, preventing exposure in terminals, logs, and the model context.
Install Varlock CLI: curl -sSfL https://varlock.dev/install.sh | sh -s -- --force-no-brew Add to PATH: export PATH="$HOME/.varlock/bin:$PATH" Verify: varlock --version Initialize project: varlock init Or create manually: touch .env.schema
High-intent search queries and answers about installing and using this skill.
Prevent secrets leakage in Claude Code sessions by applying schema-driven masking to mark sensitive environment variables, ensuring their values never appear in terminal outputs, logs, or model context.
The best way to mask environment variables during local development is using a .env.schema file to define sensitive variables, validating their presence and types without ever revealing the secret values in outputs.
Inject environment variables into CI/CD commands without printing secrets by using a safe command execution tool that validates vars against a schema and masks them in logs and reports during deployment pipelines.
Yes, you can validate secret types and presence without exposing values by using schema-driven validation that loads and checks environment variables against a .env.schema, masking all sensitive data in generated reports.
Schema-driven environment variable masking works with automated deployment pipelines by enforcing safe command execution, injecting validated vars into containers and CI/CD workflows without printing secrets to terminal outputs.
Use schema-based secret rotation guidance during development and deployment workflows when secrets must be validated and consumed without exposure, enforcing secure rotation practices to prevent leakage across environments.
nateberkopecMigrates plaintext .env secrets to fnox-backed management using 1Password and mise.
vecearValidate required environment variables in CI workflows using a TypeScript script and YAML templates.
yashvinthanManage secrets in CI/CD pipelines with Vault or AWS Secrets Manager.
nakaj1214Validate environment variables and execute commands without exposing secrets.
