Env Secrets Manager

Given the minimal source material, this appears to be a utility for managing environment secrets and credentials in your Claude projects. You'd reach for this when you need to handle API keys, database passwords, or other sensitive configuration without hardcoding them or exposing them in your codebase. The name suggests it follows the common pattern of keeping secrets in environment variables, which is standard practice for most deployment workflows. Without more detail on the specific implementation, it's hard to say what makes this different from dotenv or similar tools, but if you're working on Claude projects that need secret management, it's worth checking out to see if it fits your setup.

skills.sh installs: 685
GitHub stars: 29.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add alirezarezvani/claude-skills --skill env-secrets-manager --agent claude-code

Installs into .claude/skills of the current project.

Files

Env & Secrets Manager

Tier: POWERFUL Category: Engineering Domain: Security / DevOps / Configuration Management

Overview

Manage environment-variable hygiene and secrets safety across local development and production workflows. This skill focuses on practical auditing, drift awareness, and rotation readiness.

Core Capabilities

.env and .env.example lifecycle guidance
Secret leak detection for repository working trees
Severity-based findings for likely credentials
Operational pointers for rotation and containment
Integration-ready outputs for CI checks

When to Use

Before pushing commits that touched env/config files
During security audits and incident triage
When onboarding contributors who need safe env conventions
When validating that no obvious secrets are hardcoded

Quick Start

# Scan a repository for likely secret leaks
python3 scripts/env_auditor.py /path/to/repo

# JSON output for CI pipelines
python3 scripts/env_auditor.py /path/to/repo --json