Env Audit — Security skill for Claude Code
Compares .env against .env.example (or .env.sample, .env.template) and reports missing variables, undocumented extras, and security risks such as hardcoded secrets or weak values.
How to install Env Audit
Installs to ~/.claude/skills/mertjane-awesome-claude-commands-env-audit/SKILL.md
mkdir -p ~/.claude/skills/mertjane-awesome-claude-commands-env-audit && curl -fsSL https://raw.githubusercontent.com/mertjane/awesome-claude-commands/HEAD/commands/env-audit.md -o ~/.claude/skills/mertjane-awesome-claude-commands-env-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Env Audit does
description: Compares .env against .env.example (or .env.sample, .env.template) and reports missing variables, undocumented extras, and security risks such as hardcoded secrets or weak values. argument-hint: [env-file] allowed-tools: [Read, Glob]
Environment Variables Audit
Audit the project's environment variable files and produce a report covering missing variables, undocumented extras, and security risks.
If $ARGUMENTS is provided, use it as the path to the active env file. Other
Alternatives in Security
- Security Ownership Map — Map people-to-file ownership, compute bus factor, and identify risks 14.6k ★
- Compat Audit — On-demand Claude Code compatibility and feature parity report — compares installed version against the breakpo 117 ★
- Audit Patterns — Design patterns audit 63 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
PsyLinks 360 Security
Stop shipping insecure AI-generated code. This free skill teaches Claude & AI IDEs secure coding by default an
Audit Chart
Audit the Helm chart for sync with operator code — values keys, CLI flags, CRD versions, template correctness,
Project Init Skill
A Claude Code skill that runs a 3-round project kickoff interview before writing any code — outputs full archi
Vibe Secure
Security audit for AI-generated code. Catches hardcoded secrets, injection surfaces, auth gaps, and insecure d
Audit Credentials
Find long-lived tokens, hardcoded secrets, and credentials that should be rotated or replaced
Security Sweep
Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan
Related Agents
Opensource Forker
Fork any project for open-sourcing. Copies files, strips secrets and credentials (20+ patterns), replaces inte
Mechanics Auditor
Compares a Mechanics Bible chapter to the actual source implementation and reports PARITY/DIVERGENT/MISSING/UN
01 Prove It
Murderboard role 1 of 11, Claim & data verifier — 'Prove It.' Extract every factual and quantitative claim — n