Env Validator

What it does

When your agent uses it

• : validate env file
• Check environment variables
• Missing env vars
• Dotenv validation

Example prompts

• “validate env file”
• “check environment variables”
• “missing env vars”
• “/env-validator”

Requirements

• Docker
• A credential in SECRET_KEY
• A credential in API_KEY

Workflow steps

4 steps, taken from the step headings in SKILL.md.

1. 1Discovery
2. 2Schema Extraction
3. 3Validation
4. 4Report

What it can do on your machine

Read from SKILL.md and the folder at commit 4594fb7. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  No scripts in the folder and no shell commands in SKILL.md (its code samples are markdown).

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names these keys or tokens, usually read from environment variables:

  • SECRET_KEY
  • API_KEY
  • LEGACY_API_KEY

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Env Validator loads about 1.4k tokens when it runs, and up to ~2k if it reads all its reference files. Until then it costs about 78 tokens; SKILL.md has 413 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~78

When it runs · the whole SKILL.md, loaded when a task matches

~1.4k

With references · SKILL.md plus every file in references/, read only if the agent opens them

~2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

• NoteMentions a .env fileSKILL.md:3

  description: 'Validates .env files against code references and manifests for missing vars, type mismatches, insecure def

• NoteMentions a .env fileSKILL.md:14

  ble configurations by cross-referencing `.env` files against

• NoteMentions a .env fileSKILL.md:26

  - A `.env` file (or equivalent) in the project

• NoteMentions a .env fileSKILL.md:35

  1. **Primary file:** Find `.env` in the project root. If absent, check for `.env.local`, `.env.development`, `.env.produ

• NoteMentions a .env fileSKILL.md:58

  Run these checks against the primary `.env` file:

• NoteMentions a .env fileSKILL.md:61

  able referenced in code but absent from `.env`

• NoteMentions a .env fileSKILL.md:62

  mple` without a default but absent from `.env`

• NoteMentions a .env fileSKILL.md:75

  - Variables in `.env` not referenced anywhere in code or manifests

• NoteMentions a .env fileSKILL.md:93

  **File:** `.env`

• NoteMentions a .env fileSKILL.md:112

  l://user:pass@localhost:5432/dbname` to `.env`

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from Mathews-Tom/armory at commit 4594fb7, republished under its MIT licence (© Mathews-Tom). 413 words, ~1,371 tokens.

name

env-validator

description

Validates .env files against code references and manifests for missing vars, type mismatches, insecure defaults, and unused entries. Triggers on: "validate env file", "check environment variables", "missing env vars", "check .env", "dotenv validation". NOT for secret scanning, use repo-sentinel.

metadata.version

1.0.1

metadata.category

operations

metadata.tags

env, configuration, validation, dotenv, deployment

metadata.difficulty

intermediate

metadata.phase

build

# Environment Validation Report

**File:** `.env`
**Schema:** `.env.example` + code references
**Verdict:** PASS | FAIL

## Summary

| Severity | Count |
|----------|-------|
| CRITICAL | N     |
| HIGH     | N     |
| MEDIUM   | N     |
| LOW      | N     |

## CRITICAL

### [ENV-001] Missing required variable: DATABASE_URL

- **Referenced in:** `src/db.py:12`, `docker-compose.yml:8`
- **Expected type:** URL (postgresql://...)
- **Fix:** Add `DATABASE_URL=postgresql://user:pass@localhost:5432/dbname` to `.env`

## HIGH

...

## Unreferenced Variables

| Variable        | In .env | In Code | In Manifests | Status       |
|-----------------|---------|---------|--------------|--------------|
| LEGACY_API_KEY  | Yes     | No      | No           | Unreferenced |

## Recommendations

1. [Highest priority fix]
2. [Second fix]

© Mathews-Tom, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 2 other files (references) in skills/env-validator of Mathews-Tom/armory.

• SKILL.md
• evals/cases.yaml
• references/validation-rules.md

Open the folder on GitHubat commit 4594fb7