← Back to Skills Marketplace
env-config-validator
by
charlie-morrison
· GitHub ↗
· v1.0.0
· MIT-0
108
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install env-config-validator
Description
Validate .env files against schemas, compare environments (dev vs prod), detect common mistakes (trailing spaces, placeholders, invalid ports, missing protoc...
README (SKILL.md)
Env Config Validator
Validate .env files, compare environments, detect common mistakes, and enforce schemas.
Quick Start
# Validate with auto-detected common checks
python3 scripts/validate_env.py .env
# Validate against a schema
python3 scripts/validate_env.py .env --schema env-schema.json
# Compare dev vs prod
python3 scripts/validate_env.py --diff .env.development .env.production
# Generate schema from existing .env
python3 scripts/validate_env.py --generate-schema .env -o env-schema.json
# JSON output for CI
python3 scripts/validate_env.py .env --output json --severity error
Common Checks (Auto-Detected)
The validator automatically detects these issues without a schema:
| Check | Severity | What it catches |
|---|---|---|
| Trailing whitespace | warning | Invisible chars causing bugs |
| Unquoted spaces | warning | Values with spaces not wrapped in quotes |
| Placeholders | error | change_me, TODO, xxx, your_* values |
| Empty values | info | Defined but blank variables |
| Double-nested quotes | warning | ""value"" quoting errors |
| URL missing protocol | warning | URL vars without http(s):// |
| Port out of range | error | Port > 65535 or \x3C 1 |
| Short secrets | warning | SECRET/PASSWORD/KEY \x3C 8 chars |
| Inconsistent booleans | info | yes/1 instead of true/false |
| Mixed case keys | info | some_Var instead of SOME_VAR |
| Inline comments | warning | value # comment (not all parsers support) |
| Duplicate keys | warning | Same variable defined twice |
Options
| Flag | Default | Description |
|---|---|---|
--schema |
— | JSON schema file for type/required validation |
--diff FILE FILE |
— | Compare two env files |
--generate-schema |
— | Auto-generate schema from .env file |
--output |
text | Output format: text, json, markdown |
-o |
stdout | Output file path |
--ignore |
— | Skip specific check IDs (repeatable) |
--severity |
info | Minimum severity: error, warning, info |
Exit Codes
0— No issues (or only info)1— Warnings found (or diff has differences)2— Errors found
Workflow
Pre-deploy Validation
- Generate schema from working .env:
--generate-schema .env -o schema.json - Add schema to repo, validate in CI:
validate_env.py .env --schema schema.json --severity error - Diff staging vs prod:
--diff .env.staging .env.production
Audit Existing Project
- Run
validate_env.py .envto find common mistakes - Fix errors and warnings
- Generate schema for future validation
References
- schema-format.md — Full JSON schema specification, supported types, field reference
Usage Guidance
This package appears coherent and implements a local .env validator in a single Python script. Before installing or running: (1) ensure you have Python 3 on the machine (SKILL.md assumes 'python3' but the registry metadata didn't list it), (2) review the script if you will run it on sensitive repositories (it reads and can write schema files), (3) test on non-production .env files first, and (4) if you use the diff or schema generation in CI, confirm the tool's secret-masking behavior meets your privacy requirements (Status.md says it masks secrets, review the diff output). No network or secret-exfiltration mechanisms were found in the provided files.
Capability Analysis
Type: OpenClaw Skill
Name: env-config-validator
Version: 1.0.0
The skill bundle provides a legitimate utility for validating, comparing, and generating schemas for .env configuration files. The core logic in scripts/validate_env.py uses Python standard libraries to perform regex-based checks for common mistakes (e.g., trailing spaces, placeholders) and enforces type/pattern constraints. It includes security-positive features such as masking secrets in diff outputs and lacks any network access, obfuscation, or arbitrary code execution capabilities.
Capability Assessment
Purpose & Capability
Name/description align with the provided files and code. The Python script implements parsing, common-mistake checks, schema generation, schema validation, and diffing as advertised. No unrelated services or credentials are requested.
Instruction Scope
SKILL.md instructs the agent to run the included Python script against .env files and to use flags for schema/diff/output. The runtime instructions reference only the files the tool is meant to inspect. There are no instructions to read arbitrary system files, call external endpoints, or exfiltrate data.
Install Mechanism
There is no install spec (instruction-only from the registry's perspective) and the code is pure Python stdlib, which is low risk. Minor inconsistency: the SKILL.md examples use 'python3' but the registry metadata lists no required binaries. The skill therefore implicitly requires a Python 3 runtime to be present; otherwise no additional installation is performed.
Credentials
The skill declares no required environment variables or credentials and the code reads only the .env files provided as input. It does not access system environment variables, cloud credentials, or external config paths.
Persistence & Privilege
always is false and the skill has no install hooks or claims to modify other skills or global agent settings. It writes output files only when explicitly asked (e.g., schema generation -o) and otherwise runs locally.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install env-config-validator - After installation, invoke the skill by name or use
/env-config-validator - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is env-config-validator?
Validate .env files against schemas, compare environments (dev vs prod), detect common mistakes (trailing spaces, placeholders, invalid ports, missing protoc... It is an AI Agent Skill for Claude Code / OpenClaw, with 108 downloads so far.
How do I install env-config-validator?
Run "/install env-config-validator" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is env-config-validator free?
Yes, env-config-validator is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does env-config-validator support?
env-config-validator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created env-config-validator?
It is built and maintained by charlie-morrison (@charlie-morrison); the current version is v1.0.0.
More Skills