Render Deploy Diff

Detect config drift between required local env keys and a Render service before deploy; fails when required keys are missing remotely.

This skill appears coherent and implements its stated purpose. Before using it: (1) avoid pointing RENDER_API_BASE_URL at untrusted endpoints — the script will send your RENDER_API_KEY as a Bearer token to that URL; (2) prefer offline testing with RENDER_ENV_VARS_JSON_PATH when possible; (3) limit the privileges of the Render API key you provide (use a token with minimal required scope if possible); and (4) review any local .env.* files you allow the script to parse to make sure they don't contain secrets you don't want read. If you have concerns, run the script in a disposable environment or with a non-production token first.

Type: OpenClaw Skill Name: render-deploy-diff Version: 1.0.0 The skill is a utility for comparing local environment variable keys against those configured on a Render service. It uses the provided RENDER_API_KEY to communicate exclusively with the official Render API (api.render.com) and parses local files (like .env.example) using a strict regex to extract only variable names, not their values, which mitigates data exfiltration risks. No malicious execution, persistence, or obfuscation was found in scripts/render-deploy-diff.sh or SKILL.md.