Environment Configuration

SkillFiles & storage

Environment configuration and secrets management. Use when setting up .env files, managing secrets, or configuring environments.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the Environment Configuration skill

What this skill tells your AI

The instructions your AI receives, as published by tibsfox/gsd-skill-creator in project-claude/skills/env-setup/SKILL.md and read by ahel’s review.

Non-Negotiable Rules

RuleWhy
NEVER commit .env to gitSecrets persist in history forever
NEVER log secret valuesLogs stored in plain text, forwarded
NEVER hardcode secretsSource code is widely shared
ALWAYS use .env.exampleDocuments vars without exposing values
ALWAYS add .env* to .gitignore FIRSTPrevents accidental commit
ALWAYS validate config at startupFail fast, not hours into production

.gitignore (add before creating .env)

.env
.env.*
!.env.example
*.pem
*.key
credentials.json

Naming Conventions

  • UPPER_SNAKE_CASE: DATABASE_URL, JWT_SECRET
  • Prefix by service: DB_, REDIS_, AWS_
  • Booleans: ENABLE_CACHE=true (not 1/yes)
  • Feature flags: FEATURE_*

Key Patterns

  • No defaults for secrets — force explicit configuration
  • Validate at startup with Zod/Joi/Pydantic, not at first use
  • Unique secrets per environment — one leak shouldn't compromise all
  • Rotate leaked secrets immediately — check git history, audit access logs
  • Process env always wins — CI/CD overrides file-based config

Signals

GitHub stars
69
Forks
9
Last commit
Jul 2026
Advanced
Catalog kind
skill
Gateway key
env-setup-tibsfox
Source
github.com/tibsfox/gsd-skill-creator