mcpbeat

Config Secrets Environments

majiayu000/config-secrets-environments

Design, audit, and verify configuration, environment separation, secrets, BYOK flows, key rotation, config schema validation, and drift checks across local, dev, staging, and production. Use when adding env vars, changing runtime config, handling API keys or user-provided keys, diagnosing config drift, or preparing deploy/release configuration.

539 tokens
context cost
the whole folder, loaded on every use
2
files
instructions only
0
copies elsewhere
how many repositories repackaged it
242
stars on the repo
on the repository, not the skill itself

Install

one command, takes just this skill from the repository 
npx skills add https://github.com/majiayu000/spellbook --skill config-secrets-environments

The instruction itself

6 sections, as written by the author

Config Secrets Environments

Purpose

Use this skill when behavior depends on configuration or secrets. The goal is explicit config ownership, validation, and environment parity without exposing credentials.

Inventory

Collect:

  • Config files and env var declarations.
  • Runtime readers and startup wiring.
  • Secret sources: env, secret manager, local keychain, BYOK storage.
  • Environment matrix: local, test, dev, staging, prod.
  • Rotation, revocation, and audit requirements.
  • Existing .env.example, schema, docs, and CI checks.

Never print real secrets. Redact values and report only names, source type, and wiring status.

Design Rules

  • Define a schema for required and optional config.
  • Fail closed for missing critical config; do not silently fall back to insecure or broad behavior.
  • Keep defaults safe for local development and explicit for production.
  • Separate build-time and runtime config.
  • Keep tenant/user-provided keys isolated from platform keys.
  • Document rotation and revocation paths.
  • Verify config is wired into startup, not only declared.

Environment Matrix

Use this shape:

| Key | Local | Test | Staging | Prod | Secret? | Owner | Rotation |

|---|---|---|---|---|---|---|---|

Mark unknown values as unknown. Do not infer a production value from local files.

Output Shape

config_inventory:
environment_matrix:
secret_flows:
validation_and_startup_wiring:
drift_checks:
rotation_plan:
failure_behavior:
verification_commands:

How to use it

Copy the folder

Take majiayu000/config-secrets-environments from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.