A diagnostic utility for identifying security risks, syntax errors, and missing variables in environment configuration files.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install env-doctor
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install env-doctor using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Env Doctor?
Env Doctor is a technical auditing tool designed to maintain the integrity and security of your project's environment variables. By leveraging Openclaw Skills, this tool scans your local environment files to detect critical vulnerabilities, such as secrets being exposed to version control, and common syntax errors that lead to application crashes. It bridges the gap between local development and team-wide configuration standards by ensuring your files remain clean, consistent, and safe.
This skill acts as a proactive debugger for your configuration layer. It goes beyond simple text parsing by validating specific data types like port ranges and URLs, while cross-referencing your active environment with template files to ensure no required variables are forgotten during deployment or onboarding.
Env Doctor Use Cases
- Preventing sensitive credentials from being committed to public or private repositories.
- Synchronizing local .env files with .env.example templates to ensure team consistency.
- Debugging application startup failures caused by malformed environment variable syntax.
- Auditing production-grade credentials that have mistakenly leaked into development environments.
How Env Doctor Works
- The skill scans the current directory to parse existing .env and .env.example files.
- It performs a multi-tier issue detection check, categorizing findings into Critical, Warning, and Info severities.
- It executes a validation sequence to check for port ranges, URL protocols, and BOM characters.
- It performs a git safety check to verify the .env file is properly listed in .gitignore and hasn't been previously committed.
- It generates a comprehensive report with specific, actionable fix instructions for every detected issue.
Env Doctor Setup
Env Doctor requires no external API keys or heavy dependencies, making it a lightweight addition to your Openclaw Skills library. To manually check your git protection status, you can use:
grep -q "^\.env$" .gitignore 2>/dev/null && echo "Protected" || echo "NOT in .gitignore!"
Env Doctor Data Schema & Taxonomy
Env Doctor organizes its analysis based on the relationship between configuration files and version control metadata:
| Component | Purpose |
|---|---|
| .env | Primary source for secret analysis and syntax validation. |
| .env.example | Reference template for identifying missing or extraneous keys. |
| git log | Used to verify if sensitive configuration has ever been committed to history. |
| Report Format | A structured summary mapping issues to specific line numbers and fixes. |
Env Doctor Advanced Features
- Secret Masking: Automatically obscures actual sensitive values (e.g., sk-****...abc) during reporting to prevent accidental exposure.
- Interpolation Logic: Validates internal variable references like
${VAR}to ensure dependency chains are intact. - Multi-line Parsing: Accurately handles complex, quoted values that span multiple lines.
- Production Detection: Flags high-entropy strings or specific keywords that suggest production secrets are being used in local development.
SKILL.md
Loading
Related Openclaw Skills
Engagement Helper
A professional AI skill designed to automate follower engagement, manage community interactions, and execute strategic social media growth.
Emergency Response Skill
A professional framework for AI agents to manage complaints, disputes, and urgent escalations using standardized protocols.
Email Marketing Copywriter
A professional AI skill for creating high-converting email sequences, welcome series, sales funnels, and newsletters designed to convert subscribers into customers.
DNS Lookup
A specialized skill for performing deep DNS record queries, propagation checks, and WHOIS lookups using standard CLI utilities.
Failure Analyzer
A sophisticated failure analysis and continuous learning system that converts errors into actionable organizational knowledge.
Fiverr Seller Automation
A comprehensive automation skill for managing the end-to-end lifecycle of a Fiverr seller account, from gig SEO to customer delivery.
METADATA
Featured*
