- name
- env-alias-audit
- description
- Audit .env alias groups for missing required config, conflicting values, and canonical-key drift before deploy.
- version
- 1.0.0
- metadata
- {"openclaw":{"requires":{"bins":["bash","python3"]}}}
Env Alias Audit
Use this skill to catch environment-variable alias drift before runtime failures.
What this skill does
- Parses env vars from
.env-style files - Evaluates canonical key + alias groups (built-in defaults or custom spec)
- Flags missing required groups
- Detects conflicting values across aliases in the same group
- Reports alias-only usage where canonical keys are absent
Inputs
Optional:
ENV_FILE(default:.env)ALIAS_SPEC_FILE(default: built-in alias groups)REQUIRED_GROUPS(comma-separated canonical keys that must resolve)AUDIT_MODE(reportorstrict, default:strict)
Run
Use built-in alias groups:
ENV_FILE=.env \
REQUIRED_GROUPS=DATABASE_URL,STRIPE_API_KEY \
bash skills/env-alias-audit/scripts/audit-env-aliases.shUse custom alias spec:
ENV_FILE=.env.production \
ALIAS_SPEC_FILE=skills/env-alias-audit/fixtures/alias-spec.sample \
AUDIT_MODE=report \
bash skills/env-alias-audit/scripts/audit-env-aliases.shRun against fixtures:
ENV_FILE=skills/env-alias-audit/fixtures/.env.conflict \
REQUIRED_GROUPS=DATABASE_URL,STRIPE_API_KEY \
bash skills/env-alias-audit/scripts/audit-env-aliases.shAlias spec format
ALIAS_SPEC_FILE accepts one group per line:
CANONICAL_KEY=ALIAS_ONE,ALIAS_TWO- Comments and blank lines are ignored
- Canonical key is always part of the checked group
Output contract
- Exit
0when no strict failures are found - Exit
1on invalid input, missing required groups (strict), or conflicting alias values - Prints per-group status (
OK,WARN,FAIL) plus a summary