Environment Contract Drift Fixer
Fix environment variable contract drift in a repo using Cursor.
Secure checkout via Stripe
Works with the AI tools you already use
See it in action
You say
Audit my repo for env var drift. I renamed STRIPE_SECRET to STRIPE_SECRET_KEY but I think the Docker config and README are still using the old name. Fix the docs and add a check.
Your agent does
1. Environment Contract Decision
Decision: ENV CONTRACT DRIFT FOUND
Found legacy STRIPE_SECRET in docker-compose.yml and README.md, while src/config.ts expects STRIPE_SECRET_KEY.
4. Drift Findings
| Area | Finding | Risk |
| --- | --- | --- |
| Stripe | STRIPE_SECRET vs STRIPE_SECRET_KEY | Runtime failure in Docker |
| Docs | README mismatch | Onboarding confusion |
6. Safe Patch Summary
- Updated
docker-compose.ymlplaceholders. - Aligned
README.mdsetup instructions. - Created
scripts/check-env-drift.mjsfor CI.
What you get
About this skill
The problem
Environment variables often drift between local development, Docker configs, CI workflows, and deployment documentation. This causes "works on my machine" failures, broken handoffs, and production outages when renamed or missing variables go unnoticed.
What it does
- Audits the entire repository to map environment variable usage across code, config loaders, schemas, and documentation.
- Identifies missing, unused, renamed, legacy, or ambiguous variables.
- Proposes a canonical environment contract to resolve naming conflicts.
- Generates safe patches for
.env.example, READMEs, and Docker files using only placeholders. - Adds guardrails like startup validation and CI drift checks to prevent future inconsistencies.
Frameworks & tools
Works with any stack including Node.js, Express, Prisma, Next.js, Docker, GitHub Actions, and platforms like Vercel or Render.
Why this beats prompting it yourself
Manual auditing is error-prone and often misses variables hidden in CI YAMLs or deployment notes. This skill enforces a structured workflow that creates a source register, ensuring no variable is overlooked while strictly protecting you from accidental secret exposure in logs or docs.
Use cases
- Standardize environment variable names before a major client handoff.
- Fix deployment failures caused by inconsistent naming between code and hosting providers.
- Clean up legacy variables after a refactor or platform migration.
- Add automated checks to ensure
.env.examplenever falls out of sync with the code.
Known limitations
Cannot access live hosting dashboards, cloud secret stores, or production logs. It does not handle real secret rotation or validate the values of secrets themselves.
How to install
Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean today
- 30-day refund guarantee
- One-time purchase, yours forever
- Secure checkout via Stripe
Creator
109 skills on Agensi
Frequently Asked Questions
Popular in Workflow Automation

Enterprise Automation Engineering Architect
Designs and upgrades business automation systems into modular, reliable, observable, secure, low-maintenance, enterprise-grade workflows.
it support desk
Diagnose and resolve 1st/2nd line IT issues with structured triage, health scripts, and escalation workflows.
Agent-safe database access kit: harden Postgres before you let an AI tool near it
Builders wiring LLM agents to their DB keep discovering the hard way that a chatty tool call can drop rows, exfiltrate P

skill miner
Analyzes your agent conversation history to find and automate your most frequent recurring tasks.