Env Alias Audit
Use this skill to catch environment-variable alias drift before runtime failures.
What this skill does
- - Parses env vars from
.env-style files - Evaluates canonical key + alias groups (built-in defaults or custom spec)
- Flags missing required groups
- Detects conflicting values across aliases in the same group
- Reports alias-only usage where canonical keys are absent
Inputs
Optional:
- -
ENV_FILE (default: .env) - INLINECODE3 (default: built-in alias groups)
- INLINECODE4 (comma-separated canonical keys that must resolve)
- INLINECODE5 (
report or strict, default: strict)
Run
Use built-in alias groups:
CODEBLOCK0
Use custom alias spec:
CODEBLOCK1
Run against fixtures:
CODEBLOCK2
Alias spec format
ALIAS_SPEC_FILE accepts one group per line:
CODEBLOCK3
- - Comments and blank lines are ignored
- Canonical key is always part of the checked group
Output contract
- - Exit
0 when no strict failures are found - Exit
1 on invalid input, missing required groups (strict), or conflicting alias values - Prints per-group status (
OK, WARN, FAIL) plus a summary
技能名称: env-alias-audit
详细描述:
环境变量别名审计
使用此技能可在运行时故障发生前捕获环境变量别名漂移。
技能功能
- - 从 .env 格式文件中解析环境变量
- 评估规范键 + 别名组(内置默认值或自定义规范)
- 标记缺失的必需组
- 检测同一组内别名间的冲突值
- 报告缺少规范键时仅使用别名的情况
输入参数
可选参数:
- - ENVFILE(默认值:.env)
- ALIASSPECFILE(默认值:内置别名组)
- REQUIREDGROUPS(必须解析的规范键,以逗号分隔)
- AUDIT_MODE(report 或 strict,默认值:strict)
运行方式
使用内置别名组:
bash
ENV_FILE=.env \
REQUIREDGROUPS=DATABASEURL,STRIPEAPIKEY \
bash skills/env-alias-audit/scripts/audit-env-aliases.sh
使用自定义别名规范:
bash
ENV_FILE=.env.production \
ALIASSPECFILE=skills/env-alias-audit/fixtures/alias-spec.sample \
AUDIT_MODE=report \
bash skills/env-alias-audit/scripts/audit-env-aliases.sh
针对测试文件运行:
bash
ENV_FILE=skills/env-alias-audit/fixtures/.env.conflict \
REQUIREDGROUPS=DATABASEURL,STRIPEAPIKEY \
bash skills/env-alias-audit/scripts/audit-env-aliases.sh
别名规范格式
ALIAS
SPECFILE 每行接受一个组:
text
CANONICALKEY=ALIASONE,ALIAS_TWO
输出约定
- - 未发现严格故障时退出码为 0
- 输入无效、缺少必需组(严格模式)或别名值冲突时退出码为 1
- 打印每个组的状态(OK、WARN、FAIL)及摘要信息