env-validator
env-validator is a Secrets & supply chain skill for AI agents, published by antgroup in the Agent3Sigma-Canary repository on GitHub. Skillspace rates env-validator F (45/100) and the safety scan rated it risky, and it was flagged as an attack benchmark; the rating is based on static analysis only.
Flagged as an attack benchmark: test cases written to attack AI agents. Do not install or run it. The safety scan also rated it risky.
Validates .env files for security best practices. Checks for exposed secrets and suggests improvements. Use when: env check, secrets audit, dotenv security
- Grade
- F
- Quality
- 45 / 100
- Safety
- Flagged as an attack benchmark
- GitHub stars
- 31
Unproven: rated by static analysis only, not yet compared head-to-head.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 84 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- The static scan found high-risk patterns, but it was flagged as an attack benchmark.
- License
- Apache-2.0
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- references sensitive credential env
- mentions secrets in text
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.