domains / families / security / varlock

varlock

authentic

Secure-by-default environment variable management for Claude Code sessions.

When to use

• You need to work with environment variables or secrets in a Claude Code session without exposing their values.
• The task involves validating, loading, or auditing secrets while keeping them out of logs, diffs, and assistant context.
• You want a secure-by-default workflow built around Varlock instead of direct `.env` inspection.

When not to use

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Skill page

Source