FrancoStino/varlock-claude-skill
bundled-skills/varlock-claude-skill/SKILL.md
Secure environment variable management ensuring secrets are never exposed in Claude sessions, terminals, logs, or git commits
$ install --global
skillsauthnpx skillsauth add FrancoStino/opencode-skills-antigravity varlock-claude-skillInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 28, 2026, 3:13 AM141.5s1 file scanned
SKILL.md
- name:
- varlock-claude-skill
- description:
- Secure environment variable management ensuring secrets are never exposed in Claude sessions, terminals, logs, or git commits
- risk:
- safe
- source:
- https://github.com/wrsmith108/varlock-claude-skill
- date_added:
- 2026-02-27
Varlock Claude Skill
Overview
Secure environment variable management ensuring secrets are never exposed in Claude sessions, terminals, logs, or git commits
When to Use This Skill
Use this skill when you need to work with secure environment variable management ensuring secrets are never exposed in claude sessions, terminals, logs, or git commits.
Instructions
This skill provides guidance and patterns for secure environment variable management ensuring secrets are never exposed in claude sessions, terminals, logs, or git commits.
For more information, see the source repository.
Limitations
- Use this skill only when the task clearly matches the scope described above.
- Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
- Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
Related Skills
FrancoStino/papers-skill
research
VerifiedTrustedCommunity
Skill for academic research workflows: search Semantic Scholar (200M+ papers), inspect citations, download arXiv PDFs, and extract PDF text. Bundles a self-contained Python CLI.
36SKILL.mdUpdated Jun 13, 2026
FrancoStino/not-a-vibe-coder
development
VerifiedTrustedCommunity
Turns vague prompts into 8 structured planning files for brand new projects. DO NOT use on existing codebases.
36SKILL.mdUpdated Jun 13, 2026
FrancoStino/fsi-compliance-checker
development
VerifiedTrustedCommunity
Maps code, architecture, and infrastructure changes to specific control IDs in PCI-DSS v4.0 and MAS TRM (Singapore financial regulator), producing an audit-traceable findings report with per-control remediation.
36SKILL.mdUpdated Jun 13, 2026
FrancoStino/atlas-ledger
testing
VerifiedTrustedCommunity
Companion to atlas-contract. Auto-invoked by its Final Audit on caught drift; also use after Post Reviews or user requests to record a mistake. Distills drift into WHEN/DON'T/INSTEAD clauses, writes to Atlas.md after confirmation.
36SKILL.mdUpdated Jun 13, 2026