ENV Inspector

Reads .env files and emits a redacted view: keys are always shown, values are shown only when they look unambiguously safe. Anything ambiguous is replaced with <redacted>.

Usage

bash .agents/skills/env-inspector/scripts/env-safe-read.sh /path/to/.env

Inspect every .env* in a project (excluding examples):

for f in $(find . -maxdepth 3 -name '.env*' -not -name '.env.example' -not -path '*/node_modules/*'); do
  echo "--- $f ---"
  bash .agents/skills/env-inspector/scripts/env-safe-read.sh "$f"
  echo ""
done