CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

get-env-var

get an env var, fetch a secret, missing env var, missing token/API key, load secrets from Infisical, infisical. Fetch secrets from the team's Infisical workspace into the shell environment so subsequent commands can use them.

74

Quality

93%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

96%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exemplary operational skill: fully executable commands, explicit validation and error-recovery paths (version check, auth check, byte-count existence check, STOP rule), and a lean token budget with no padding. The only structural note is that everything lives inline in one ~91-line file — acceptable here, but it leaves no progressive-disclosure layer.

DimensionReasoningScore

Conciseness

Dense operational prose throughout ("Never echo, print, or otherwise log secret values") with zero concept explanations — every warning carries its operational reason (e.g. why `--output json` beats `--plain` for listing), so every token earns its place; not anchor 4 because nothing identifiable can be trimmed.

5 / 5

Actionability

Every command is copy-paste ready: `export NAME="$(infisical secrets get NAME --plain --silent)"`, the jq name listing, the `wc -c` existence check, and the `gh secret set` forwarding pipe, with placeholders (NAME, <slug>, <path>, <stage>) clearly marked — fully executable, above anchor 4's minor gaps.

5 / 5

Workflow Clarity

Explicit checkpoints and feedback loops are present: "Check `infisical --version`", "Check auth with `infisical user get`; if it fails... run `infisical login`", the `wc -c` byte-count existence check with the "12 is the not-found placeholder" note, and "If a secret does not exist, STOP and tell the user" — matching anchor 5's validation-plus-error-recovery profile.

5 / 5

Progressive Disclosure

Well-organized single-file sections with no bundle files at all (references/, scripts/, assets/ do not exist, and the body references none), so navigation is easy; but at ~91 body lines with repo-specific data (the Known Locations table) inlined, it exceeds the under-50-line simple-skill case that would merit a 5, and nothing is split out.

4 / 5

Total

19

/

20

Passed

Description

86%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: comprehensive trigger-term coverage for its domain, a concrete and specific what-sentence, and minimal conflict risk thanks to the Infisical anchor. The main gap is the absence of an explicit 'Use when...' clause — when-guidance is conveyed only through bare keyword fragments.

DimensionReasoningScore

Specificity

"Fetch secrets from the team's Infisical workspace into the shell environment so subsequent commands can use them" states the action with concrete source, destination, and purpose — more precise than anchor 3's generic 1-2 actions, but it does not enumerate the several supporting flows the body covers (name listing, forwarding to `gh secret set`), so it is not a 5.

4 / 5

Completeness

The 'what' is clear and trigger conditions are stated ("missing env var, missing token/API key"), so this is above anchor 3's weakly-implied when; but the when is delivered as bare keyword fragments rather than an explicit "Use when..." clause, so it falls short of anchor 5's explicit when-with-concrete-trigger-phrasing.

4 / 5

Trigger Term Quality

"get an env var, fetch a secret, missing env var, missing token/API key, load secrets from Infisical, infisical" covers the natural synonyms a user would say (env var, secret, token, API key) plus the tool name itself — comprehensive for this domain with no commonly used phrasing missing, so above anchor 4.

5 / 5

Distinctiveness Conflict Risk

"load secrets from Infisical, infisical" plus the workspace-specific what-sentence carves out a clear niche with distinct triggers; the only generic terms ("missing env var") are immediately scoped to Infisical, keeping conflict risk minimal.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

different-ai/openwork

Path

.opencode/skills/get-env-var/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.