CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

env-vars

Vercel environment variable expert guidance. Use when working with .env files, vercel env commands, Secret or Config variable types, OIDC tokens, or managing environment-specific configuration.

62

Quality

78%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/env-vars/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly actionable reference: nearly everything is copy-paste executable with real flags, sensible gotchas, and a validated bootstrap workflow. Its main inefficiencies are mild redundancy between the Best Practices, Critical Rules, and Gotchas sections, and its full length living inline where an OIDC/CLI reference file could lighten the main file.

Suggestions

Deduplicate the 'Best Practices' list against 'Critical Rules' and 'Gotchas' (NEXT_PUBLIC_ secret warnings and the .env.development.local advice each appear twice) to tighten the token budget.

Add a one-line caution or verification step to the 'vercel env rm' section since it removes values across environments without any stated safeguard.

DimensionReasoningScore

Conciseness

The body is dense and command-first — nearly every section is a table, flag-annotated code block, or terse rule rather than explanation of concepts Claude already knows. Minor trimmable instances: the 'Best Practices' list re-states rules from 'Critical Rules' and the Gotchas section (e.g. NEXT_PUBLIC_ secret warnings and .env.development.local advice appear twice), and the 'You are an expert...' opener adds little.

4 / 5

Actionability

Guidance is fully executable throughout: copy-paste bash with real flags (--type secret, --git-branch=staging, --environment=production), a runnable bootstrap sequence including a shell loop that verifies required keys against .env.example, a symptom/cause/fix troubleshooting table, and an executable TypeScript OIDC example. The common cases are covered specifically.

5 / 5

Workflow Clarity

The bootstrap flow is a clearly sequenced link → pull → verify workflow with an explicit validation step (the .env.example key check), and the OIDC troubleshooting table provides error-recovery feedback loops. Not a 5 because of minor validation gaps: the destructive 'vercel env rm' commands carry no caution or verification guidance, and version-sensitive notes (CLI 56+, 59.6+) are woven into prose rather than consolidated.

4 / 5

Progressive Disclosure

No bundle files exist, so all content lives inline in a single SKILL.md — but it is well-sectioned (file hierarchy, CLI, bootstrap, OIDC, gotchas) with clear headers and navigable tables, so structure is good for a single-file skill. It stops short of anchor 5 because ~260 lines of OIDC deep-dive and CLI detail could plausibly be split into one-level-deep reference files.

4 / 5

Total

17

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A solid description with an explicit, concrete 'Use when...' trigger clause and a clearly branded Vercel niche. The main weakness is that the 'what' states topics rather than concrete actions, which caps specificity and completeness below the top anchors.

Suggestions

Replace the generic 'expert guidance' framing with 2-3 concrete actions, e.g. 'Add, pull, update, and remove Vercel environment variables with the vercel env CLI; manage Secret and Config types, OIDC token lifecycle, and .env file conventions.'

Add natural synonyms users say, such as 'env vars' and 'secrets', to the trigger clause to round out trigger-term coverage.

DimensionReasoningScore

Specificity

The description names the domain ('Vercel environment variable') and concrete sub-topics ('vercel env commands, Secret or Config variable types, OIDC tokens'), but the stated actions are generic — 'guidance' and 'managing environment-specific configuration' — with no concrete verbs like add, pull, or remove. It sits above anchor 2 because the specific artifacts named give it more shape than a bare domain claim, but below anchor 4 which requires several specific actions.

3 / 5

Completeness

It has an explicit 'Use when...' clause with concrete triggers ('.env files, vercel env commands, Secret or Config variable types, OIDC tokens'), and the what — 'Vercel environment variable expert guidance' — identifies the domain. Not a 5 because the 'what' states scope rather than concrete capabilities, while anchor 5 expects both what and when at full explicitness.

4 / 5

Trigger Term Quality

Natural trigger terms include '.env files', 'environment variables', 'vercel env commands', 'Secret or Config variable types', and 'OIDC tokens' — phrases users would genuinely say, including a file-extension form. It falls short of anchor 5 because common casual synonyms like 'env vars' and plain 'secrets' are absent from the description itself.

4 / 5

Distinctiveness Conflict Risk

'Vercel', 'vercel env commands', and 'OIDC tokens' establish a clear niche with minimal conflict risk, but the broad '.env files' and 'environment-specific configuration' triggers could fire for generic dotenv or Next.js env-file work unrelated to Vercel — minor overlap with closely related skills, matching anchor 4.

4 / 5

Total

15

/

20

Passed

Validation

75%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 12 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

referenced_paths_exist

Referenced path issues: 2 missing

Warning

Total

12

/

16

Passed

Repository

vercel/vercel-plugin

Path

skills/env-vars/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.