lov-env-management SKILL.md skillA
lov-env-management from lovstudio/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add lovstudio/skills/lov-env-management@v0.2.1Pins v0.2.1 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- lovstudio/skills
- Path
skills/env-management/SKILL.md- Versions recorded
- 4
- Latest version
- v0.2.1, committed Sep 25, 2026
- First version recorded
- Aug 23, 2026
- Size
- 10,368 bytes
- Repository stars
- 72
- License
- MIT
统一管理平台、账号与多组 API Key，维护有效期和启用状态，安全同步到 zsh 或用户会话环境，并提供脱敏 Dashboard；用户说“管理环境变量”“rotate API keys”时使用。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 凭据管家 · Credential Keeper 把散落的开发环境变量收进“平台 → 账号 → Key”账本，明确每个 Key 的生命周期、验证状态和当前投影目标，并在不回显秘密的前提下同步 Shell 或用户图形会话环境。 ## Triggers ### Activate when - 用户说“管理我的环境变量”“同一个平台有多个账号和 API Key”“把这个 Key 轮换到 zsh”或“打开环境变量 Dashboard”。 - User asks to “manage API keys”, “rotate an environment variable”, “switch the active account”, or “audit expiring keys”. - 用户需要维护 Key 的生效时间、过期时间、远端验证结果，或在多个 Key 中选择一个投影到指定变量。 ### Do not activate when - 用户只要给当前单次命令临时传一个环境变量；直接使用当前 Shell 的 invocation-scoped environment。 - 用户要把云端 Secret 写入 Vercel、GitHub Actions、Supabase 或 Kubernetes；使用目标平台的 Secret 管理流程，本 Skill 只可提供经过确认的变量名清单。 - 用户要管理登录密码、信用卡或恢复码；使用密码管理器。1Password 仅作为本 Skill 的可选秘密来源。 - 用户要新增 zsh 快捷命令或函数而不是环境变量；交给 `lov-zsh-alias`。 ## Security Invariants - 绝不把 Key 值写入聊天、Profile、日志、Dashboard、URL、命令参数或版本库。 - 新增 Key 只接受隐藏交互输入或标准输入；CLI 故意不提供 `--value`。 - Registry 只保存脱敏元数据。默认 macOS 使用 Keychain，其他系统使用权限为 `0600` 的本地 vault；也支持 `op://` 引用和已有环境变量引用。 - `~/.zshenv` 只写一个受哨兵标记管理的 `source` 块，实际导出位于权限为 `0600` 的生成文件。 - 同一 target 和变量名只允许一个 binding。切换账号或 Key 是替换 binding，不是复制多份 export。 - Dashboard 只绑定 `127.0.0.1`，不展示秘密，也不提供秘密录入框；所有写操作需要当前进程生成的临时 token 和同源请求。 …
Read the whole file at its exact version.
How to install
mdr add lovstudio/skills/lov-env-management@sha256:756dcd356e58ebf9The line at the top of this page pins the label v0.2.1, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_poaqujt4yiqonhfa)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Aug 23, 2026 and Sep 25, 2026, about one every 11 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v0.2.1 latest | 2026-09-25 | 4b67fd1 | 10,368 B | A | view · diff |
| v0.2.0 | 2026-09-07 | a09848e | 10,368 B | A | view · diff |
| v0.2.0 | 2026-08-23 | 00fafa8 | 10,353 B | A | view · diff |
| v0.1.0 | 2026-08-23 | 7358777 | 9,631 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10368 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
lovstudio/skills · 72 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_poaqujt4yiqonhfa GET https://markdownregistry.com/api/v1/resolve?ref=lovstudio/skills/lov-env-management GET https://markdownregistry.com/api/v1/blob/756dcd356e58ebf956368d63f7698be2b3e46d025b6d0bc5fe56f2bda0c6cfdc
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.