Skip to content
cogs
Menu

Skill

config-lint

Find Quote-wrapped secrets in an app’s local .env chain before they are pasted into a deploy provider.

A value copied out of a shell-quoted .env file into an env-var box keeps its quotes, because the target has no shell to strip them. The secret is then wrong and auth fails, usually as a downstream 401. The provenance abstract records this bug shipping at least three times.

The Skill covers the config-lint CLI in @cogs/config: how it resolves the Env chain (.env, .env.local, .env.$ENV, .env.$ENV.local), why it lints raw values before parsing, and its exit codes. It only reads local files and never makes a network call.

Its Sibling skill is env-doctor, which checks the same bug on a live Render service.

This Skill on the docs site →