dotenvUse dotenv to manage environment variables for Node.js projects.
Install via ClawdBot CLI:
clawdbot install openlark/dotenvGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
process.env.OPENAICalls external URL not in known-safe list
https://dotenvx.sh/Audited May 20, 2026 · audit v1.0
Generated Jul 20, 2026
Use dotenv to manage environment-specific configurations for a SaaS app, such as database URLs, API keys, and feature flags. This ensures sensitive data is kept out of code and simplifies deployment across development, staging, and production environments.
Open source projects can provide a .env.example file with dummy values to guide contributors. Contributors copy this to .env and fill in their own credentials, making setup seamless while keeping secrets secure.
In CI/CD pipelines, use dotenv with encrypted .env files (dotenvx) to securely pass environment variables like deployment tokens and database credentials. This avoids hardcoding secrets in pipeline scripts.
Each microservice in a distributed system can have its own .env file with service-specific configuration. dotenv loads the correct variables per service, ensuring isolation and simplifying local development.
SaaS products can offer tiered subscription plans where dotenv loads different configurations (e.g., API rate limits, feature flags) based on the user’s plan, stored in environment variables.
An open source product uses dotenv for basic configuration, while enterprise customers get additional features like dotenvx encryption. Revenue comes from enterprise licenses and support.
A PaaS offering can leverage dotenv to let customers inject environment variables into their deployed applications. The platform manages .env files and provides encryption as a premium feature.
💬 Integration Tip
Place `require('dotenv').config()` as the first line of your application entry point to ensure all environment variables are loaded before any other module executes.
Scored May 28, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.