Skip to main content

direnv

Automates per-project shell configuration with direnv, enhancing environment management for various programming languages.

Install this skill

or
65/100

Security score

The direnv skill was audited on Feb 28, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 33

Template literal with variable interpolation in command context

SourceSKILL.md
33```bash
medium line 107

Template literal with variable interpolation in command context

SourceSKILL.md
107```bash
medium line 166

Template literal with variable interpolation in command context

SourceSKILL.md
166```bash
medium line 221

Template literal with variable interpolation in command context

SourceSKILL.md
221```bash
medium line 248

Template literal with variable interpolation in command context

SourceSKILL.md
248```bash
medium line 305

Template literal with variable interpolation in command context

SourceSKILL.md
305```bash
low line 336

Access to hidden dotfiles in home directory

SourceSKILL.md
336echo 'eval "$(direnv hook bash)"' >> ~/.bashrc
low line 339

Access to hidden dotfiles in home directory

SourceSKILL.md
339echo 'eval "$(direnv hook zsh)"' >> ~/.zshrc
low line 342

Access to hidden dotfiles in home directory

SourceSKILL.md
342echo 'direnv hook fish | source' >> ~/.config/fish/config.fish
low line 77

Access to .env file

SourceSKILL.md
77# Load from .env file
low line 79

Access to .env file

SourceSKILL.md
79dotenv_if_exists .env.local
Scanned on Feb 28, 2026
View Security Dashboard