env

A Claude Code mod in davekiss/env

Edit .env files in a pane inside Claude Code. Claude manages keys and asks you for values without ever seeing them.

review UI rewrite

env reaches L2 (writes or runs) by its classified calls and passed claude plugin validate on Claude Code 2.1.302.

Events hooked: 7
API methods referenced: 18
Access from classified calls: L2, writes or runs: runs processes, writes files, drives Claude, reads files, reads env vars, draws
Unclassified calls: 2 ($.state.get, $.state.set), full access unknown
Static scan, not a runtime test

To install it, open the repository and follow the author’s setup instructions. Mods need Claude Code 2.1.287 or later.

Access

L2 Writes or runsother: $.state.get, other: $.state.set, runs processes, writes files, drives Claude, reads files, reads env vars, draws

Validation

Passed on Claude Code 2.1.302

View the source on GitHub Back to the list

What the scan recorded

Observed events: every tool call, mcp__env__list calls, mcp__env__request calls, mcp__env__generate calls, mcp__env__copy calls, mcp__env__remove calls, mcp__env__push calls, mcp__env__pull calls
Hooks: session.start, command.run {command=env}, ui.close, tool.call, session.append, session.send, tool.call {tool=mcp__env__list}, tool.call {tool=mcp__env__request}, tool.call {tool=mcp__env__generate}, tool.call {tool=mcp__env__copy}, tool.call {tool=mcp__env__remove}, tool.call {tool=mcp__env__push}, tool.call {tool=mcp__env__pull}, ui.render {component=AbovePrompt}, ui.render {component=Pane, requestId=env}
API calls: $.clock.every, $.command.register, $.env.get, $.fs.exists, $.fs.list, $.fs.read, $.fs.write, $.process.run, $.prompt.submit, $.state.get, $.state.set, $.tool.register, $.ui.ask, $.ui.copy, $.ui.open, $.ui.panes, $.ui.resolve, $.ui.toast
Validation on 2.1.302: Passed
Scanned revision: 95218d5eed98
UI rewrite review: UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. hooks/dotenv.ts:47

These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.

Badge for your README

Authors can show the latest scan result in their README. Each badge links to this page.

[![reach](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/davekiss--env--env-reach.svg)](https://mods.aidojo.si/mods/davekiss--env--env/)
[![validates](https://raw.githubusercontent.com/karanb192/awesome-claude-code-mods/main/badges/davekiss--env--env-validates.svg)](https://mods.aidojo.si/mods/davekiss--env--env/)