bex-env-vars

bex-env-vars is a skill for Claude Code, Codex from bex-co/bex. It costs 62 tokens per session (1,084 once invoked), scanned A, original, Apache-2.0.

Guidance for setting environment variables, secrets, and shared environment-variable groups on bex. Environment variables are configuration values that an application reads at runtime; secrets are sensitive values such as passwords and tokens.

In plain words
What is it for?
Use it to add or remove variables and secrets, connect values from databases or other services, create shared groups, and investigate configuration wiring problems.
Why use it?
It prevents applications from receiving missing, incorrect, or unintentionally overwritten configuration. It also explains how services and databases can share values safely through Blueprints or the Dashboard.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to add or remove variables and secrets, connect values from databases or other services, create shared groups, and investigate configuration wiring problems.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/bex-co/bex/bex-env-vars
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add bex-co/bex --skill bex-env-vars
Clone the repo
git clone --depth 1 https://github.com/bex-co/bex

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bex-env-vars

README.md
[![agentmods](https://agentmods.dev/badge/skills/bex-co/bex/bex-env-vars/github.svg)](https://agentmods.dev/skills/bex-co/bex/bex-env-vars)
Your own site
<a href="https://agentmods.dev/skills/bex-co/bex/bex-env-vars"><img src="https://agentmods.dev/badge/skills/bex-co/bex/bex-env-vars/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for bex-env-vars

Your own site · 80×15
<a href="https://agentmods.dev/skills/bex-co/bex/bex-env-vars"><img src="https://agentmods.dev/badge/skills/bex-co/bex/bex-env-vars.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 62 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,084 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00062 $0.01084
Opus 5.5 $0.00025 $0.00434
Sonnet 5.5 $0.00012 $0.00217
Haiku 4.5 $0.00006 $0.00108

Measured yesterday against content hash c85752a5022c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

bex-env-vars scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

1. Retrieve the linked Markdown document directly with an available URL-fetching tool or HTTP client, such as `curl`. Do not substitute web-search summaries for the document.
lego/cli/internal/skills/pack/skills/bex-env-vars/SKILL.md · 80 lines

How it starts

The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Environment Variables on bex

Before inspecting or changing environment variables, secrets, secret files, or environment groups, read references/environment-variables.md for the current documentation, source-of-truth, safety, and mutation workflow.

Blueprint wiring examples and language-specific application notes live under references/.

When to Use This Skill

Use this skill when users want to:

  • Add, change, or remove environment variables or secrets
  • Understand Dashboard vs Blueprint vs API/MCP flows
  • Use environment groups for shared configuration
  • Wire fromDatabase, fromService, fromGroup, sync: false, or generateValue in Blueprints
  • Debug missing vars, secret files, precedence, or platform-injected names

For full Blueprint authoring, pair with bex-blueprints. For first-time deploys, bex-deploy. For web service behavior and ports, bex-web-services.

Blueprint Wiring (Summary)

After reading references/environment-variables.md, use references/wiring-reference.md for task-specific fromDatabase, fromService, and fromGroup examples. Consult bex-blueprints for the complete Blueprint workflow.

Platform-Injected Variables

Use the current default-variable reference fetched through references/environment-variables.md instead of relying on a fixed catalog. Language-specific application notes remain in references/platform-variables.md.

Runtime-Specific Defaults

Always bind HTTP servers to 0.0.0.0 and PORT (or the stack’s documented port env) unless using a static site or custom Docker entrypoint.

  • When diagnosing a port-binding failure, first establish whether the service uses a native runtime or Docker and inspect its actual start command; the applicable defaults differ.
  • For a web service, PORT defaults to 10000. Prefer reading $PORT in the start command rather than hardcoding that number or setting PORT merely to match an arbitrary hardcoded port.
  • Native Python services currently receive GUNICORN_CMD_ARGS with a default bind to 0.0.0.0:10000. A custom Gunicorn start command should bind to 0.0.0.0:$PORT so the process and bex's health checks use the same port.

Read the full file on GitHub · 80 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 80 lines · 62 tokens per session scan A c85752a5022c

Subscribe to this mod's changes

bex-env-vars is a skill published in the GitHub repository bex-co/bex (577 stars, last pushed today), licensed Apache-2.0. It adds 62 tokens to every session and 1,084 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-29.

Related

Other skills, from other repositories

network-rca

Kubernetes network root cause analysis skill powered by Kubeshark MCP. Use this skill whenever the user wants to investigate past incidents, perform retrospective traffic analysis, take or manage traffic snapshots, extract PCAPs, dissect L7 API calls from historical captures, compare traffic patterns over time, detect…

kubeshark/kubeshark · 163 tokens

install

Kubeshark installation and deployment skill. Use this skill whenever the user wants to install Kubeshark, deploy Kubeshark to a Kubernetes cluster, set up Kubeshark, configure Kubeshark helm values, generate a Kubeshark config file, customize Kubeshark deployment, troubleshoot Kubeshark installation, upgrade…

kubeshark/kubeshark · 257 tokens

argocd-expert

Expert-level ArgoCD GitOps deployment, application management, sync strategies, and production operations. Use when the user mentions GitOps, Kubernetes, continuous deployment, declarative, or automation, or when the task involves ArgoCD Architecture, Application CRD, AppProject, or ApplicationSet.

personamanagmentlayer/pcl · 65 tokens

sync-system-bus

Deploy the system-bus-worker to the joelclaw Kubernetes cluster from local machine. Use when syncing changes in packages/system-bus to k8s, especially because the GitHub Actions deploy job targets a non-existent self-hosted runner and cannot complete deploys automatically.

joelhooks/joelclaw · 60 tokens

argocd-deploy

GitOps continuous deployment for Kubernetes with ArgoCD.

bidewio/better-openclaw · 16 tokens

argocd

Argo CD GitOps continuous delivery reference for Kubernetes. Covers installation, application management, Helm/Kustomize sources, App-of-Apps pattern, ApplicationSet generators, sync waves, progressive delivery, RBAC, SSO, and secrets.

bytesagain/ai-skills · 52 tokens