harnios-mcp: Skill for Claude Code

.claude/skills/setup-env/SKILL.md

setup-env is a skill for Claude Code from harnios/harnios-mcp. It costs 47 tokens per session (1,424 once invoked), scanned A, original, MIT.

An interactive setup tool for filling in a frontend/.env file, which stores configuration values used by a frontend application.

In plain words
What is it for?
Use it to choose or create an environment file and enter values for the variables documented in frontend/.env.example.
Why use it?
It avoids manually copying variables from the example file and helps keep environment-specific settings organized.

Skill for Claude Code

Written for Claude Code: disable-model-invocation in frontmatter. Also seen: names the AskUserQuestion tool.

This is harnios/harnios-mcp's own configuration. It tells Claude Code how to work on harnios-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything harnios-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to harnios/harnios-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/harnios/harnios-mcp/main/.claude/skills/setup-env/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/harnios/harnios-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for setup-env

README.md
[![agentmods](https://agentmods.dev/badge/skills/harnios/harnios-mcp/setup-env/github.svg)](https://agentmods.dev/skills/harnios/harnios-mcp/setup-env)
Your own site
<a href="https://agentmods.dev/skills/harnios/harnios-mcp/setup-env"><img src="https://agentmods.dev/badge/skills/harnios/harnios-mcp/setup-env/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for setup-env

Your own site · 80×15
<a href="https://agentmods.dev/skills/harnios/harnios-mcp/setup-env"><img src="https://agentmods.dev/badge/skills/harnios/harnios-mcp/setup-env.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 47 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,424 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00047 $0.01424
Opus 5.5 $0.00019 $0.00570
Sonnet 5.5 $0.00009 $0.00285
Haiku 4.5 $0.00005 $0.00142

Measured 2mo ago against content hash 6b3d5d6e5633, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

setup-env scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/setup-env/SKILL.md · 46 lines

How it starts

The opening of the file, as written. The whole thing — 46 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Purpose

frontend/.env.example documents every variable the Next.js app reads (S3/storage connection, OAuth owner credential, MCP bootstrap path, OS_NAME branding, etc.). Next.js loads config from any file starting with .env (.env, .env.local, .env.development, .env.development.local, .env.production.local, etc.) — there is no single fixed filename, and several such files can coexist for different purposes (e.g. one per environment/deployment). frontend/.gitignore covers all of them with a blanket .env* pattern (except .env.example itself, which is intentionally tracked as the template) — none of them are ever committed.

This skill exists so any one of these files can be created or updated without the user having to hand-copy and decode .env.example themselves.

Steps

  1. Determine the target filename — never assume .env.local. List every frontend/.env* file that currently exists (excluding .env.example). Ask the user (AskUserQuestion) which file this run targets:

    • Each existing .env* file found, offered as an option ("update <name>")
    • "Create a new one" — if chosen, ask for the filename (must start with .env); tell the user which Next.js env file it corresponds to if the name implies a specific load order (.env.local loads everywhere; .env.development/.env.production are environment-specific; the .local variants are per-machine overrides not meant to be shared)
    • If exactly one .env* file already exists, you may skip this question and confirm your assumption in one line instead of formally asking (e.g. "I'll update the existing .env.local") — only ask when there's a real choice (multiple existing files, or none yet)
  2. Read frontend/.env.example and parse it into an ordered list of variables. For each variable, capture:

    • Its KEY
    • The full comment block immediately above it (this is the human-readable description — use it verbatim when asking the user, don't paraphrase it away)
    • Its example value, and whether that value is a usable default as-is (e.g. S3_REGION=us-east-1, S3_FORCE_PATH_STYLE=true) or a placeholder that must be replaced for anything beyond the exact local-MinIO setup this repo ships with (e.g. S3_ENDPOINT, S3_ACCESS_KEY_ID/S3_SECRET_ACCESS_KEY when not using the bundled local MinIO, OAUTH_OWNER_PASSWORD which ships empty on purpose)

Read the full file on GitHub · 46 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 46 lines · 47 tokens per session scan A 6b3d5d6e5633

Subscribe to this mod's changes

setup-env is a skill published in the GitHub repository harnios/harnios-mcp (1 stars, last pushed 1mo ago), licensed MIT. It adds 47 tokens to every session and 1,424 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

setup-env compared with skills from other repositories

setup-env next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
setup-envharnios/harnios-mcpSkill11mo agoMITA47Claude Code
powerpointthe-open-agent/openagentSkill5.7k5d agoApache-2.0A48Claude Code, Codex
tmuxthe-open-agent/openagentSkill5.7k5d agoApache-2.0A22Claude Code, Codex
openai-whisper-apithe-open-agent/openagentSkill5.7k5d agoApache-2.0A20Claude Code, Codex
clawhubthe-open-agent/openagentSkill5.7k5d agoApache-2.0A63Claude Code, Codex
video-framesthe-open-agent/openagentSkill5.7k5d agoApache-2.0A15Claude Code, Codex
githubthe-open-agent/openagentSkill5.7k5d agoApache-2.0A30Claude Code, Codex