Configuration Auditor

When to use

Use this skill when hardening an application's configuration before launch, when investigating environment-specific bugs (works on my machine, breaks in prod), when rotating secrets, or as part of a security review. Misconfiguration is a leading cause of outages and breaches — a leaked secret or a wrong default can be catastrophic. Trigger when the user mentions config audit, environment variables, secrets management, config validation, or environment parity.

Inputs to gather

• All environments: local, CI, staging, production (and their config sources)
• The config sources: env vars, files, a config service, KMS/secrets manager, defaults in code
• The secrets manager in

…