Use when a command needs API keys or environment secrets. Inject only named variables through envskill without reading or printing values.