Run any Skill in Manus with one click

skill-signing-verifier

Stars4

Forks1

UpdatedJuly 2, 2026 at 22:08

Scaffold for verifying skill package signatures and provenance (planned). Use when designing supply-chain checks. NOT for live signing or key management.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

wyattowalsh

wyattowalsh/agents

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Software DevelopersComputer and Mathematical Occupations·SOC 15-1252

File Explorer

3 files

SKILL.md

readonly

name	skill-signing-verifier
description	Scaffold for verifying skill package signatures and provenance (planned). Use when designing supply-chain checks. NOT for live signing or key management.
user-invocable	false
license	MIT
metadata	{"author":"wyattowalsh","version":"0.1.0","internal":true}

Skill Signing Verifier

Later-tier scaffold for skill package signature verification.

Scope: Design placeholder only. Does not sign packages or manage private keys.

Planned Workflow

Load packaged skill ZIP output from the repo packaging dry-run.
Verify signature manifest against maintainer trust store (TBD).
Report pass/fail without mutating installed harness skills.

Validation Contract

uv run python skills/skill-signing-verifier/scripts/check.py

Critical Rules

Never commit or print private signing keys.
Route live signing to maintainer-controlled release tooling when implemented.
Pair with security-scanner for executable-surface review until signing ships.

More from this repository

same repository

pentest

wyattowalsh/agents

Authorized pentest planning with mandatory ROE scope gate. Synthesizes phase checklists and findings. NOT for static audit (security-scanner), CTF labs (ctf-*), or C2/webshell tooling.

2026-07-074

mcphub-operator

wyattowalsh/agents

Operate MCPHub groups, endpoints, compression, and CLI from repo registry. Use for hub preflight, group picking, tunnel vs local exposure. NOT harness sync.

2026-07-064

review

wyattowalsh/agents

Use for session, scoped, PR, range, full audit, simplification, and source/provenance reviews with evidence-first findings. NOT for feature implementation or benchmarking.

2026-07-054

research

wyattowalsh/agents

Deep multi-source research with reviewable plans, source-support auditing, and confidence scoring. Use for technical, academic, market, fact-checking investigation. NOT for code review or simple Q&A.

2026-07-054

trafilatura

wyattowalsh/agents

Extract clean article text and metadata from URLs or HTML with trafilatura CLI. Use for single-page extraction, piped/local HTML, bounded discovery. NOT for research synthesis (research), PDFs (docling), raw fetch (fetch), video (yt-dlp).

2026-07-054

skill-install-dry-run-planner

wyattowalsh/agents

Plan cross-harness skills sync dry-run steps before any live install. Use when reconciling harness skill inventory. NOT for --apply or npx installs.

2026-07-034

name	skill-signing-verifier
description	Scaffold for verifying skill package signatures and provenance (planned). Use when designing supply-chain checks. NOT for live signing or key management.
user-invocable	false
license	MIT
metadata	{"author":"wyattowalsh","version":"0.1.0","internal":true}

Skill Signing Verifier

Later-tier scaffold for skill package signature verification.

Scope: Design placeholder only. Does not sign packages or manage private keys.

Planned Workflow

Load packaged skill ZIP output from the repo packaging dry-run.
Verify signature manifest against maintainer trust store (TBD).
Report pass/fail without mutating installed harness skills.

Validation Contract

uv run python skills/skill-signing-verifier/scripts/check.py

Critical Rules

Never commit or print private signing keys.
Route live signing to maintainer-controlled release tooling when implemented.
Pair with security-scanner for executable-surface review until signing ships.