Jeden Skill in Manus ausführen
mit einem Klick

Jeden Skill in Manus mit einem Klick ausführen

Loslegen

crypto

Sterne2

Forks1

Aktualisiert10. Januar 2026 um 05:27

Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Installation

Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.

In Manus ausführen

Quelle

bentefay

bentefay/moneyflow

GitHub-Repository öffnen Creator-Repositorys ansehen

Download

In Manus ausführen

Verwandte BerufeSOC

Basierend auf der SOC-Berufsklassifikation

InformationssicherheitsanalystenInformatik- und Mathematikberufe·SOC 15-1212

SKILL.md

readonly

name	crypto
description	Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.

Mehr aus diesem Repository

gleiches Repository

components

bentefay/moneyflow

UI component patterns for React 19, shadcn/ui, and Tailwind. Use when working on files in src/components/.

2026-04-062

crdt

bentefay/moneyflow

Loro CRDT state management with loro-mirror. Use when working on files in src/lib/crdt/.

2026-04-062

e2e

bentefay/moneyflow

Playwright E2E testing patterns. Use when working on files in tests/e2e/.

2026-04-062

import

bentefay/moneyflow

CSV and OFX transaction import parsing. Use when working on files in src/lib/import/.

2026-04-062

sync

bentefay/moneyflow

Real-time sync with Supabase, Loro CRDT, and IndexedDB. Use when working on files in src/lib/sync/.

2026-04-062

trpc

bentefay/moneyflow

tRPC v11 API layer with Zod and Ed25519 auth. Use when working on files in src/server/.

2026-04-062

name	crypto
description	Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.