Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

Comenzar

crypto

Estrellas2

Forks1

Actualizado10 de enero de 2026, 05:27

Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

bentefay

bentefay/moneyflow

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

SKILL.md

readonly

name	crypto
description	Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.

Más de este repositorio

mismo repositorio

components

bentefay/moneyflow

UI component patterns for React 19, shadcn/ui, and Tailwind. Use when working on files in src/components/.

2026-04-062

crdt

bentefay/moneyflow

Loro CRDT state management with loro-mirror. Use when working on files in src/lib/crdt/.

2026-04-062

e2e

bentefay/moneyflow

Playwright E2E testing patterns. Use when working on files in tests/e2e/.

2026-04-062

import

bentefay/moneyflow

CSV and OFX transaction import parsing. Use when working on files in src/lib/import/.

2026-04-062

sync

bentefay/moneyflow

Real-time sync with Supabase, Loro CRDT, and IndexedDB. Use when working on files in src/lib/sync/.

2026-04-062

trpc

bentefay/moneyflow

tRPC v11 API layer with Zod and Ed25519 auth. Use when working on files in src/server/.

2026-04-062

name	crypto
description	Client-side cryptography with libsodium. Use when working on files in src/lib/crypto/.

Crypto Guidelines

All crypto happens client-side. Server NEVER sees plaintext.

Architecture

Seed phrase (128-bit) → Ed25519 keypair (signing) → X25519 keypair (encryption)
Vault key (random 256-bit) wrapped with user's X25519 public key
Data encrypted with XChaCha20-Poly1305

Critical Rules

Never log keys or sensitive data - not even in development
Use libsodium - don't implement crypto primitives
Async everywhere - all functions async (libsodium-wrappers)
Constant-time comparisons - sodium.compare for secrets
Zeroize secrets - sodium.memzero when done
Type-safe keys - use branded types (VaultKey, SigningKey)

Common Pitfalls

Don't use crypto.randomBytes → use sodium.randombytes_buf
Don't concatenate key material → use proper KDFs
Don't store keys in localStorage without encryption
Don't forget await sodium.ready before operations

Testing

Use property-based tests for roundtrip verification with fast-check.