Skip to main content

pilot-certificate

Issue and verify Ed25519-signed capability certificates for Pilot Protocol agents. Use this skill when: 1. You need to issue capability proofs or authorization certificates 2. You want to verify agent capabilities using cryptographic signatures 3. You need delegated authorization with time-limited certificates Do NOT use this skill when: - You only need basic trust establishment (use pilotctl trust) - You need long-term credentials (use pilot-keychain) - You're implementing PKI (certificates are capability-based, not identity-based)

Datos de origen

Repositorio
TeoSlayer/pilot-skills
Última actividad en el origen
20 de abril de 2026 a las 17:42
Idioma detectado de SKILL.md
inglés
Estrellas
8
Forks
2

Opciones de instalación

De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.

Revisa los archivos de origen

Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.

Explorador de archivos
2 archivos

Mostrando SKILL.md

SKILL.md
Instrucciones de origen · Vista previa de solo lectura
name
pilot-certificate
description
Issue and verify Ed25519-signed capability certificates for Pilot Protocol agents. Use this skill when: 1. You need to issue capability proofs or authorization certificates 2. You want to verify agent capabilities using cryptographic signatures 3. You need delegated authorization with time-limited certificates Do NOT use this skill when: - You only need basic trust establishment (use pilotctl trust) - You need long-term credentials (use pilot-keychain) - You're implementing PKI (certificates are capability-based, not identity-based)
tags
["pilot-protocol","trust-security","certificates"]
license
AGPL-3.0
compatibility
Requires pilot-protocol skill and pilotctl binary on PATH. The daemon must be running (pilotctl daemon start).
metadata
{"author":"vulture-labs","version":"1.0","openclaw":{"requires":{"bins":"[Truncated]"},"homepage":"https://pilotprotocol.network"}}
allowed-tools
["Bash"]
# Pilot Certificate Capability certificate system for Pilot Protocol using Ed25519 signatures. ## Commands ### Issue Certificate ```bash CERT_ID=$(openssl rand -hex 8) EXPIRES_AT=$(date -u -d '+24 hours' +%Y-%m-%dT%H:%M:%SZ) cat > ~/.pilot/certificates/issued/cert-$CERT_ID.json <<EOF { "certificate_id": "$CERT_ID", "subject": {"hostname": "$SUBJECT"}, "capabilities": ["read", "write", "admin"], "expires_at": "$EXPIRES_AT", "status": "active" } EOF ``` ### Send Certificate ```bash pilotctl --json send-file "$RECIPIENT" ~/.pilot/certificates/issued/cert-$CERT_ID.json ``` ### Verify Certificate ```bash EXPIRES_AT=$(jq -r '.expires_at' "$CERT_FILE") EXPIRES_TS=$(date -d "$EXPIRES_AT" +%s) [ $(date +%s) -le $EXPIRES_TS ] && echo "VERIFIED" || echo "EXPIRED" ``` ### Check Capability ```bash jq -e --arg cap "$CAPABILITY" '.capabilities[] | select(. == $cap)' "$CERT_FILE" && echo "Has capability" ``` ## Workflow Example ```bash #!/bin/bash # Certificate authority mkdir -p ~/.pilot/certificates/{issued,received} CERT_ID=$(openssl rand -hex 8) SUBJECT="admin.pilot" cat > ~/.pilot/certificates/issued/cert-$CERT_ID.json <<EOF { "certificate_id": "$CERT_ID", "subject": {"hostname": "$SUBJECT"}, "capabilities": ["read", "write", "admin"], "expires_at": "$(date -u -d '+48 hours' +%Y-%m-%dT%H:%M:%SZ)", "status": "active" } EOF pilotctl --json send-file "$SUBJECT" ~/.pilot/certificates/issued/cert-$CERT_ID.json ``` ## Dependencies Requires pilot-protocol, pilotctl, jq, and openssl.
Ver en GitHub