Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

skill-signing-verifier

Étoiles4

Forks1

Mis à jour2 juillet 2026 à 22:08

Scaffold for verifying skill package signatures and provenance (planned). Use when designing supply-chain checks. NOT for live signing or key management.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

wyattowalsh

wyattowalsh/agents

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Développeurs de logicielsProfessions informatiques et mathématiques·SOC 15-1252

Explorateur de fichiers

3 fichiers

SKILL.md

readonly

name	skill-signing-verifier
description	Scaffold for verifying skill package signatures and provenance (planned). Use when designing supply-chain checks. NOT for live signing or key management.
user-invocable	false
license	MIT
metadata	{"author":"wyattowalsh","version":"0.1.0","internal":true}

Skill Signing Verifier

Later-tier scaffold for skill package signature verification.

Scope: Design placeholder only. Does not sign packages or manage private keys.

Planned Workflow

Load packaged skill ZIP output from the repo packaging dry-run.
Verify signature manifest against maintainer trust store (TBD).
Report pass/fail without mutating installed harness skills.

Validation Contract

uv run python skills/skill-signing-verifier/scripts/check.py

Critical Rules

Never commit or print private signing keys.
Route live signing to maintainer-controlled release tooling when implemented.
Pair with security-scanner for executable-surface review until signing ships.

Plus depuis ce dépôt

même dépôt

pentest

wyattowalsh/agents

Authorized pentest planning with mandatory ROE scope gate. Synthesizes phase checklists and findings. NOT for static audit (security-scanner), CTF labs (ctf-*), or C2/webshell tooling.

2026-07-074

mcphub-operator

wyattowalsh/agents

Operate MCPHub groups, endpoints, compression, and CLI from repo registry. Use for hub preflight, group picking, tunnel vs local exposure. NOT harness sync.

2026-07-064

review

wyattowalsh/agents

Use for session, scoped, PR, range, full audit, simplification, and source/provenance reviews with evidence-first findings. NOT for feature implementation or benchmarking.

2026-07-054

research

wyattowalsh/agents

Deep multi-source research with reviewable plans, source-support auditing, and confidence scoring. Use for technical, academic, market, fact-checking investigation. NOT for code review or simple Q&A.

2026-07-054

trafilatura

wyattowalsh/agents

Extract clean article text and metadata from URLs or HTML with trafilatura CLI. Use for single-page extraction, piped/local HTML, bounded discovery. NOT for research synthesis (research), PDFs (docling), raw fetch (fetch), video (yt-dlp).

2026-07-054

skill-install-dry-run-planner

wyattowalsh/agents

Plan cross-harness skills sync dry-run steps before any live install. Use when reconciling harness skill inventory. NOT for --apply or npx installs.

2026-07-034

name	skill-signing-verifier
description	Scaffold for verifying skill package signatures and provenance (planned). Use when designing supply-chain checks. NOT for live signing or key management.
user-invocable	false
license	MIT
metadata	{"author":"wyattowalsh","version":"0.1.0","internal":true}

Skill Signing Verifier

Later-tier scaffold for skill package signature verification.

Scope: Design placeholder only. Does not sign packages or manage private keys.

Planned Workflow

Load packaged skill ZIP output from the repo packaging dry-run.
Verify signature manifest against maintainer trust store (TBD).
Report pass/fail without mutating installed harness skills.

Validation Contract

uv run python skills/skill-signing-verifier/scripts/check.py

Critical Rules

Never commit or print private signing keys.
Route live signing to maintainer-controlled release tooling when implemented.
Pair with security-scanner for executable-surface review until signing ships.