Skip to main content

pilot-certificate

Issue and verify Ed25519-signed capability certificates for Pilot Protocol agents. Use this skill when: 1. You need to issue capability proofs or authorization certificates 2. You want to verify agent capabilities using cryptographic signatures 3. You need delegated authorization with time-limited certificates Do NOT use this skill when: - You only need basic trust establishment (use pilotctl trust) - You need long-term credentials (use pilot-keychain) - You're implementing PKI (certificates are capability-based, not identity-based)

Informações da origem

Repositório
TeoSlayer/pilot-skills
Última atividade na origem
20 de abril de 2026 às 17:42
Idioma detectado do SKILL.md
inglês
Estrelas
8
Forks
2

Opções de instalação

Por padrão, está selecionado o prompt que primeiro revisa a origem. Você pode mudar para um comando direto ou baixar uma cópia local.

Revise os arquivos de origem

Leia o SKILL.md e os arquivos complementares exibidos pelo SkillsMP antes de decidir se vai instalar.

Explorador de arquivos
2 arquivos

Exibindo SKILL.md

SKILL.md
Instruções da origem · Visualização somente leitura
name
pilot-certificate
description
Issue and verify Ed25519-signed capability certificates for Pilot Protocol agents. Use this skill when: 1. You need to issue capability proofs or authorization certificates 2. You want to verify agent capabilities using cryptographic signatures 3. You need delegated authorization with time-limited certificates Do NOT use this skill when: - You only need basic trust establishment (use pilotctl trust) - You need long-term credentials (use pilot-keychain) - You're implementing PKI (certificates are capability-based, not identity-based)
tags
["pilot-protocol","trust-security","certificates"]
license
AGPL-3.0
compatibility
Requires pilot-protocol skill and pilotctl binary on PATH. The daemon must be running (pilotctl daemon start).
metadata
{"author":"vulture-labs","version":"1.0","openclaw":{"requires":{"bins":"[Truncated]"},"homepage":"https://pilotprotocol.network"}}
allowed-tools
["Bash"]
# Pilot Certificate Capability certificate system for Pilot Protocol using Ed25519 signatures. ## Commands ### Issue Certificate ```bash CERT_ID=$(openssl rand -hex 8) EXPIRES_AT=$(date -u -d '+24 hours' +%Y-%m-%dT%H:%M:%SZ) cat > ~/.pilot/certificates/issued/cert-$CERT_ID.json <<EOF { "certificate_id": "$CERT_ID", "subject": {"hostname": "$SUBJECT"}, "capabilities": ["read", "write", "admin"], "expires_at": "$EXPIRES_AT", "status": "active" } EOF ``` ### Send Certificate ```bash pilotctl --json send-file "$RECIPIENT" ~/.pilot/certificates/issued/cert-$CERT_ID.json ``` ### Verify Certificate ```bash EXPIRES_AT=$(jq -r '.expires_at' "$CERT_FILE") EXPIRES_TS=$(date -d "$EXPIRES_AT" +%s) [ $(date +%s) -le $EXPIRES_TS ] && echo "VERIFIED" || echo "EXPIRED" ``` ### Check Capability ```bash jq -e --arg cap "$CAPABILITY" '.capabilities[] | select(. == $cap)' "$CERT_FILE" && echo "Has capability" ``` ## Workflow Example ```bash #!/bin/bash # Certificate authority mkdir -p ~/.pilot/certificates/{issued,received} CERT_ID=$(openssl rand -hex 8) SUBJECT="admin.pilot" cat > ~/.pilot/certificates/issued/cert-$CERT_ID.json <<EOF { "certificate_id": "$CERT_ID", "subject": {"hostname": "$SUBJECT"}, "capabilities": ["read", "write", "admin"], "expires_at": "$(date -u -d '+48 hours' +%Y-%m-%dT%H:%M:%SZ)", "status": "active" } EOF pilotctl --json send-file "$SUBJECT" ~/.pilot/certificates/issued/cert-$CERT_ID.json ``` ## Dependencies Requires pilot-protocol, pilotctl, jq, and openssl.
Ver no GitHub