菜单
Use this to find the right tested, hands-on tutorial for doing something real with a Solo 2 key — passkeys, SSH, git signing, file/disk encryption, TOTP/HOTP, password stores, or post-quantum signing. Use it when a user asks "how do I use my Solo for X" or when recommending a concrete workflow.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | solo2-examples |
| description | Use this to find the right tested, hands-on tutorial for doing something real with a Solo 2 key — passkeys, SSH, git signing, file/disk encryption, TOTP/HOTP, password stores, or post-quantum signing. Use it when a user asks "how do I use my Solo for X" or when recommending a concrete workflow. |
The examples/ directory holds tested, end-to-end walkthroughs. Each file has a > Works on: … banner stating Secure and/or Hacker. Point users to the matching file; for a broader (untested) link list see examples/AWESOME.md.
| File | Use case | Works on | Key tools |
|---|---|---|---|
| FIDO.md | FIDO2/WebAuthn passkeys, hmac-secret, the COSE algorithms | Secure + Hacker | browser, python-fido2, solo2, libfido2 |
| SSH.md | SSH keys bound to the token (ed25519-sk/ecdsa-sk) | Secure + Hacker | OpenSSH ≥ 8.2 |
| GIT.md | Signing git commits (and optional push auth) with the key | Secure + Hacker | git, SSH-signing |
| AGE.md | File/disk encryption, touch-to-decrypt | Secure + Hacker | age + age-plugin-fido2-hmac |
| OTP.md | TOTP/HOTP 2FA codes generated on the key | Secure + Hacker | solo2 app oath, oath-toolkit |
| PASS.md | Password stores; passkey/2FA for vaults | Secure + Hacker | pass/passage, Bitwarden/1Password |
| POST_QUANTUM.md | ML-DSA-44 signing — PIV (Secure+Hacker), FIDO2 -50 (Hacker only) | mixed (see banner) | python-fido2, pyscard, OpenSSL ≥ 3.5, liboqs |
| TLOG.md | Solo as a post-quantum transparency-log witness (ML-DSA cosignature) | Secure + Hacker | python, filippo.io/mldsa (Go) |
| AWESOME.md | Curated external links by category (PIV/OpenPGP, LUKS, DNSSEC, CA-on-token, …) | — | — |
Runnable demo scripts for the post-quantum tutorials are under examples/post_quantum/ (pq_fido2_demo.py, pq_piv_demo.py, pq_tlog_witness.py, and the Go verifier tlog_verify/).
Works on: banner — if they have a Secure key, don't suggest a Hacker-only path (e.g. FIDO2 ML-DSA -50). PIV ML-DSA works on Secure.pcscd on Linux); NFC only on B-variant keys.Use this to build and flash custom firmware onto a Solo 2 Hacker key — including checking the lock/seal state (Secure vs Hacker, which is the PFR seal field, not secure boot), matching the build to the key's storage mode, and validating the equivalent build on an EVK first. Use it WHENEVER you are about to write firmware to a physical Hacker key, because a bad flash bricks it permanently.
Use this when you need to install, run, or understand the `solo2` command-line tool — listing devices, updating firmware, or driving the on-device apps (admin, FIDO, OATH, PIV, NDEF). Use it whenever a task involves talking to a Solo 2 key from the host.