Adding Signature Verification to AI Skill Packs
csinye · reddit · 2026-07-18
The author developed an open-source protocol and CLI for signing and verifying AI agent skills: skillerr.
Core design features include:
- Packaging skills into encapsulated .skill files
- Applying content addressing and SHA-256 checksums to the entire skill pack so any alteration is detectable
- Using typed contracts to describe inputs, permissions, prohibited actions, and human review requirements, rather than letting agents interpret free text
- Optional Ed25519 signatures anchored via Sigstore/Rekor transparency logs for independent verification
Usage allows inspecting before running: skill inspect my-skill.skill --trust --claims, or importing existing SKILL.md files to generate a skill pack. By default, unsigned packages will not execute unless explicitly run with --allow-untrusted.
The project splits the protocol and CLI into two packages, enabling others to build different implementations on the same standard without foracking. The author is actively seeking feedback from those implementing agent skills in production.
More from coding & agent
- 'My intelligence stack': developer splits AI coding work across Opus 5.5, Fable and Astra with human review gates — sh_reya · 2026-10-27
- Baseten webinar: evaluate open models for coding agents by benchmarking on your own merged PRs — baseten · 2026-10-27
- Thorsten Ball on working with agents: run more evals, automate everything, use the best models — omarsar0 · 2026-10-27
- DeepMind paper: LLMs can't sample randomly on their own — pass random numbers from code instead — rohanpaul_ai · 2026-10-27
- BELL: Open-Source Stack Combines Browserbase, Eve, iMessage and Stripe Link for Personal Agents — jeff_weinstein · 2026-10-27
- Legora runs 2,000 parallel agent evals on Modal Sandboxes for legal AI — blelbach · 2026-10-27