Adding Signature Verification to AI Skill Packs
csinye · reddit · 2026-07-18
The author developed an open-source protocol and CLI for signing and verifying AI agent skills: skillerr.
Core design features include:
- Packaging skills into encapsulated .skill files
- Applying content addressing and SHA-256 checksums to the entire skill pack so any alteration is detectable
- Using typed contracts to describe inputs, permissions, prohibited actions, and human review requirements, rather than letting agents interpret free text
- Optional Ed25519 signatures anchored via Sigstore/Rekor transparency logs for independent verification
Usage allows inspecting before running: skill inspect my-skill.skill --trust --claims, or importing existing SKILL.md files to generate a skill pack. By default, unsigned packages will not execute unless explicitly run with --allow-untrusted.
The project splits the protocol and CLI into two packages, enabling others to build different implementations on the same standard without foracking. The author is actively seeking feedback from those implementing agent skills in production.
More from coding & agent
- Resin lets an agent build standalone LLM inference engines; vLLM and SGLang optimize DeepSeek kernels differently — AccBalanced · 2026-10-27
- Context layout is a cost decision: one memory edit can bust your entire agent prompt cache — dscape · 2026-10-27
- Mirendil debuts Fern, a from-scratch model with up to 10M token context built for agentic AI R&D — shayan_ · 2026-10-27
- Alchemy adds effect/Workflow support across Durable Objects, Workflows and Lambda Durable Functions — samgoodwin89 · 2026-10-27
- Alchemy's Lambda Web Functions run plain Node web servers on Lambda, no OpenNext needed — samgoodwin89 · 2026-10-27
- Alchemy Domain brings domain-driven design and story testing to Effect backends — samgoodwin89 · 2026-10-27