Adding Signature Verification to AI Skill Packs
csinye · reddit · 2026-07-18
The author developed an open-source protocol and CLI for signing and verifying AI agent skills: skillerr.
Core design features include:
- Packaging skills into encapsulated .skill files
- Applying content addressing and SHA-256 checksums to the entire skill pack so any alteration is detectable
- Using typed contracts to describe inputs, permissions, prohibited actions, and human review requirements, rather than letting agents interpret free text
- Optional Ed25519 signatures anchored via Sigstore/Rekor transparency logs for independent verification
Usage allows inspecting before running: skill inspect my-skill.skill --trust --claims, or importing existing SKILL.md files to generate a skill pack. By default, unsigned packages will not execute unless explicitly run with --allow-untrusted.
The project splits the protocol and CLI into two packages, enabling others to build different implementations on the same standard without foracking. The author is actively seeking feedback from those implementing agent skills in production.
More from coding & agent
- Soft Clamp cuts tool-call overuse in multi-teacher distillation, from 13.7% to 9.0% — antgroup · 2026-07-21
- Agent harness memory loss and compaction are still a major usability problem — adityaag · 2026-07-21
- SpecJudge runs locally on Ollama to pick the right-sized AI model for your project — jokiruiz · 2026-07-21
- A developer maps out six design rules for CLIs that humans and AI agents can both use — yujiezha · 2026-07-21
- A coding-agent skill that forces ADHD-friendly, answer-first output — ayghri · 2026-07-21
- A set of agent skills for CAD, robotics, and hardware design — earthtojake · 2026-07-21