skillsignSign and verify agent skill folders with ed25519 keys. Detect tampering, manage trusted authors, and track provenance chains (isnād).
Install via ClawdBot CLI:
clawdbot install felmonon/skillsignGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://github.com/felmonfekadu/skillsignAudited Apr 17, 2026 · audit v1.0
Generated Mar 21, 2026
An organization deploys AI agents with custom skills across departments. Skillsign ensures each skill folder is signed by authorized developers, preventing unauthorized modifications during distribution. IT teams verify signatures before installation to maintain security compliance and audit trails.
A platform hosts community-developed AI skills for agents. Skillsign allows authors to sign their skill folders, enabling users to verify authenticity and detect tampering. The tool's trust system helps users identify reputable authors, reducing risks from malicious code.
A financial institution uses AI agents for automated trading or customer service. Skillsign verifies that all skill folders are signed by approved internal teams, ensuring no unauthorized changes that could violate regulations. Provenance chains provide auditable records for compliance checks.
A university teaches students to build AI agent skills. Skillsign helps students sign their projects, allowing instructors to verify authorship and integrity during grading. The tool fosters security best practices and prevents plagiarism in collaborative environments.
A healthcare provider deploys AI agents for patient data analysis or administrative tasks. Skillsign ensures skill folders are signed by certified developers, protecting sensitive systems from tampering. Regular verification detects any unauthorized modifications, maintaining data integrity and patient safety.
Offer Skillsign as a free open-source tool for basic signing and verification. Generate revenue by selling premium features like advanced analytics, enterprise-grade key management, or integration support. Target businesses needing enhanced security and compliance tools.
Provide paid consulting services to help organizations integrate Skillsign into their AI agent ecosystems. Offer customization, training, and ongoing support for key management and verification workflows. This model leverages expertise in cryptography and AI security.
Partner with AI skill marketplaces to use Skillsign as a certification standard for verified skills. Charge marketplace operators or authors for certification badges or enhanced visibility. This builds trust in the ecosystem and drives adoption through partnerships.
💬 Integration Tip
Integrate Skillsign into CI/CD pipelines to automatically sign and verify skill folders during deployment, ensuring consistent security checks without manual intervention.
Scored Apr 19, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
GEO Audit — AI Search Visibility Checker for ChatGPT, Perplexity, Claude & Gemini. 29-point GEO readiness checklist: robots.txt AI crawler access, Index...
Audit and analyze Solidity smart contracts for security vulnerabilities. Use when reviewing, auditing, or analyzing smart contracts, Solidity code, DeFi prot...