How do I install the Lego skill?

Run npx skillmds@latest add javimosch/lego in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Lego?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

javimosch (@javimosch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Lego by javimosch — Agent Skill

Name: Lego
Author: javimosch

File contents

lego Plugin

Let's Encrypt/ACME client for obtaining and renewing TLS certificates from any ACME CA. Supports HTTP-01, DNS-01, and TLS-ALPN-01 challenges with 200+ DNS providers.

Commands

Certificate Management

lego cert obtain — Obtain a new TLS certificate
lego cert renew — Renew an existing certificate
lego cert revoke — Revoke a certificate
lego cert list — List known certificates

DNS Operations

lego dns providers — List available DNS providers

Utility

lego _ _ — Passthrough to lego CLI

Usage Examples

"Obtain a certificate for example.com"
"Renew my TLS certificate"
"List all my certificates"
"Show available DNS providers"

Installation

brew install lego

Or download from GitHub releases:

curl -sSfL https://github.com/go-acme/lego/releases/latest/download/lego_linux_amd64.tar.gz | tar xz -C /usr/local/bin lego

Or install with Go:

go install github.com/go-acme/lego/v4/cmd/lego@latest

Examples

# Obtain a certificate (HTTP-01 challenge)
lego cert obtain --domains example.com --email admin@example.com --http --accept-tos

# Obtain a certificate with DNS-01 challenge (Cloudflare)
lego cert obtain --domains example.com --email admin@example.com --dns cloudflare --accept-tos

# Renew a certificate
lego cert renew --domains example.com --days 30

# Revoke a certificate
lego cert revoke --domains example.com

# List certificates
lego cert list

# List DNS providers
lego dns providers

# Use a staging server for testing
lego cert obtain --domains example.com --email admin@example.com --http --accept-tos --server https://acme-staging-v02.api.letsencrypt.org/directory

# Custom key type
lego cert obtain --domains example.com --email admin@example.com --http --accept-tos --key-type ecdsa256

# Passthrough any lego command
lego _ _ --version
lego _ _ --help

Key Features

ACME v2 — Full RFC 8555 compliance
200+ DNS providers — Cloudflare, Route53, GCP, Azure, and more
Three challenge types — HTTP-01, DNS-01, TLS-ALPN-01
SAN support — Multiple domains per certificate
CNAME support — Automatic CNAME resolution for DNS challenges
Renewal information — ARI (RFC 9773) support
Profiles — ACME profiles extension (draft-ietf-acme-profiles)
Independent — Not tied to any specific CA

---name: legodescription: Use this skill when the user wants to obtain, renew, or manage TLS/SSL certificates from Let's Encrypt or any ACME CA.---# lego PluginLet's Encrypt/ACME client for obtaining and renewing TLS certificates from any ACME CA. Supports HTTP-01, DNS-01, and TLS-ALPN-01 challenges with 200+ DNS providers.## Commands### Certificate Management- `lego cert obtain` — Obtain a new TLS certificate- `lego cert renew` — Renew an existing certificate- `lego cert revoke` — Revoke a certificate- `lego cert list` — List known certificates### DNS Operations- `lego dns providers` — List available DNS providers### Utility- `lego _ _` — Passthrough to lego CLI## Usage Examples- "Obtain a certificate for example.com"- "Renew my TLS certificate"- "List all my certificates"- "Show available DNS providers"## Installation```bashbrew install lego```Or download from GitHub releases:```bashcurl -sSfL https://github.com/go-acme/lego/releases/latest/download/lego_linux_amd64.tar.gz | tar xz -C /usr/local/bin lego```Or install with Go:```bashgo install github.com/go-acme/lego/v4/cmd/lego@latest```## Examples```bash# Obtain a certificate (HTTP-01 challenge)lego cert obtain --domains example.com --email admin@example.com --http --accept-tos# Obtain a certificate with DNS-01 challenge (Cloudflare)lego cert obtain --domains example.com --email admin@example.com --dns cloudflare --accept-tos# Renew a certificatelego cert renew --domains example.com --days 30# Revoke a certificatelego cert revoke --domains example.com# List certificateslego cert list# List DNS providerslego dns providers# Use a staging server for testinglego cert obtain --domains example.com --email admin@example.com --http --accept-tos --server https://acme-staging-v02.api.letsencrypt.org/directory# Custom key typelego cert obtain --domains example.com --email admin@example.com --http --accept-tos --key-type ecdsa256# Passthrough any lego commandlego _ _ --versionlego _ _ --help```## Key Features- **ACME v2** — Full RFC 8555 compliance- **200+ DNS providers** — Cloudflare, Route53, GCP, Azure, and more- **Three challenge types** — HTTP-01, DNS-01, TLS-ALPN-01- **SAN support** — Multiple domains per certificate- **CNAME support** — Automatic CNAME resolution for DNS challenges- **Renewal information** — ARI (RFC 9773) support- **Profiles** — ACME profiles extension (draft-ietf-acme-profiles)- **Independent** — Not tied to any specific CA

Frequently asked questions

Lego