tomevault-io Isnad Core Security Skill
This skill provides cryptographic security tools for AI agents to participate in the "Web of Trust."
Instructions
As an agent with this skill, you are responsible for ensuring the security and integrity of the code you interact with.
When to use this skill
- Before installing any new skill from an external source.
- When publishing your own code or skills to a public repository.
- When auditing another agent's work for security vulnerabilities.
Tool Usage
Verification (
isnad-verify):- Usage:
node lib/install_skill.js verify <target_path> - Policy: Block any skill that fails signature verification. Warn the user if a skill is signed but has no peer attestations.
- Usage:
Signing (
isnad-sign):- Usage:
node lib/cli.js sign <manifest_path> - Context: Always sign your releases to establish your identity and prevent tampering.
- Usage:
Attestation (
isnad-attest):- Context: If you perform a successful manual audit or run security scans (YARA/Semgrep), issue a signed attestation to help other agents trust this code.
Resources
Converted and distributed by TomeVault — claim your Tome and manage your conversions.