# Webauthn Attestation Hardening > Use when implementing or tightening attestation statement parsing, verification, and trust checks. - Skill: `tomevault-io/webauthn-attestation-hardening` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/webauthn-attestation-hardening` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/webauthn-attestation-hardening/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/webauthn-attestation-hardening --- # WebAuthn Attestation Hardening ## Trigger Use when touching attestation formats (`packed`, `tpm`, `android-key`, `android-safetynet`, `apple`, `none`) or trust source logic. ## Workflow 1. Expand coverage by format. 2. Add trust-path and failure-mode tests. 3. Keep optional module boundaries intact (`webauthn-attestation-mds`). --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/szijpeter) — claim your Tome and manage your conversions.