agent-client-security

What problem does it solve?

This Skill addresses the challenge of securing native agents operating in hostile environments by implementing measures such as installer integrity, code signing, mTLS, secret storage, and tampering detection.

Core Features & Use Cases

• Installer Security: Ensures platform-specific signing, notarization, and verification to prevent tampering during deployment.
• OTA Updates: Facilitates signed, verifiable updates with rollback and kill-switch support to maintain integrity over time.
• Code Signing: Implements platform-specific signing for Windows, macOS, and Linux to establish trust.
• Mutual TLS & Authentication: Uses per-agent certificates and token-based methods to authenticate agent-control plane communication.
• Secret Management: Stores secrets securely using system keychains or encrypted files, preventing casual access.
• Tampering Detection: Performs integrity checks and health attestations, reporting anomalies proactively.

Quick Start

Invoke the security procedures when deploying or auditing native agents on different operating environments to ensure integrity and confidentiality.