agent-security-manager

Implements cryptographic security and attack detection for distributed consensus protocols.

70.1k|8.4k|Updated Jun 2, 2025
One-click install
npx skills add https://github.com/ruvnet/claude-flow --skill agent-security-manager
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agent-security-manager
Source: https://github.com/ruvnet/claude-flow/tree/main/.agents/skills/agent-security-manager
Command: npx skills add https://github.com/ruvnet/claude-flow --skill agent-security-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Distributed consensus protocols are vulnerable to Byzantine, Sybil, Eclipse, and DoS attacks, and securing them requires complex cryptographic infrastructure that is difficult to implement correctly from scratch.

Core Features & Use Cases

  • Threshold Cryptography: Distributed key generation and threshold signature creation using Lagrange interpolation on secp256k1 curves.
  • Attack Detection: Real-time monitoring for Byzantine contradictions, Sybil identity patterns, Eclipse connection clustering, and DoS request anomalies.
  • Key Management: Automated key rotation, encrypted backup shares, and recovery protocols with integrity checksums.
  • Use Case: When running a Byzantine fault-tolerant consensus round, wrap the coordinator with the security layer to sign proposals with threshold signatures, monitor for malicious nodes, and verify result integrity before accepting consensus output.

Quick Start

Invoke the security-manager agent to secure my distributed consensus protocol with threshold signatures and Byzantine attack detection.

Frequently Asked Questions about agent-security-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement threshold signatures for distributed consensus?

Use the ThresholdSignatureSystem class with a distributed key generation protocol where each party contributes a secret polynomial. Partial signatures from at least t signatories are combined via Lagrange interpolation to produce a valid master signature.

How to detect Byzantine attacks in a consensus protocol?

The ConsensusSecurityMonitor detects Byzantine behavior by identifying contradictory messages from the same node, timing anomalies, and collusion patterns among participants. Detected anomalies feed into a reputation system that scores each participant.

What is distributed key generation in threshold cryptography?

Distributed key generation lets multiple parties jointly create a master public key without any single party knowing the full private key. Each participant generates secret polynomial shares, broadcasts commitments, and verifies received shares before combining them.

Does this approach prevent Sybil attacks on node joins?

Yes, node join requests must pass multiple identity verifications including proof of work, stake proof, and credential checks. At least two verification methods must succeed, and suspicious Sybil patterns trigger alerts and rejection.

How does key rotation work without disrupting consensus?

Key rotation generates a new distributed key while keeping the old key valid during a 24-hour transition period. Participants are notified of the rotation, and the old key is deactivated only after the transition completes.