Validate kernel peer credentials on Unix socket connections for privileged IPC writes.
npx skills add https://github.com/quaid-app/quaid --skill local-ipc-auth
Please help me install this Agent Skill. Skill: local-ipc-auth Source: https://github.com/quaid-app/quaid/tree/main/.squad/skills/local-ipc-auth Command: npx skills add https://github.com/quaid-app/quaid --skill local-ipc-auth
Local IPC that forwards privileged writes is vulnerable when relying on protocol identity alone. This pattern uses kernel-backed peer credentials as the authority and treats protocol identity as a cross-check to mitigate spoofing risk.
Configure a local daemon-client pair to require peer-credentials for privileged operations.
High-intent search queries and answers about installing and using this skill.
Peer credential validation is a kernel-backed mechanism for local IPC that verifies the UID and PID of connecting clients over Unix sockets to prevent same-UID spoofing. It establishes trust at the kernel level rather than relying on protocol identity alone.
To secure a CLI daemon over Unix sockets, enforce per-connection peer credential checks on every accept and audit socket-level permissions. This ensures only authenticated clients can perform privileged writes by verifying peer UID/PID continuously.
Protocol identity fails for privileged local IPC because it is vulnerable to same-UID spoofing races. Relying on kernel-backed peer credentials as the authority and treating protocol identity as a cross-check mitigates this spoofing risk.
Yes, you can use Unix socket peer credentials to prevent same-UID spoofing. The pattern requires per-connection peer UID checks and continuous peer verification on every accept to enforce kernel-backed authority for privileged writes.
Relying on protocol identity for daemon security is limited because it cannot prevent unauthorized access during a same-UID spoofing race. Kernel peer credential validation is required to establish trust and safely audit socket owner/mode on every connection.
Yes, this local IPC trust model handles socket cleanup on shutdown. It satisfies endpoint publish and unpublish discipline by removing stale socket coordinates during startup and shutdown to prevent unauthorized access.
pacphiManage the VisionFlow container lifecycle and execute in-container commands via Docker socket.
Seth-arcDefine an immutable, tenant-scoped audit log schema for the Myelin platform.
TeoSlayerEnable encrypted peer-to-peer messaging and peer discovery between AI agents via pilotctl.
moonmingConfigure the Apache APISIX wolf-rbac plugin for consumer-level role-based access control.
