Implement device pairing, token authentication, access control, and audit logging for IoT gateways.
npx skills add https://github.com/joyz0/kitz-ai --skill security-design
Please help me install this Agent Skill. Skill: security-design Source: https://github.com/joyz0/kitz-ai/tree/main/docs/skills/security-design Command: npx skills add https://github.com/joyz0/kitz-ai --skill security-design
This Skill defines and documents a complete security and authentication system to prevent unauthorized access by implementing device pairing, token-based authentication, access control, audit logging, and threat defenses, enabling secure operation of gateways and plugins.
Initiate a secure pairing for deviceId DEVICE_ID using its publicKey and optional pairingCode to obtain a time-limited token and verify access rights.
High-intent search queries and answers about installing and using this skill.
Device pairing uses public keys and challenge signatures to verify identity before issuing time-limited tokens. This prevents unauthorized devices from onboarding to your IoT gateway or distributed services.
Access control is enforced by applying configurable DM-level policies, channel permissions, and plugin-specific authorization rules to manage runtime access decisions across distributed services.
Audit logging and threat protection are added by recording security events, auditing permission changes, and detecting anomalous behavior to actively mitigate DDoS, replay, and MITM attacks.
Yes, token management and signature verification handle runtime access decisions by issuing and validating time-limited tokens against configurable policies to authorize device channels and plugin actions.
Yes, rate limiting and replay attack defenses are supported during device onboarding to prevent DDoS and replay threats, ensuring secure and throttled access to the gateway.
co-labs-coEstablish iOS device-to-device trust using cryptographic certificates and QR pairing.
GaneshMadarasuRoute anomaly-score events into deduplicated alert records for fraud response.
vishalsachdevInstall and configure a Claude Code skill tracking system with hook scripts and JSONL logs.
epieczkoGenerate STRIDE-based threat models with CVSS risk scoring and mitigation recommendations.
