Skills
.Work. You
Rest

ssh-verify-signature

Community

Ensure remote artifact integrity via SSH signature verification.

Software Engineering#SSH#GPG#cosign#artifact verification#signature checking#minisign
AuthorNightreaver
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill ensures the integrity of remote artifacts on SSH targets by verifying their signatures, thus preventing unauthorized modifications and maintaining supply-chain integrity.

Core Features & Use Cases

  • Artifact Verification: Validate GPG, cosign, and minisign signatures against artifacts already deployed on SSH targets.
  • Configured Execution: Uses ssh_exec_run to execute command-allowlisted binary verifiers (GPG, cosign, minisign).
  • Out-of-Band Pubkey Distribution: Enforces distribution of pubkeys from trusted sources outside of the repository, minimizing risk.
  • Prerequisites: Requires ALLOW_DANGEROUS_TOOLS, target-side binary presence, and configured command_allowlist in hosts.toml.

Quick Start

Use the 'ssh-verify-signature' skill to verify the signature of the artifact '/opt/app/releases/v1.2.3.tar.gz' on host 'deploy-target'.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: ssh-verify-signature
Download link: https://github.com/Nightreaver/python-ssh-mcp/archive/main.zip#ssh-verify-signature

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.