semvec/pypi-packages huggingface dataset:
skill-signer 0.1.0
Cryptographic signing for AI agent skills using SSH Ed25519 keys
License: MIT
Requires Python: >=3.10

# skill-signer

Cryptographic signing for AI agent skills. Establishes provenance and trust for the agentic ecosystem.

## Why?

AI agent skills are powerful but present a significant attack surface:
- **Supply chain attacks**: Malicious code in dependencies
- **Tampering**: Modified skills after publication
- **Impersonation**: Fake skills claiming to be from trusted sources

`skill-signer` addresses these by enabling cryptographic verification of skill authorship and integrity.

## Quick Start

```bash
# Install
pip install skill-signer

# Generate a signing key
skill-signer keygen --name "Your Name" --output ~/.ssh/skill_signing_key

# Sign a skill
skill-signer sign ./my-skill --key ~/.ssh/skill_signing_key

# Verify a skill
skill-signer verify ./my-skill --allowed-signers allowed_signers
```

## Design Principles

1. **Use existing infrastructure** — SSH keys (Ed25519), not custom crypto
2. **Minimal dependencies** — Core only needs OpenSSH 8.0+
3. **Compatible with OMS** — Aligns with OpenSSF Model Signing spec
4. **Transitive trust** — Verify entire dependency tree
5. **Revocation support** — Handle compromised keys gracefully

## Status

🚧 **Under Development** — Contributions welcome!

See [SKILL.md](./SKILL.md) for the full specification.

## License

MIT

## Authors

- Dark Matter Lab, Relativity Space
- Built with assistance from Jarvis (OpenClaw agent)
axiomkit 0.0.24
Default template for PDM package
License: MIT
Requires Python: >=3.13

# axiomkit (Python)

## Install

- Core:
  - `pip install axiomkit`
- All features:
  - `pip install "axiomkit[all]"`

## Optional Extras

- `cli`: Rich CLI formatter and headings (`rich`, `rich-argparse`)
- `parquet`: Parquet writer (`polars`)
- `xlsx`: XLSX writer (`polars`, `xlsxwriter`)
- `fasta`: FASTA reader (`biopython`, `pyteomics`, `polars`)
- `stats`: ORA/statistics (`numpy`, `scipy`, `polars`)

When an optional feature is used without required dependencies,
axiomkit raises a `ModuleNotFoundError` with an install hint, e.g.:

- `pip install "axiomkit[xlsx]"`

## Development

- Full dev environment:
  - `pdm sync -G dev --no-self`

## Release

- Release checklist: `RELEASE.md`
- One-shot publish script: `scripts/release_pypi.sh`