Back to feed
Dev.to
Dev.to
7/18/2026
Skillerr: An Open-Source Tool for Cryptographic Verification of AI Agent Skills

Skillerr: An Open-Source Tool for Cryptographic Verification of AI Agent Skills

Original: I tried to trick my own AI-skill signing tool. Here's what happened.

Short summary

Skillerr is an open-source CLI and protocol that adds cryptographic verification to AI agent skills — packages of instructions and scripts that tools like Claude, Cursor, and Codex execute. It provides content-derived SHA-256 hashes for package integrity, structured contracts for permissions and forbidden actions, and optional signing via Sigstore transparency logs. The author tested it by tampering with a packaged skill and confirmed Skillerr rejected the modified package immediately.

  • •Skillerr adds SHA-256 hashing, structured contracts, and optional Sigstore signing to AI skill packages
  • •Unsigned skills require explicit opt-in to execute, making verification the default behavior
  • •Tampering tests confirmed the tool detects single-character modifications after packaging

Generated with AI, which can make mistakes.

#ai-tools#ai-agents#open-source
Read full article at Dev.to

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more

The original title is "Session Discipline Kit: enforcing verification in AI coding agents"
Dev.to
Agents Are Learning to Write Their Own SKILL.md Files
Dev.to
The original title is about "cast-skills" which is an open-source CLI tool. Let me rewrite this as a news headline.
Dev.to
The original title is about adding a security gate to SKILLmama's evaluation system. Let me rewrite this for a mobile feed.
Dev.to