TrustView

Publisher Keys

skillerr/publisher-keys

sha256:df8f7fc288c5…
FreeNot anchoredmintedinspectablecapabilitiesdigest-pinnednative

Skill Score

75/ 100 · Solid

WIP · 2.0-signals

Skill Score is actively being developed and will get sharper over time.

  • Sealed package20/20

    Minted .skill blob in the registry

  • Digest published15/15

    sha256 pin published on skillerr.com

  • Permissions declared15/15

    Capabilities / permissions declared

  • Source attested0/10

    No submitter or source URL

  • Transparency log0/15

    Not anchored

  • Release profile15/15

    evaluateReleaseProfile passed

  • Registry signal5/5

    10 install(s) on registry

  • Not revoked5/5

    No revocation on log

Not a malware scan. Not “safe to run.” Transparent registry signals only. Inclusion is not endorsement.

Install

npx @skillerr/add skillerr/publisher-keys

Registry pin: sha256:df8f7fc288c5… (shown on TrustView; install by name resolves to this sealed blob)

Sealed install targets

Writes publisher-keys.skill (sealed ZIP) plus optional skillerr.json. Not a bare SKILL.md.

Download publisher-keys.skill

Sealed ZIP with digest + skillerr.json. Not a bare SKILL.md.

Free skills install with npx @skillerr/add. Sign in for account history.

Sealed artifact

Install and download deliver a digest-pinned open .skill package (docs.skillerr.com). Pasting a SKILL.md from the internet has none of this proof.

  • ✓

    publisher-keys.skill ZIP

    Open-protocol .skill ZIP (skill.json + workflow), not a public raw SKILL.md URL

  • ✓

    Registry digest pin

    sha256:df8f7fc288c5…

  • ✓

    Inspect before run

    TrustView on skillerr.com; SKILL.md is a lossy adapter inside the package

  • ✓

    Permissions surface

    Capabilities declared for review before install

  • ✓

    Transparency log

    Inclusion proof in the skillerr.com registry log

Permissions map

  • netNetworkelevated

    Call remote APIs or fetch URLs

Declarations for humans and agents. Not a runtime sandbox guarantee.

Integrity verify

Confirm the digest on this page matches the live registry. This checks identity pins only: not a security scan.

expect sha256:df8f7fc288c57911…
npx @skillerr/add info skillerr/publisher-keys
curl -sS https://skillerr.com/api/v1/skills/skillerr/publisher-keys | grep -o '"digest":"[^"]*"'

Summary

Register and list publisher signing keys on skillerr.com (no payment or KYC).

Description

Guide publishers through POST /api/v1/publishers/keys with an Ed25519 public key PEM and optional namespace.

Tags

publisherkeysauthmeta
Inspect package contentsSKILL.md inside .skill

TrustView preview on skillerr.com. Install and download serve the sealed package: there is no public raw SKILL.md URL.

---
name: publisher-keys
title: Publisher Keys
description: Register and list publisher signing keys on skillerr.com (no payment or KYC).
---

# Publisher Keys

Guide publishers through POST /api/v1/publishers/keys with an Ed25519 public key PEM and optional namespace.

Verified

Public Ledger
Not anchored

Transparency

published_at
2026-07-20T18:43:35.093Z
version
0.1.0
updated_at
2026-07-20T18:43:35.093Z
license
MIT
minted_at
2026-07-20T18:43:35.821Z
permanence
in registry log
digest
sha256:df8f7fc288c579116735d4ec3a76583980f2b85806a28f394e69b9bccf5dff53

Public permanence uses Sigstore Rekor. The ledger link is shown when a real logIndex was recorded at mint. Green Anchored requires an offline inclusion proof verify. Catalog claims alone never paint Anchored. Inclusion is not endorsement.