The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/process.py utilizes subprocess.run to interface with the softhsm2-util command-line utility. The implementation is secure as it passes arguments as a list (shell=False), preventing potential command injection vulnerabilities. Variables such as token labels and PINs are sourced from standard CLI arguments.\n- [EXTERNAL_DOWNLOADS]: The skill references well-known and reputable external resources, including official AWS documentation for CloudHSM, NIST standards for key management, and the OpenDNSSEC SoftHSM2 project. All Python dependencies (boto3, python-pkcs11, asn1crypto) are standard libraries for these operations.\n- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or private keys were identified. The AWS administration script (scripts/agent.py) follows security best practices by utilizing boto3.Session to handle authentication through environment-configured AWS CLI profiles.\n- [SAFE]: The skill is strictly instructional and functional for cryptographic security tasks. It includes specific guidance on protecting keys, such as setting the CKA_EXTRACTABLE attribute to False to ensure private keys never leave the HSM device boundary.

configuring-hsm-for-key-storage