wendy-certificates
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and operational guidelines for a Public Key Infrastructure (PKI) system, specifically for requesting, renewing, and revoking certificates.
- [SAFE]: The instructions mandate secure defaults, such as requiring non-extractable private keys (
extractable:false) and prohibiting server-side key generation for principal certificates. - [SAFE]: The skill encourages the use of modern cryptographic standards, such as ML-DSA for post-quantum signing and SPIFFE for identity representation.
- [SAFE]: References to external documentation are limited to a well-known project management service (Linear) and are consistent with the skill's stated purpose and author identity, representing normal vendor functionality.
Audit Metadata