Skill Signing Verifier

Later-tier scaffold for skill package signature verification.

Scope: Design placeholder only. Does not sign packages or manage private keys.

Planned Workflow

1. Load packaged skill ZIP output from the repo packaging dry-run.
2. Verify signature manifest against maintainer trust store (TBD).
3. Report pass/fail without mutating installed harness skills.

Validation Contract

uv run python skills/skill-signing-verifier/scripts/check.py

Critical Rules