\r \r

Artifact Signing Skill\r

\r This skill allows an AI agent to sign files, binaries, or any artifact using a PEM-encoded private key. It generates a detached signature file.\r \r

Dependencies\r

\r

• Python 3.x\r
• cryptography library (pip install cryptography)\r \r

Tools\r

\r

sign_artifact\r

\r Signs a given artifact with a private key.\r \r Arguments:\r \r

• artifact_path: (Required) Absolute path to the file to be signed.\r
• key_path: (Required) Absolute path to the PEM-encoded private key.\r
• output_path: (Optional) Absolute path where the signature should be saved. Defaults to \x3Cartifact_path>.sig.\r \r Example Usage:\r \r

python c:\Docs\skills\artifact-signing\scripts\sign_artifact.py "C:\path	o\artifact.zip" "C:\path	o\private_key.pem"\r
```\r
\r
## Security Considerations\r
\r
- **Private Key Protection**: Never share your private key. Ensure the key file has restricted permissions.\r
- **Verification**: Always verify the signature using the corresponding public key before trusting an artifact.\r