← Back to Skills Marketplace
954
Downloads
2
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install passkey
Description
Implement WebAuthn passkeys avoiding critical security and compatibility pitfalls.
Usage Guidance
This skill is a coherent, low-risk set of best-practice notes for implementing WebAuthn; it contains no installers, code, or secret requests. Before relying on it: (1) verify recommended libraries and their current security posture (versions and recent CVEs) rather than blindly copying snippets; (2) pay attention to details the guidance skirts (attestation policy, backup/recovery flows, privacy/consent, legal/compliance requirements); (3) ensure any code you or the agent produce based on this guidance follows secure storage and transport practices (e.g., protect databases and backups holding credential IDs/public keys, use HTTPS and strict origin checks); and (4) include independent code review and automated tests (the SKILL.md itself recommends CI virtual authenticators). Overall this skill is informational and appropriate to install, but treat it as guidance — validate library sources and test thoroughly before deploying to production.
Capability Analysis
Type: OpenClaw Skill
Name: passkey
Version: 1.0.0
The skill bundle contains standard metadata and a `SKILL.md` file providing comprehensive documentation and best practices for implementing WebAuthn passkeys. There is no executable code, no instructions for the AI agent that suggest malicious intent (e.g., data exfiltration, unauthorized execution, prompt injection), and no high-risk behaviors detected. The content is purely informative and aligns with the stated purpose of guiding secure passkey implementation.
Capability Assessment
Purpose & Capability
The name/description describe WebAuthn/passkey implementation guidance and the SKILL.md contains only high-level, implementation-appropriate recommendations (libraries to use, storage fields, UX/testing guidance). There are no unrelated requirements (no env vars, binaries, or config paths).
Instruction Scope
The instructions stay within the domain of implementing and testing passkeys (challenge handling, origin validation, credential storage, attestation trade-offs, cross-device UX, testing). They do not instruct reading unrelated files, exfiltrating data, or calling external endpoints beyond recommending libraries and browser testing tools.
Install Mechanism
No install spec or code files are present; this is instruction-only, so nothing is written to disk or fetched during install.
Credentials
The skill declares no environment variables, credentials, or config paths. The recommendations about storing credential ID/public key/sign count are appropriate for the stated purpose and do not require extra secrets or platform credentials.
Persistence & Privilege
The skill is not forced-always, is user-invocable, and does not request persistent system privileges or modify other skills' configuration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install passkey - After installation, invoke the skill by name or use
/passkey - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Passkey?
Implement WebAuthn passkeys avoiding critical security and compatibility pitfalls. It is an AI Agent Skill for Claude Code / OpenClaw, with 954 downloads so far.
How do I install Passkey?
Run "/install passkey" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Passkey free?
Yes, Passkey is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Passkey support?
Passkey is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).
Who created Passkey?
It is built and maintained by Iván (@ivangdavila); the current version is v1.0.0.
More Skills