Passkey

Implement WebAuthn passkeys avoiding critical security and compatibility pitfalls.

This skill is a coherent, low-risk set of best-practice notes for implementing WebAuthn; it contains no installers, code, or secret requests. Before relying on it: (1) verify recommended libraries and their current security posture (versions and recent CVEs) rather than blindly copying snippets; (2) pay attention to details the guidance skirts (attestation policy, backup/recovery flows, privacy/consent, legal/compliance requirements); (3) ensure any code you or the agent produce based on this guidance follows secure storage and transport practices (e.g., protect databases and backups holding credential IDs/public keys, use HTTPS and strict origin checks); and (4) include independent code review and automated tests (the SKILL.md itself recommends CI virtual authenticators). Overall this skill is informational and appropriate to install, but treat it as guidance — validate library sources and test thoroughly before deploying to production.

Type: OpenClaw Skill Name: passkey Version: 1.0.0 The skill bundle contains standard metadata and a `SKILL.md` file providing comprehensive documentation and best practices for implementing WebAuthn passkeys. There is no executable code, no instructions for the AI agent that suggest malicious intent (e.g., data exfiltration, unauthorized execution, prompt injection), and no high-risk behaviors detected. The content is purely informative and aligns with the stated purpose of guiding secure passkey implementation.