360 Secure SkillHub
360 安全技能中心

Veritas Acta Verify

该 Skill 通过 npx 调用 @veritasacta/verify 命令行工具,在本地对 Ed25519 签名的决策回执、Agent 清单和审计包做密码学校验,支持内置示例自检、指定发行方公钥验证和审计包验证;运行依赖 Bash 与文件读取,验证过程不联系服务器。

tomjwxf
tomjwxf
热度 20.45
最近更新 2026-03-26 23:32:01
分类:安全依赖:代码执行 / 读写文件应用场景:工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add veritasacta-verify
Metadata
name
veritasacta-verify
description
Offline receipt verifier. Verifies Ed25519-signed decision receipts, agent manifests, and audit bundles without contacting any server. MIT licensed. Works with protect-mcp receipts and any Veritas Acta artifact.
metadata
{"emoji":"✅","requires":{"bins":["npx"],"env":[]},"install":"npm install -g @veritasacta/verify@latest\n","license":"MIT","allowed-tools":["Bash","Read"]}

Veritas Acta Verify — Offline Receipt Verification

What This Skill Does

Verifies Ed25519-signed receipts and artifacts without contacting any server. The verifier doesn't know ScopeBlind exists — it's pure cryptographic math.

Quick Start

# Self-test: verify a built-in sample receipt
npx @veritasacta/verify --self-test

# Verify a specific receipt file
npx @veritasacta/verify receipt.json --key issuer-public.json

# Verify an audit bundle
npx @veritasacta/verify bundle.json

Links