Below you will find pages that utilize the taxonomy term “The-Holding-Company”
August 7, 2026
skillx — verify a signed skill
Version updated for https://github.com/The-Holding-Company/skillx-action to version v1.0.1.
This action is used across all versions by ? repositories. Action Type This is a Composite action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary This GitHub Action automates the verification of signed agent “SKILL.md” files using JWS signatures and DID documents. It solves the problem of trusting unsigned or tampered skills in workflows by providing a CI-native gate that checks for validity and potential prompt-injection vulnerabilities. The action supports multiple use cases, including verifying single skills, several skills simultaneously, and handling results without failing builds when necessary.