agent-client-security

85 / 100 · Low risk

Fine to try.

By yanacuti1121/Yana-AI (GitHub) · coding · 13 stars · scanned at commit 54d4aa9

Harden native agents running on machines you do not fully control. Covers installer integrity and code signing per platform, OTA update channels with rollback and kill-switch, mTLS with per-agent identity and rotation, local secret storage (Keychain, DPAPI, libsecret), anti-tampering signals, and telemetry hygiene. Invoke when shipping a monitoring agent, RMM tool, CI runner, or IoT controller.

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 2 places.

.claude/skills/gw360--agent-client-security/SKILL.md, line 54- **No `curl ... | bash`** as the primary install path. It's catastrophic if the network is hostile or your CDN serves a different file to different IPs. Provid
.claude/skills/gw360--agent-client-security/SKILL.md, line 218- [ ] No `curl | bash` as the default path; documented signed alternative

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'agent-client-security' ] || [ -L ~/.agents/skills/'agent-client-security' ]; then echo 'A skill folder named agent-client-security already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/yanacuti1121/Yana-AI' "$d" && git -C "$d" checkout --quiet '54d4aa9fa3241319f4d37212bd23826658bf6bed' -- '.claude/skills/gw360--agent-client-security' && mkdir -p ~/.agents/skills && cp -R "$d"/'.claude/skills/gw360--agent-client-security' ~/.agents/skills/'agent-client-security' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'agent-client-security' ~/.claude/skills/'agent-client-security' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for yanacuti1121/Yana-AI shows the score of its lowest-scoring skill.

SkillTrust badge for yanacuti1121/Yana-AI

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/yanacuti1121/Yana-AI.svg)](https://zalavijaysinh.github.io/skilltrust/repos/yanacuti1121/Yana-AI/)

Score history

Date	Version	Score
2026-11-13	`54d4aa9`	85
2026-11-08	`4a78f20`	85

Also found in

Identical copies of this skill exist at:

yanacuti1121/Yana-AI/core/skills/gw360--agent-client-security