agent-security-manager
Agent skill for security-manager - invoke with $agent-security-manager
Profile →npx skills add ruvnet/ruflo --skill agent-security-manager --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
What it does
Implements comprehensive security mechanisms for distributed consensus protocols with advanced threat detection. Core areas include cryptographic infrastructure (threshold cryptography and zero-knowledge proofs), attack detection (Byzantine, Sybil, Eclipse, and DoS), key management (distributed key generation and rotation), secure communications (TLS 1.3 and message authentication), and threat mitigation (real-time countermeasures).
How it works
- Threshold Signature System: Provides distributed key generation via a multi-phase process (generateDistributedKeys) with secret polynomials, commitments, secret shares, and verification, then creates threshold signatures by collecting partial signatures, validating them, and combining via Lagrange interpolation. Also includes verification of threshold signatures against a master public key and a method to combine partial signatures.
- Zero-Knowledge Proof System: Enables proving knowledge of discrete logarithms (proveDiscreteLog) and verification (verifyDiscreteLogProof), plus range proofs (proveRange) and bulletproofs (createBulletproof) with associated generators and inner product proofs.
- Attack Detection System: Contains mechanisms to detect Byzantine behaviors (contradictory messages, timing anomalies, collusion), update reputation scores, prevent Sybil attacks through multi-method identity verification, protect against eclipse attacks by diversity checks, and mitigate DoS via rate limiting, prioritization, circuit breakers, and blacklisting.
- Secure Key Management: Manages distributed key generation (generateDistributedKey) with ceremony initialization, contributions, verification, and share distribution; supports key rotation (rotateKeys) with a transition period, key notifications, and phased deactivation of old keys; and includes backup and recovery (backupKeyShares, recoverFromBackup) with encrypted backups and integrity checks.
- MCP Integration Hooks: Includes a memory-based store hook for security metrics (security_metrics_*) under a consensus_security namespace.
When to use it
Use when deploying a distributed consensus system that requires formalized security orchestration, threshold cryptography, threat detection, and proactive key management. Trigger points include startup initialization, consensus rounds, and post-operation audits where security audits and monitoring are desired (as indicated by pre/post hooks).
What it can touch
- Tools: claude-code, codex
- Code blocks and classes: ThresholdSignatureSystem, ZeroKnowledgeProofSystem, ConsensusSecurityMonitor, SecureKeyManager
- Operations: Distributed key generation, threshold signing, verification, DKG, key rotation, backup and recovery, attack detection routines, and security monitoring hooks.
Caveats
- License: MIT
- References to TLS 1.3 and cryptographic constructions imply heavy cryptographic assumptions; actual security relies on correct deployment and secure parameter choices. No explicit runtime guarantees are stated; behaviors depend on the surrounding system and proper integration of the provided classes and protocols.
--- name: security-manager type: security color: "#F44336" description: Implements comprehensive security mechanisms for distributed consensus protocols capabilities: - cryptographic_security - attack_detection - key_management - secure_communication - threat_mitigation priority: critical hooks: pre: | echo "🔐 Security Manager securing: $TASK" # Initialize security protocols if [[ "$TASK" == *"consensus"* ]]; then echo "🛡️ Activating cryptographic verification" fi post: | echo "✅ Security protocols verified" # Run security audit echo "🔍 Conducting post-operation security audit" --- # Consensus Security Manager Implements comprehensive security mechanisms for distributed consensus protocols with advanced threat detection. ## Core Responsibilities 1. **Cryptographic Infrastructure**: Deploy threshold cryptography and zero-knowledge proofs 2. **Attack Detection**: Identify Byzantine, Sybil, Eclipse, and DoS attacks 3. **Key Management**: Handle distributed key generation and rotation protocols 4. **Secure Communications**: Ensure TLS 1.3 encryption and message authentication 5. **Threat Mitigation**: Implement real-time security countermeasures ## Technical Implementation ### Thres
- Core Responsibilities
- Technical Implementation
- Threshold Signature System
- Zero-Knowledge Proof System
- Attack Detection System
- Secure Key Management
- MCP Integration Hooks
- Security Monitoring Integration
- Neural Pattern Learning for Security
- Integration with Consensus Protocols
- Byzantine Consensus Security
- Security Testing and Validation
- Penetration Testing Framework
What does the agent-security-manager skill do?
Agent skill for security-manager - invoke with $agent-security-manager
How do I install it?
Run `npx skills add ruvnet/ruflo --skill agent-security-manager --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From ruvnet/ruflo, a repository with 67,015 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.