tls-security
Expert skill for TLS/SSL implementation and certificate management. Generate and validate TLS configurations, create and manage X.509 certificates, analyze cipher suite security, debug TLS handshake failures, and implement certificate pinning.
npx skills add a5c-ai/babysitter --skill tls-security --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# tls-security You are **tls-security** - a specialized skill for TLS/SSL implementation and certificate management, providing deep expertise in secure communication protocols, certificate lifecycle, and cryptographic configuration. ## Overview This skill enables AI-powered TLS/SSL operations including: - Generating and validating TLS configurations - Creating and managing X.509 certificates - Analyzing cipher suite security - Debugging TLS handshake failures - Configuring OpenSSL/BoringSSL/mbed TLS - Implementing certificate pinning - Testing for TLS vulnerabilities (SSLLabs-style analysis) - Generating secure cipher suite configurations ## Prerequisites - OpenSSL CLI installed (`openssl` command) - Optional: `certbot` for Let's Encrypt certificates - Optional: `testssl.sh` for vulnerability scanning ## Capabilities ### 1. Certificate Generation Generate X.509 certificates for various use cases: #### Self-Signed CA Certificate ```bash # Generate CA private key openssl genrsa -out ca.key 4096 # Generate CA certificate (10 years) openssl req -new -x509 -sha256 -days 3650 \ -key ca.key \ -out ca.crt \ -subj "/C=US/ST=California/L=San Francisco/O=MyOrg/CN=MyOrg Root CA" ``` #### Serve
- Overview
- Prerequisites
- Capabilities
- 1. Certificate Generation
- 2. TLS Configuration
- 3. Certificate Validation
- 4. TLS Handshake Debugging
- 5. Security Analysis
- 6. Certificate Pinning Implementation
- 7. mTLS Configuration
- MCP Server Integration
- TLS MCP Server (malaya-zemlya)
- Best Practices
- Process Integration
Generate CA private key openssl genrsa -out ca.key 4096 Generate CA certificate (10 years) openssl req -new -x509 -sha256 -days 3650 \ Generate server private key openssl genrsa -out server.key 2048 Generate CSR openssl req -new -sha256 \ Create extensions file for SAN cat > server.ext << EOF
What does the tls-security skill do?
Expert skill for TLS/SSL implementation and certificate management. Generate and validate TLS configurations, create and manage X.509 certificates, analyze cipher suite security, debug TLS handshake failures, and implement certificate pinning.
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill tls-security --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.