{"id":"8001d452-ade7-4141-af7f-c27ccc7c2623","shortId":"ELwpNf","kind":"skill","title":"SLSA Verifier Build Provenance Checker","tagline":"SLSA Verifier is the official tool from the SLSA framework for verifying build provenance attestations generated by SLSA-compliant builders. It checks that software artifacts were built from the expected source, by an authorized builder, without tampering in the build pipeline.","description":"# SLSA Verifier Build Provenance Checker\n\nSLSA Verifier is the official tool from the SLSA framework for verifying build provenance attestations generated by SLSA-compliant builders. It checks that software artifacts were built from the expected source, by an authorized builder, without tampering in the build pipeline.\n\n## Installation\n\nUse the upstream install or setup path that matches your environment:\n- $ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.7.1\n- $ go install github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier\n- $ git clone git@github.com:slsa-framework/slsa-verifier.git\n\nRequirements and caveats from upstream:\n- [npm packages built using the SLSA3 Node.js builder](#npm-packages-built-using-the-slsa3-nodejs-builder)\n- | source-branch | Expects a branch like main or dev. Not supported for all GitHub Workflow triggers. | [GitHub builders](https://github.com/slsa-framework/slsa-github-generator#generation-of-provenance) |\n- #### npm packages built using the SLSA3 Node.js builder\n\nBasic usage or getting-started notes:\n- You have two options to install the verifier.\n- ### Compilation from source\n- #### Option 1: Install via go\n\n- Source: https://github.com/slsa-framework/slsa-verifier\n- Extracted from upstream docs: https://raw.githubusercontent.com/slsa-framework/slsa-verifier/HEAD/README.md\n\n## Source\n\n- [Agent Skill Exchange](https://agentskillexchange.com/skills/slsa-verifier-build-provenance-checker/)","tags":["slsa","verifier","build","provenance","checker","skills","agentskillexchange","agent-skills","ai-agents","ai-tools","awesome-list","claude-code"],"capabilities":["skill","source-agentskillexchange","skill-slsa-verifier-build-provenance-checker","topic-agent-skills","topic-ai-agents","topic-ai-tools","topic-awesome-list","topic-claude-code","topic-codex","topic-cursor","topic-llm","topic-mcp","topic-npx-skills","topic-openclaw","topic-skills-catalog"],"categories":["skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/agentskillexchange/skills/slsa-verifier-build-provenance-checker","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add agentskillexchange/skills","source_repo":"https://github.com/agentskillexchange/skills","install_from":"skills.sh"}},"qualityScore":"0.454","qualityRationale":"deterministic score 0.45 from registry signals: · indexed on github topic:agent-skills · 8 github stars · SKILL.md body (1,476 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-05-18T19:12:31.786Z","embedding":null,"createdAt":"2026-05-18T13:19:29.520Z","updatedAt":"2026-05-18T19:12:31.786Z","lastSeenAt":"2026-05-18T19:12:31.786Z","tsv":"'/skills/slsa-verifier-build-provenance-checker/)':216 '/slsa-framework/slsa-github-generator#generation-of-provenance)':167 '/slsa-framework/slsa-verifier':202 '/slsa-framework/slsa-verifier/head/readme.md':209 '/slsa-framework/slsa-verifier/v2/cli/slsa-verifier':116 '/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.7.1':111 '/slsa-verifier.git':123 '1':195 'agent':211 'agentskillexchange.com':215 'agentskillexchange.com/skills/slsa-verifier-build-provenance-checker/)':214 'artifact':31,78 'attest':20,67 'author':40,87 'basic':176 'branch':148,151 'build':3,18,46,50,65,93 'builder':26,41,73,88,136,145,164,175 'built':33,80,131,140,170 'caveat':126 'check':28,75 'checker':5,52 'clone':118 'compil':191 'compliant':25,72 'dev':155 'doc':206 'environ':106 'exchang':213 'expect':36,83,149 'extract':203 'framework':15,62,122 'generat':21,68 'get':180 'getting-start':179 'git':117 'git@github.com':119 'github':160,163 'github.com':110,115,166,201 'github.com/slsa-framework/slsa-github-generator#generation-of-provenance)':165 'github.com/slsa-framework/slsa-verifier':200 'github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier':114 'github.com/slsa-framework/slsa-verifier/v2/cli/slsa-verifier@v2.7.1':109 'go':107,112,198 'instal':95,99,108,113,188,196 'like':152 'main':153 'match':104 'node.js':135,174 'nodej':144 'note':182 'npm':129,138,168 'npm-packages-built-using-the-slsa3-nodejs-builder':137 'offici':10,57 'option':186,194 'packag':130,139,169 'path':102 'pipelin':47,94 'proven':4,19,51,66 'raw.githubusercontent.com':208 'raw.githubusercontent.com/slsa-framework/slsa-verifier/head/readme.md':207 'requir':124 'setup':101 'skill':212 'skill-slsa-verifier-build-provenance-checker' 'slsa':1,6,14,24,48,53,61,71,121 'slsa-compli':23,70 'slsa-framework':120 'slsa3':134,143,173 'softwar':30,77 'sourc':37,84,147,193,199,210 'source-agentskillexchange' 'source-branch':146 'start':181 'support':157 'tamper':43,90 'tool':11,58 'topic-agent-skills' 'topic-ai-agents' 'topic-ai-tools' 'topic-awesome-list' 'topic-claude-code' 'topic-codex' 'topic-cursor' 'topic-llm' 'topic-mcp' 'topic-npx-skills' 'topic-openclaw' 'topic-skills-catalog' 'trigger':162 'two':185 'upstream':98,128,205 'usag':177 'use':96,132,141,171 'verifi':2,7,17,49,54,64,190 'via':197 'without':42,89 'workflow':161","prices":[{"id":"6471444f-9c9d-4a01-982f-ceba026e512a","listingId":"8001d452-ade7-4141-af7f-c27ccc7c2623","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"agentskillexchange","category":"skills","install_from":"skills.sh"},"createdAt":"2026-05-18T13:19:29.520Z"}],"sources":[{"listingId":"8001d452-ade7-4141-af7f-c27ccc7c2623","source":"github","sourceId":"agentskillexchange/skills/slsa-verifier-build-provenance-checker","sourceUrl":"https://github.com/agentskillexchange/skills/tree/main/skills/slsa-verifier-build-provenance-checker","isPrimary":false,"firstSeenAt":"2026-05-18T13:19:29.520Z","lastSeenAt":"2026-05-18T19:12:31.786Z"}],"details":{"listingId":"8001d452-ade7-4141-af7f-c27ccc7c2623","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"agentskillexchange","slug":"slsa-verifier-build-provenance-checker","github":{"repo":"agentskillexchange/skills","stars":8,"topics":["agent-skills","ai-agents","ai-tools","awesome-list","claude-code","codex","cursor","llm","mcp","npx-skills","openclaw","skills-catalog"],"license":"mit","html_url":"https://github.com/agentskillexchange/skills","pushed_at":"2026-05-18T19:02:17Z","description":"The open catalog of AI agent skills — 2,000+ security-scanned skills for Claude Code, Cursor, Codex, and more.","skill_md_sha":"f7407dcfaf76a277242f9e334dd36a33a5b9cf81","skill_md_path":"skills/slsa-verifier-build-provenance-checker/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/agentskillexchange/skills/tree/main/skills/slsa-verifier-build-provenance-checker"},"layout":"multi","source":"github","category":"skills","frontmatter":{"name":"SLSA Verifier Build Provenance Checker","description":"SLSA Verifier is the official tool from the SLSA framework for verifying build provenance attestations generated by SLSA-compliant builders. It checks that software artifacts were built from the expected source, by an authorized builder, without tampering in the build pipeline."},"skills_sh_url":"https://skills.sh/agentskillexchange/skills/slsa-verifier-build-provenance-checker"},"updatedAt":"2026-05-18T19:12:31.786Z"}}