Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
sev-attestation 1.0.2 - No user-facing or internal changes; version bump only. - All documentation, code, and workflow remain unchanged.
What This Skill Does
AMD SEV-SNP remote attestation for cryptographically verifying VM identity and integrity. Runs a 6-step workflow: detecting SEV-SNP availability, generating attestation reports with a nonce, fetching AMD certificates, verifying the certificate chain (ARK/ASK/VCEK), and validating the report signature.
Automates the full 6-step AMD SEV-SNP attestation workflow with individually runnable scripts, removing the need to manually chain openssl commands and AMD KDS API calls.
When to use it
- Verifying a confidential VM before sharing secrets with it
- Proving a VM runs in a genuine AMD SEV-SNP environment for compliance audits
- Debugging attestation failures in confidential computing deployments
- Automating pre-deployment integrity checks on SEV-SNP VMs
- Validating AMD certificate chains before trusting remote workloads
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: verify this VM is running in a genuine AMD SEV-SNP environment
- 1Run detect-sev-snp.sh to check if SEV-SNP is available on the host
- 2Generate an attestation report with a random nonce using generate-report.sh
- 3Fetch ARK, ASK, and VCEK certificates from AMD KDS using the report data
- 4Verify the certificate chain from ARK down to VCEK
- 5Verify the report signature against the VCEK certificate
PASSED or FAILED with attestation report details and certificate chain validation results
Requirements
Accounts, API keys, or tools you or your AI assistant may need to set up while using this skill.