safe-encryption-skill

Free

Modern encryption alternative to GPG/PGP with post-quantum support

FreeFree tier

Type

Open Source

Visit Website GitHub (40 stars)

About safe-encryption-skill

SAFE encryption skill for AI coding assistants. It enables encrypting and decrypting files using SAFE, a modern encryption alternative to GPG/PGP with post-quantum support, composable authentication paths, and random-access editing. Includes agent-to-agent encrypted communication capabilities. The skill works with AI coding assistants such as Cursor, Claude Desktop, and Windsurf. It supports password/key encryption, keypair generation (x25519, p-256, ml-kem-768), two-factor encryption, multi-party encryption, and editing encrypted files without full re-encryption. It can also set up agent identities, exchange encrypted messages between agents, and auto-generate AGENTS.md files. Installation is available via the Skills CLI, npm, or manual setup. Requires the SAFE CLI or falls back to a web interface if the CLI is unavailable. An optional MCP server exposes encrypt/decrypt/keygen as native tool calls.

Key Features

Encrypt/decrypt files with passwords or public keys

Generate encryption keypairs (x25519, p-256, ml-kem-768)

Set up two-factor encryption (password + key)

Configure multi-party encryption (separation of duties)

Use post-quantum encryption for future-proof security

Edit encrypted files without full re-encryption (random-access editing)

Manage recipients (add/remove/rotate keys)

Exchange encrypted messages with other agents

Auto-generate AGENTS.md for projects

Web interface fallback when CLI is not available

Pros & Cons

Pros

Modern alternative to GPG/PGP with post-quantum support
Composable authentication paths and random-access editing
Agent-to-agent encrypted communication built in
Multiple installation methods (CLI, npm, pip, cargo, or manual)
Fallback web interface if CLI cannot be installed
Works with popular AI coding assistants (Cursor, Claude Desktop, Windsurf)
Optional MCP server for seamless tool integration in AI assistants

Cons

Dependent on SAFE CLI or web interface for encryption operations
Requires installation and configuration for AI assistants that support the skills ecosystem
Relatively new and less established compared to GPG/PGP

Best For

Secure files with password or public key encryption using an AI coding assistantSet up two-factor encryption for sensitive project filesEnable post-quantum secure communication between agentsCollaborative encryption with multi-party key setupEdit encrypted files without full re-encryption (e.g., secrets management)Exchange encrypted messages across text channels (e.g., pastebin, chat)

FAQ

How do I install the safe-encryption-skill?

Use the Skills CLI: npx skills add grittygrease/safe-encryption-skill. Alternatively install via npm: npm install @grittygrease/safe-encryption-skill, or manually clone the repository and copy the SKILL.md file to your AI assistant's skills folder.

Do I need the SAFE CLI to use this skill?

The skill teaches the AI assistant how to use the safe command. You can install the SAFE CLI via curl, pip, npm, or cargo. If you cannot install the CLI, the skill automatically falls back to the web interface at thesafe.dev, so no installation is required.

What encryption algorithms are supported?

The skill supports keypair generation for x25519, p-256, and ml-kem-768 (post-quantum). It also supports password-based encryption and two-factor encryption combining password and key.

Which AI coding assistants are compatible?

This skill works with Cursor, Claude Desktop, Windsurf, and other AI coding assistants that support the skills ecosystem.

Can agents exchange encrypted messages?

Yes, the skill includes agent-to-agent encrypted communication capabilities. Agents can set up identities, create AGENTS.md files, and exchange encrypted messages across any text channel.