SECURITY / Infisical Inc.
Infisical PKI
Pins Infisical's certificate-management skill and its rule to send SSH certificates to a different skill.
“Separates Infisical certificate management from secrets, SSH certificates, and KMS, and says ACME, EST, and SCEP clients keep the private key.”
01 / THE REASONING
Why this made the selection.
- The catalogue has Infisical secret scanning and not this PKI skill.
- The file routes SSH certificates, stored secret values, and KMS encryption away from the PKI product so those are not treated as the same API.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- skills/infisical-pki/SKILL.md
- README.md
- LICENSE
Our findings
- The skill says certificate management is a separate product from secrets management and uses the cert-manager project type.
- It says an SSH certificate request belongs in infisical-dynamic-secrets, not in this PKI skill.
- It says ACME, EST, and SCEP clients generate the private key and Infisical sees the CSR, and it says not to print private key material beyond a placeholder.
Not established by this review
- The resource was not executed and its tools were not called.
- No Infisical API was called.
- The bundled references named by the skill were not opened.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
DOCUMENTED COMMAND
npx skills add Infisical/ai-skillsRun in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above.
- The README first recommends the hosted docs MCP at https://infisical.com/docs/mcp.
- The skills alternative is the command above.
- The Claude Code marketplace line in the same file is /plugin marketplace add Infisical/ai-skills.
Before you start
- A skills-compatible agent, or an MCP client if the docs server is used instead
- An Infisical project if certificates are actually issued
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- infisical-pki SKILL.md ↗Checked
https://github.com/Infisical/ai-skills/blob/d7e7fa443893d7ba10895f926407da27751ea096/skills/infisical-pki/SKILL.md
Supports: product boundary and private-key rule
- Repository README ↗Checked
https://github.com/Infisical/ai-skills/blob/d7e7fa443893d7ba10895f926407da27751ea096/README.md
Supports: docs MCP recommendation and skills install line
- Repository LICENSE ↗Checked
https://github.com/Infisical/ai-skills/blob/d7e7fa443893d7ba10895f926407da27751ea096/LICENSE
Supports: MIT License