Claude Code skills as signed transferable artifacts.

Default content: a regulated-document-author skill teaching Claude Code to author SOX controls, FDA records, IRB protocols. The choice of example is deliberate — skill provenance matters most where outputs face regulatory scrutiny.

Customize via text editor + re-paste to build your own skill. The same XML shape works for any skill domain.

The skill renders as styled documentation with: a header (name + activation description), when-to-use guidance in a highlighted block, numbered instructions, examples, and at the bottom a code block containing the raw SKILL.md ready to copy into Claude Code.

The skill source gains a <signature> child with your ECDSA-P256 signature and embedded public key. Anyone with the skill can verify it was authored by you without contacting you.

For multi-author review: a second identity can sign the same skill source (counter-signature), without invalidating the first signature. Same multi-party attestation pattern as the compliance-audit-trail stream.

One HTML file (~90 KB) containing the canvas, all features, your signed skill, the stylesheet, the public keys for verification. Distribution-channel-agnostic: email, static site, USB stick, anywhere.

Claude Code picks up the skill on next session and will invoke it when task descriptions match the activation description in the skill's frontmatter.

You now have a signed, verifiable, transferable skill installed. The bundle.html remains as your permanent record of the skill's authorship and content.