Implementing Mtls For Zero Trust Services
mukul975/Anthropic-Cybersecurity-Skills
Configures mutual TLS (mTLS) authentication between microservices using Python cryptography library for certificate generation and ssl module for TLS verification.
Add an EAP authentication method (e.g. An agent skill from talkincode/toughradius.
Install Add Eap Method
$ npx skills add talkincode/toughradius --skill add-eap-method -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install talkincode/toughradius add-eap-method --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/talkincode/toughradius.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/add-eap-method .claude/skills/add-eap-method && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "add-eap-method" agent skill from https://github.com/talkincode/toughradius/tree/main/.agents/skills/add-eap-method into .claude/skills/add-eap-method/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "add-eap-method", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/talkincode/toughradius/tree/main/.agents/skills/add-eap-methodType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add talkincode/toughradius --skill add-eap-method -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install talkincode/toughradius add-eap-method --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/talkincode/toughradius.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/add-eap-method .agents/skills/add-eap-method && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "add-eap-method" agent skill from https://github.com/talkincode/toughradius/tree/main/.agents/skills/add-eap-method into .agents/skills/add-eap-method/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "add-eap-method", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add talkincode/toughradius --skill add-eap-method -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install talkincode/toughradius add-eap-method --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/talkincode/toughradius.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/add-eap-method .cursor/skills/add-eap-method && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "add-eap-method" agent skill from https://github.com/talkincode/toughradius/tree/main/.agents/skills/add-eap-method into .cursor/skills/add-eap-method/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "add-eap-method", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/talkincode/toughradius.git --path .agents/skills/add-eap-method--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add talkincode/toughradius --skill add-eap-method -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install talkincode/toughradius add-eap-method --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/talkincode/toughradius.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/add-eap-method .gemini/skills/add-eap-method && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "add-eap-method" agent skill from https://github.com/talkincode/toughradius/tree/main/.agents/skills/add-eap-method into .gemini/skills/add-eap-method/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "add-eap-method", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install talkincode/toughradius add-eap-methodInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add talkincode/toughradius --skill add-eap-method -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/talkincode/toughradius.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/add-eap-method .github/skills/add-eap-method && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "add-eap-method" agent skill from https://github.com/talkincode/toughradius/tree/main/.agents/skills/add-eap-method into .github/skills/add-eap-method/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "add-eap-method", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add talkincode/toughradius --skill add-eap-method -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install talkincode/toughradius add-eap-method --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/talkincode/toughradius.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/add-eap-method .opencode/skills/add-eap-method && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "add-eap-method" agent skill from https://github.com/talkincode/toughradius/tree/main/.agents/skills/add-eap-method into .opencode/skills/add-eap-method/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "add-eap-method", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
add-eap-method- GitHub stars
- 691
- Token cost
- ~802 tokens
- SKILL.md length
- 277 words
- Files
- 1
- Skills in repo
- 15
- Repo updated
- First seen
- Licence
- MIT
At a glance
Add an EAP authentication method (e.g. An agent skill from talkincode/toughradius.
- Works in 5 steps: Handler skeleton: implement the handler… → State management: reuse statemanager;… → Registration: wire into the coordinator… → …
- The change involves EAP handshake
- SKILL.md covers When to use, Pre-research, Protocol specs & reference… and Implementation steps, plus 2 more sections
- Calls go
What it does
Add Eap Method is an agent skill from talkincode/toughradius. Add an EAP authentication method (e.g. EAP-TLS) within the existing EAP handler system (TR-F004). Use when the change involves EAP handshake, fragmentation, state management, or failure semantics.
Its SKILL.md is about 800 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Frontend & Design, covering State management, Authentication and Cryptography. The repository describes itself as: A powerful, open-source RADIUS server designed for ISPs, enterprise networks, and carriers. Supports standard RADIUS protocols, a full EAP / 802.1X authentication suite (EAP-TLS… The licence is MIT.
When your agent uses it
- The change involves EAP handshake
- State management
- Failure semantics
Example prompts
- “/add-eap-method”
Workflow steps
5 steps, taken from the first numbered list in SKILL.md.
- Handler skeleton: implement the handler interface at internal/radiusd/plugins/eap/handlers/_handler.go (mirror mschapv2).
- State management: reuse statemanager; correlate multi-round handshakes / fragmentation (TLS) via the EAP State, and do not add branches…
- Registration: wire into the coordinator and the enabled list (EapMethod config) the same way existing handlers do.
- Failure semantics: return an explicit reason on failure, convert it to AuthError, and emit metrics (reference internal/radiusd/errors and…
- Config schema: if new config is needed (e.g. certificate paths), see ../add-config-schema/SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 50907c9. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
go
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
github.comberyju.io
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Add Eap Method loads about 802 tokens when it runs. Until then it costs about 53 tokens; SKILL.md has 277 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from talkincode/toughradius at commit 50907c9, republished under its MIT licence (© talkincode). 277 words, ~802 tokens.
Download SKILL.mdSave it as
.claude/skills/add-eap-method/SKILL.md (or your agent's skills folder).- name
- add-eap-method
- description
- Add an EAP authentication method (e.g. EAP-TLS) within the existing EAP handler system (TR-F004). Use when the change involves EAP handshake, fragmentation, state management, or failure semantics.
Skill: Add an EAP Authentication Method
Feature ID:
TR-F004| Milestone: M1 (EAP-TLS)
When to use
When adding a new EAP method (e.g. EAP-TLS) within the existing EAP system.
Pre-research
view internal/radiusd/plugins/eap/coordinator.go # coordinator, do NOT rewrite
view internal/radiusd/plugins/eap/interfaces.go # handler interface
file_search "internal/radiusd/plugins/eap/handlers/*_handler.go"
view internal/radiusd/plugins/eap/statemanager/ # EAP state management
grep_search "EapMethod" --include internal/app/** # enabled-list configExisting references: md5_handler.go, mschapv2_handler.go, otp_handler.go.
Protocol specs & reference implementations
International standards (read repo-local docs/rfcs/ first):
rfc3748-eap.txt- EAP frameworkrfc5216-eap-tls.txt- EAP-TLS (handshake, fragmentation, identity)rfc3579-radius-eap-support.txt- RADIUS carrying EAP (EAP-Message / Message-Authenticator)rfc5247-eap-key-management.txt- EAP key managementrfc7499-packet-fragmentation.txt- RADIUS fragmentation- Others:
rfc5281-eap-ttls.txt,rfc7170-teap.txt(if extending tunneled methods)
Backfill missing specs per ../reference-rfc/SKILL.md.
Reference implementations (for ideas only; mind licensing and protocol compatibility, do not copy incompatible code):
- BeryJu
radius-eap: https://github.com/BeryJu/radius-eap - Implementation notes: https://beryju.io/blog/2025-05-implementing-eap/
Implementation steps
- Handler skeleton: implement the handler interface at
internal/radiusd/plugins/eap/handlers/<method>_handler.go(mirror mschapv2). - State management: reuse
statemanager; correlate multi-round handshakes / fragmentation (TLS) via the EAP State, and do not add branches inside the coordinator. - Registration: wire into the coordinator and the enabled list (
EapMethodconfig) the same way existing handlers do. - Failure semantics: return an explicit reason on failure, convert it to
AuthError, and emit metrics (referenceinternal/radiusd/errorsandradius_metrics.go). - Config schema: if new config is needed (e.g. certificate paths), see
../add-config-schema/SKILL.md.
Boundaries
- Do not rewrite the EAP coordinator (
coordinator.go). - For EAP-TLS, deliver a minimal working auth path first; certificate revocation / policy come in later milestones.
eap-otpcurrently uses a fixed sample OTP; do not copy its fixed value when implementing a real method.
Acceptance
- Handler unit tests + end-to-end auth tests pass
- Failure cases have explicit reject reasons and metrics
-
go test ./internal/radiusd/...andgolangci-lint runpass - An end-to-end acceptance test is added under
test/integration/(see../add-acceptance-test/SKILL.md), executed by CI - PR references
TR-F004and the M1 subtask ID, and cites the RFC clauses relied upon
© talkincode, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .agents/skills/add-eap-method of talkincode/toughradius.
Open the folder on GitHubat commit 50907c9
Compare with similar skills
Add Eap Method next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Add Eap Method this skilltalkincode/toughradius | 691 | — | ~802 | Automated safety check: Pass | MIT | |
| Implementing Mtls For Zero Trust Servicesmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~650 | Automated safety check: Pass | Apache-2.0 | |
| Implementing Zero Knowledge Proof For Authenticationmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~858 | Automated safety check: Pass | Apache-2.0 | |
| Security ProtocolNoobyGains/godmode | 107 | — | ~2.4k | Automated safety check: Notes | MIT | |
| Reviewing Cryptographytrilwu/secskills | 156 | — | ~2.7k | Automated safety check: Pass | MIT | |
| API Security EngineerFerroxLabs/wayland | 608 | — | ~3.1k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Implementing Zero Knowledge Proof For Authentication
mukul975/Anthropic-Cybersecurity-Skills
Implements the Schnorr identification protocol and a simplified Zero-Knowledge Password Proof (ZKPP) over the discrete logarithm problem, letting a prover authenticate by demonstrating knowledge of…
Security Protocol
NoobyGains/godmode
A skill your agent uses when writing code that processes user input, manages authentication or authorization, constructs database queries, handles file operations, interacts with external data…
Reviewing Cryptography
trilwu/secskills
Review cryptographic implementations and protocol usage for misuse — weak primitives, nonce and IV handling, key management, authentication of ciphertext, randomness, timing side channels, TLS and…
API Security Engineer
FerroxLabs/wayland
API security expertise covering OWASP API Security Top 10, API authentication and authorization patterns, API key management, rate limiting and throttling, JWT security best practices, OAuth 2.0…
Search Params
promptfoo/promptfoo
URL search param and hash state management. An agent skill from promptfoo/promptfoo.
More from talkincode/toughradius
All 15 skills in this repoRelease Version
talkincode/toughradius
Review merged PRs since the last Git tag and decide whether a ToughRADIUS release is warranted.
Add Acceptance Test
talkincode/toughradius
Write CI-executable acceptance/integration tests for protocol or end-to-end changes (TR-F022).
Add Adminapi Endpoint
talkincode/toughradius
Add a group of Admin REST endpoints in the management backend (TR-F012).
Add Radius Vendor
talkincode/toughradius
Add or extend vendor VSA parsing and response enhancement (TR-F005).
Add React Admin Resource
talkincode/toughradius
Add a resource or page in the React Admin management backend (TR-F013).
Document Go APIs
talkincode/toughradius
Standard-library-style Go API documentation and comment conventions (TR-F024).
Related
Categories
Questions about Add Eap Method
What does Add Eap Method do?
Add an EAP authentication method (e.g. An agent skill from talkincode/toughradius. Add Eap Method is an agent skill from talkincode/toughradius.g.
When should I use Add Eap Method?
Add Eap Method fits situations like: the change involves EAP handshake; state management; failure semantics.
How do I install Add Eap Method in Claude Code?
Run `npx skills add talkincode/toughradius --skill add-eap-method -a claude-code`. Or copy the skill folder (.agents/skills/add-eap-method in talkincode/toughradius) into .claude/skills/add-eap-method in your project. Claude Code loads it when a task matches its description.
How do I install Add Eap Method in Codex?
Run `npx skills add talkincode/toughradius --skill add-eap-method -a codex`. Or copy the skill folder (.agents/skills/add-eap-method in talkincode/toughradius) into .agents/skills/add-eap-method in your project. Codex loads it when a task matches its description.
Can I use Add Eap Method in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add talkincode/toughradius --skill add-eap-method -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/add-eap-method, .gemini/skills/add-eap-method, .github/skills/add-eap-method and .opencode/skills/add-eap-method in your project.
What does Add Eap Method need to run?
Going by SKILL.md and its folder, Add Eap Method needs the command-line tools its instructions call (go).
Does Add Eap Method access the network?
SKILL.md names 2 domains. As links in the text: github.com and beryju.io. This is read from the text; nothing was executed.
Is Add Eap Method safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Add Eap Method use?
Add Eap Method is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Add Eap Method use?
About 802 tokens (SKILL.md is roughly 3.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Add Eap Method?
Skills that share tags, products or a category with Add Eap Method: Implementing Mtls For Zero Trust Services (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Implementing Zero Knowledge Proof For Authentication (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Security Protocol (NoobyGains/godmode, 107 stars) and Reviewing Cryptography (trilwu/secskills, 156 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Add Eap Method?
talkincode (a GitHub organization) maintains it in talkincode/toughradius, which has 691 GitHub stars. The repository holds 15 skills in this directory. The repository was last updated on October 3, 2026.
Source: talkincode/toughradius on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.