A tiny, deliberately harmless Claude Code / Codex skill: it tells one short, clean programming joke and does nothing else. It exists as a signed skill you can install and verify, and as the worked example behind the PromptSign demo — a real skill, signed by this repo's own release workflow, that you can check for yourself.
Copy skills/tell-a-joke/ into your agent's skills directory (for Claude Code,
~/.claude/skills/), or install it however you install skills.
This skill is signed with PromptSign using Sigstore's keyless flow — the same infrastructure behind npm provenance and PyPI attestations. There is no key involved; the signature is made by this repo's own GitHub Actions release workflow.
Check a copy you have on disk:
promptsign verify ./skills/tell-a-joke
You should see it signed by this repository's release workflow:
https://github.com/PromptSign/tell-a-joke/.github/workflows/promptsign.yml@<tag>
If you have nothing installed, you can verify in the browser at https://promptsign.ai/verify by dropping the folder in.
A signature proves origin and integrity — that these exact bytes came, unmodified, from this repository's workflow. It is not a safety verdict, and it does not need to be: if the file is ever tampered with, or a copy is published under a different identity, verification says so.
Apache-2.0. See LICENSE.