How does it check the latest version of the specification?

The skill automatically discovers the latest spec version by fetching the official build site from the C2PA organization's repository, ensuring your implementation is checked against current standards.

Does this skill support specific C2PA versions?

Yes, you can optionally provide a target version (e.g., 2.1) and the skill will fetch the corresponding specification documents for that specific release.

What is the C2PA Spec Compliance skill?

It is a specialized capability for Claude Code that reviews code and designs to ensure they meet the Coalition for Content Provenance and Authenticity (C2PA) technical standards.

What specific components does this skill audit?

It checks manifest structures, JUMBF boxes, claim fields, assertions, signature algorithms, hash binding, and trust validation/certificate chains.

When should I use this skill?

It is best used during the planning phase to validate designs, during code reviews to verify implementations, or during testing to troubleshoot compliance errors.

C2PA Spec Compliance

Name: C2PA Spec Compliance
Author: kempsterrrr

bykempsterrrr

•

セキュリティとテスト

Verifies software and code implementations against the official C2PA (Coalition for Content Provenance and Authenticity) specifications for content provenance.

概要

The C2PA Spec Compliance skill provides developers with an automated way to audit their implementations against the complex requirements of the Coalition for Content Provenance and Authenticity standard. By dynamically fetching official specifications from the C2PA repository, this skill can analyze code, designs, and manifests to ensure compliance with JUMBF structures, claim generation, signature algorithms, and hash binding. It provides a structured report with specific citations from the spec, making it an essential tool for developers building trustworthy digital content systems that require verifiable origin and edit history.

主な機能

Verification of hash binding and certificate chain handling
1 GitHub stars
Audit of required claim fields, assertions, and signature algorithms
Structured compliance reports with direct citations to specification sections
Validation of JUMBF box structures, labels, and nesting hierarchies
Dynamic fetching of the latest or specific C2PA specification versions

ユースケース

Validating architectural designs for new content provenance systems
Reviewing manifest generation code for compliance before deployment
Troubleshooting non-compliant content credentials in digital media workflows

概要

主な機能

Verification of hash binding and certificate chain handling
1 GitHub stars
Audit of required claim fields, assertions, and signature algorithms
Structured compliance reports with direct citations to specification sections
Validation of JUMBF box structures, labels, and nesting hierarchies
Dynamic fetching of the latest or specific C2PA specification versions

ユースケース

Validating architectural designs for new content provenance systems
Reviewing manifest generation code for compliance before deployment
Troubleshooting non-compliant content credentials in digital media workflows