Yubikey-agent is an easy to use ssh-agent for YubiKeys, written in Go. The key is generated on the YubiKey and can't be extracted. Every session requires the PIN, every login requires a touch. The setup takes care of the PUK and the management key.