← Back to Skills Marketplace
karan9074

My Verified Agent

by Karan9074 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
136
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install my-verified-agent
Description
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic...
Usage Guidance
This skill appears to be what it says: a DID/attestation toolkit for the Billions network. Before installing or running it: - Treat the keys in $HOME/.openclaw/billions as sensitive. If you plan to use the skill long-term, set BILLIONS_NETWORK_MASTER_KMS_KEY (via skill config or environment) to enable on-disk encryption; store that master key securely and back it up — losing it will make encrypted keys irrecoverable. - Review and confirm the network endpoints used (rpc-mainnet.billions.network, identity-dashboard.billions.network, attestation-relay.billions.network, resolver.privado.id). The pairing flow sends signed JWS tokens to the project's shortener/relay services as part of normal operation — ensure you trust those domains before linking real private keys or identities. - Running 'npm install' will fetch many dependencies from npm. Consider running the install in an isolated environment (container or dedicated VM) or auditing the dependencies if you have heightened supply-chain concerns. - Keep private keys offline if you do not want them persisted on the host. The CLI supports supplying an existing private key via --key, but that key (or any generated key) will be stored in kms.json unless you delete it or configure encryption. - If you need higher assurance, inspect the repository author/ownership and verify that the listed domains and addresses match official Billions/iden3 publications; the registry source is 'unknown' so performing this attribution check increases confidence. If you are comfortable with those trade-offs, the skill's behavior is coherent with its purpose. If not, avoid storing real private keys and run the code in an isolated test environment first.
Capability Analysis
Type: OpenClaw Skill Name: my-verified-agent Version: 1.0.0 The skill bundle provides a legitimate implementation of decentralized identity (DID) management for AI agents using the iden3 protocol and Billions Network. It includes scripts for creating identities, signing challenges, and linking human identities to agents. Private keys are stored in `$HOME/.openclaw/billions/kms.json` with an optional AES-256-GCM encryption layer controlled by the `BILLIONS_NETWORK_MASTER_KMS_KEY` environment variable. Network activity is limited to necessary protocol functions, such as DID resolution via `resolver.privado.id` and interaction with the Billions Network infrastructure (e.g., `attestation-relay.billions.network`). The instructions in `SKILL.md` are focused on operational safety and protocol compliance, and no evidence of malicious intent, data exfiltration, or unauthorized execution was found.
Capability Assessment
Purpose & Capability
Name/description (Billions decentralized identity / DID linking) aligns with the packaged scripts and dependencies. The skill needs Node and the iden3/PolygonID/Ethers libraries it declares; it performs DID creation, signing, pairing URL creation, and verification — all consistent with its purpose.
Instruction Scope
Runtime instructions tell the agent/user to run npm install and the scripts, and to store data under $HOME/.openclaw/billions — consistent with the code. Important runtime behavior: the signing/pairing flow posts authorization messages (which include a callback URL containing the signed JWS) to identity-dashboard.billions.network (URL shortener) and relies on attestation-relay.billions.network as a callback target; verifySignature fetches DID data from resolver.privado.id and scripts use rpc-mainnet.billions.network. These network calls are expected for this kind of skill but expose signed attestations/JWS to designated Billions services — the user should confirm those domains are trusted.
Install Mechanism
There is no formal install spec in the registry manifest; the SKILL.md instructs running 'npm install' inside the scripts folder. This will fetch several npm packages (package-lock.json present). Using npm is expected for Node tooling but carries ordinary supply-chain risk; packages are from the public npm registry and versions are pinned in package-lock.json.
Credentials
The skill declares no required environment variables and only an optional BILLIONS_NETWORK_MASTER_KMS_KEY to enable at-rest AES-256-GCM encryption of private keys. That optional env var is appropriate for the stated purpose. Important security note: if BILLIONS_NETWORK_MASTER_KMS_KEY is not set, private keys are persisted as plain hex in $HOME/.openclaw/billions/kms.json — this is expected behavior for the tool but is a sensitive default the user must be aware of.
Persistence & Privilege
The skill stores files (kms.json, identities.json, defaultDid.json, challenges.json, credentials.json) under $HOME/.openclaw/billions; it does not request system-wide privileges or set always:true. Writing to a per-user directory is proportionate for a key management/identity tool. The skill does not attempt to modify other skills or global agent configuration.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install my-verified-agent
  3. After installation, invoke the skill by name or use /my-verified-agent
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
verified-agent-identity Skill v1.0.0 - Initial release providing decentralized identity creation, management, and agent–human linkage using Billions ERC-8004 and iden3 protocols. - Supports generating/verifying authentication proofs and linking AI agents to unique human owners. - Includes scripts for identity creation, challenge generation/signing, linkage, and signature verification. - Stores all sensitive identity data in $HOME/.openclaw/billions for OpenClaw compatibility. - Enforces strict guardrails to prevent unauthorized key/file manipulation and ensure secure handling of identity operations.
Metadata
Slug my-verified-agent
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is My Verified Agent?

Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic... It is an AI Agent Skill for Claude Code / OpenClaw, with 136 downloads so far.

How do I install My Verified Agent?

Run "/install my-verified-agent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is My Verified Agent free?

Yes, My Verified Agent is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does My Verified Agent support?

My Verified Agent is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created My Verified Agent?

It is built and maintained by Karan9074 (@karan9074); the current version is v1.0.0.

💬 Comments