← Back to Skills Marketplace
266
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install verified-agent-identity-4
Description
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic...
Usage Guidance
What to check before installing:
- Expect the skill to create and store private keys and DID state at $HOME/.openclaw/billions. If you do not want keys on disk, do not install.
- By default keys are stored in plaintext unless you set BILLIONS_NETWORK_MASTER_KMS_KEY. If you plan to use this skill, set BILLIONS_NETWORK_MASTER_KMS_KEY to a strong secret (and back it up) to enable AES-256-GCM encryption of keys.
- The SKILL.md instructs running 'npm install' but the registry metadata does not list 'npm' as a required binary — ensure you have a matching Node/npm runtime (package-lock indicates Node >=20 is expected).
- The skill makes HTTPS calls to Billions network services (rpc-mainnet.billions.network, attestation-relay.billions.network, identity-dashboard.billions.network) and to resolver.privado.id — review and confirm these endpoints are acceptable for your environment.
- The scripts accept an existing private key via command-line arguments; be careful not to expose or pass secrets in shell history or CI logs.
- If you need stronger assurance, review the included source files (kms handling, storage, and network code) and test in an isolated environment. The inconsistencies (undeclared env var, missing npm requirement, and plaintext fallback) are explainable but important — handle secrets intentionally.
Capability Analysis
Type: OpenClaw Skill
Name: verified-agent-identity-4
Version: 0.1.0
The skill bundle provides a decentralized identity (DID) management system for AI agents using the iden3 protocol and the Billions Network. It allows agents to generate identities, sign challenges, and link their DIDs to human owners. Sensitive data, including private keys, is stored locally in `$HOME/.openclaw/billions/kms.json` with support for AES-256-GCM at-rest encryption if a master key is provided via environment variables. Network activity is restricted to legitimate identity resolvers (resolver.privado.id) and the project's infrastructure (billions.network). The instructions in SKILL.md include explicit safety guardrails for the AI agent, and the code follows standard cryptographic practices without evidence of exfiltration, backdoors, or malicious intent.
Capability Assessment
Purpose & Capability
Name/description (decentralized DID management on Billions Network) aligns with the included scripts: DID creation, challenge generation/signing, linking humans to agent DIDs, and signature verification. Network endpoints and libraries used (iden3, polygonid, ethers) are consistent with the stated purpose.
Instruction Scope
SKILL.md instructs running the included Node scripts (npm install then node scripts/...). The runtime steps read/write identity material under $HOME/.openclaw/billions and perform network calls to Billions/Privado services. The README also forbids manual cryptographic workarounds. This scope is appropriate for an identity skill, but the SKILL metadata omitted 'npm' even though instructions require running 'npm install'.
Install Mechanism
There is no formal install spec in the registry entry (instruction-only), yet the package includes a scripts/ package.json and package-lock.json and the runtime instructions call 'npm install'. Dependencies are pulled from npm (well-known packages). This is moderate-risk but expected for Node-based tooling; absence of an explicit install spec in the registry is an inconsistency users should notice.
Credentials
The code reads an optional master key environment variable (BILLIONS_NETWORK_MASTER_KMS_KEY) to enable AES-256-GCM encryption of private keys, but the registry metadata did not declare any required environment variables. Keys are persisted to $HOME/.openclaw/billions/kms.json and, if the master key is not set, they are stored as plain hex. The use of a sensitive env var (master KMS key) is reasonable for this skill, but it should be declared explicitly and users must understand the plaintext fallback behavior.
Persistence & Privilege
The skill persists keys and identity files to $HOME/.openclaw/billions (documented in README/SKILL.md). It does not request 'always: true' or system-wide config modifications. File writes are expected for an identity management skill, but this is persistent sensitive data and should be accepted intentionally by the user.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install verified-agent-identity-4 - After installation, invoke the skill by name or use
/verified-agent-identity-4 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of Verified Agent Identity on Billions Network
- Enables AI agents to create, manage, and link decentralized identities (DIDs) to human owners using Billions (ERC-8004) and Attestation Registries.
- Provides commands to create and list identities, generate and sign authentication challenges, verify signatures, and link human DIDs.
- Strict usage guardrails: always check for existing identity before linking, halt on script error, prohibit manual cryptography or file edits.
- All identity and credential data stored in `$HOME/.openclaw/billions` for OpenClaw compatibility.
- Documentation includes clear security guidance and example flows for agent-to-human linking and identity verification.
Metadata
Frequently Asked Questions
What is Verified Agent Identity?
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic... It is an AI Agent Skill for Claude Code / OpenClaw, with 266 downloads so far.
How do I install Verified Agent Identity?
Run "/install verified-agent-identity-4" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Verified Agent Identity free?
Yes, Verified Agent Identity is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Verified Agent Identity support?
Verified Agent Identity is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Verified Agent Identity?
It is built and maintained by devkonten (@devkonten); the current version is v0.1.0.
More Skills