Description

Fetch onchain reputation profiles via BaseCred SDK (Ethos, Talent Protocol, Farcaster/Neynar). Use when the user wants to check wallet reputation, builder score, creator score, Ethos credibility, or Farcaster account quality for any 0x address. Supports multi-source unified profiles with level derivation and recency tracking.

README (SKILL.md)

BaseCred — Onchain Reputation Queries

Name: BaseCred
Author: callmedas69

Prerequisites

Package installed in workspace: npm i basecred-sdk

API keys in workspace .env:

TALENT_PROTOCOL_API_KEY=\x3Ckey>
NEYNAR_API_KEY=\x3Ckey>          # optional — enables Farcaster scoring

Ethos Network requires no key.

Quick workflow

Run the query script from the workspace:
```
node /path/to/skills/basecred/scripts/query.mjs \x3C0x-address>
```
The script auto-locates node_modules/basecred-sdk and .env by walking up from cwd. Run it with cwd set to the workspace.
Parse the JSON output and present results to the user. Use the level tables in references/output-schema.md to translate raw scores into human-readable levels.

Presenting results

Summarize the three facets clearly:

Ethos — score + credibility level + review sentiment + vouches. Flag hasNegativeReviews if true.
Talent Protocol — builder score/level + creator score/level. Note verified status.
Farcaster — quality score (0–1) and whether it passes threshold.
Recency — recent / stale / dormant. Mention if stale or dormant as a caveat.

Highlight actionable signals: e.g. zero vouches on Ethos is an easy win, or a dormant Talent score that needs activity.

Reference

Output schema + all level tables: references/output-schema.md — read when you need to map scores → levels or explain the shape of a response.

Usage Guidance

This skill appears to do what it claims, but take these precautions before installing: (1) Provide a TALENT_PROTOCOL_API_KEY and optionally a NEYNAR_API_KEY — the registry metadata omitted these; the script will fail without the Talent key. (2) Review the basecred-sdk npm package source (or lockfile) before installing — the skill dynamically imports that package from your workspace and it will perform the network calls. (3) Avoid placing unrelated or high‑value secrets in the workspace .env; the script walks up directories and will load any .env it finds, making those values available to the process and the SDK. (4) Run the skill in an isolated workspace (or container) if you are unsure about the npm package origin, and consider using ephemeral API keys with least privilege.

Capability Analysis

Type: OpenClaw Skill Name: basecred Version: 1.0.0 The skill bundle is benign. The `SKILL.md` instructions are clear and focused on the stated purpose, showing no signs of prompt injection. The `scripts/query.mjs` script correctly uses environment variables (`TALENT_PROTOCOL_API_KEY`, `NEYNAR_API_KEY`) for API access, loading them from `.env` files or the environment. Network calls are made to legitimate API endpoints (`https://api.ethos.network`, `https://api.talentprotocol.com`, and implicitly Neynar) directly related to fetching on-chain reputation profiles. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.

Capability Assessment

ℹ Purpose & Capability

The skill's name/description align with the code and SKILL.md: it loads basecred-sdk and queries Ethos, Talent Protocol, and optionally Neynar/Farcaster. One discrepancy: registry metadata lists 'Required env vars: none' but SKILL.md and the script require TALENT_PROTOCOL_API_KEY (mandatory) and NEYNAR_API_KEY (optional). This is likely an authoring omission in metadata, not a functional mismatch.

ℹ Instruction Scope

SKILL.md instructs running the included script from the workspace and to parse its JSON output — consistent with the script. The script walks up from cwd to find node_modules/basecred-sdk and to locate a .env file (up to 5 levels) and merges its key/value pairs into process.env. That behavior is necessary to pick up API keys in a workspace .env, but it means the script will read any .env it encounters (potentially containing unrelated secrets) and make them available to the process and to the imported SDK.

✓ Install Mechanism

No install spec is provided by the skill itself; it expects the workspace to contain the npm package basecred-sdk (user runs 'npm i basecred-sdk'). This is a low-risk, typical pattern — network activity happens via the SDK package on npm, so the main supply-chain review point is that npm package.

ℹ Credentials

Requested credentials (TALENT_PROTOCOL_API_KEY required, NEYNAR_API_KEY optional) are proportionate to querying Talent Protocol and Neynar/Farcaster. However, the script's generic .env loading can import any keys present in workspace .env files, so unrelated secrets stored there would be exposed to the script and the SDK at runtime. The skill's registry metadata failing to declare these required env vars is an inconsistency.

✓ Persistence & Privilege

The skill does not request persistent inclusion (always:false), does not write to global agent config, and has no install spec that modifies system-wide settings. It runs only when invoked.

Version History

v1.0.0

Initial release - Ethos, Talent Protocol, Farcaster reputation queries

Metadata

Slug basecred

Version 1.0.0

License —

All-time Installs 0

Active Installs 0

Total Versions 1

Frequently Asked Questions

What is BaseCred?

Fetch onchain reputation profiles via BaseCred SDK (Ethos, Talent Protocol, Farcaster/Neynar). Use when the user wants to check wallet reputation, builder score, creator score, Ethos credibility, or Farcaster account quality for any 0x address. Supports multi-source unified profiles with level derivation and recency tracking. It is an AI Agent Skill for Claude Code / OpenClaw, with 1602 downloads so far.

How do I install BaseCred?

Run "/install basecred" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is BaseCred free?

Yes, BaseCred is completely free (open-source). You can download, install and use it at no cost.

Which platforms does BaseCred support?

BaseCred is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created BaseCred?

It is built and maintained by Mr. TeeClaw (@callmedas69); the current version is v1.0.0.

More Skills

BaseCred