← Back to Skills Marketplace
Way
by
Erasmus Hagen
· GitHub ↗
· v1.0.0
· MIT-0
99
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install way
Description
Shorthand for /whoareyou — show your verified wayID identity card
Usage Guidance
This skill is mostly coherent with its goal, but be cautious: SKILL.md requires reading ~/.openclaw/identity/device.json — a file that includes your Ed25519 privateKey — even though the document says only the publicKey is needed. Before installing/use, ask the skill author to (1) update the metadata to declare the required config path, (2) change the file format or provide a helper that exposes only the publicKey (so the agent never reads privateKey), or (3) confirm in code that the privateKey is never read, logged, or transmitted. Also verify the trustworthiness of the way.je endpoints (TLS, correct hostname), and only run this skill in environments where exposing the identity file for read access is acceptable. If you are not comfortable with any possibility of the privateKey being read or transmitted, do not install or invoke the skill.
Capability Analysis
Type: OpenClaw Skill
Name: way
Version: 1.0.0
The skill retrieves the agent's public key from a local configuration file (~/.openclaw/identity/device.json) and sends it to an external API (way.je) to fetch an identity card. While the instructions in SKILL.md are explicit about only using the public key and include safety constraints against browser usage or data fabrication, the access to a file containing private keys and the use of external network calls are high-risk capabilities that warrant a suspicious classification under the provided criteria.
Capability Assessment
Purpose & Capability
The described purpose (show a verified wayID card) matches the runtime steps (read a public key and call way.je APIs). However the skill metadata claims no required config paths or credentials while SKILL.md explicitly requires reading ~/.openclaw/identity/device.json — a clear metadata/instruction mismatch.
Instruction Scope
Instructions limit actions to two HTTPS API calls to way.je and a single local file read. They explicitly forbid opening a browser and forbid inventing data. That scope is appropriate for the stated purpose, but the single local file contains both publicKey and privateKey; although the doc says only publicKey is needed, reading a file that holds a privateKey increases risk if the agent mishandles the content.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This is low-risk from an install mechanism perspective.
Credentials
The skill requests no environment variables or declared config paths, yet it requires reading a sensitive local file (~/.openclaw/identity/device.json) that contains a private key. The lack of declared config requirements is inconsistent and the implicit need to access a file with private material is disproportionate unless the agent strictly extracts only the publicKey and the implementation guarantees the privateKey is never read/exfiltrated.
Persistence & Privilege
The skill does not request persistent presence (always is false), is user-invocable, and does not request system-wide changes. No elevation of privilege or persistent hooks are requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install way - After installation, invoke the skill by name or use
/way - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the "way" skill — view your verified wayID identity card.
- Provides a shorthand command for displaying your wayID identity card, equivalent to `/whoareyou`
- Securely fetches and displays verified identity information using your Ed25519 public key
- Ensures only data from the wayID API is shown — never invents or fabricates details
- Clearly shows verification status and a direct link to your identity certificate
Metadata
Frequently Asked Questions
What is Way?
Shorthand for /whoareyou — show your verified wayID identity card. It is an AI Agent Skill for Claude Code / OpenClaw, with 99 downloads so far.
How do I install Way?
Run "/install way" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Way free?
Yes, Way is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Way support?
Way is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Way?
It is built and maintained by Erasmus Hagen (@erasmus); the current version is v1.0.0.
More Skills