← Back to Skills Marketplace
Sardis Identity
by
EfeDurmaz16
· GitHub ↗
· v1.0.0
342
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install sardis-identity
Description
Agent identity management with TAP protocol verification and reputation tracking
Usage Guidance
This skill appears to do what it says (manage agent identities via Sardis) but has two things to check before installing: (1) SKILL.md mentions installing @sardis/sdk via npm while the registry says 'no install spec' — confirm whether your platform will actually install that package, and if so, review the package on npm (publisher, versions, source) before proceeding. (2) The examples use openssl to create keys, but openssl is not listed in the required binaries — ensure openssl availability and understand where private keys will be stored. Treat SARDIS_API_KEY as sensitive (it may enable payment or wallet actions); prefer a least-privilege API key and confirm the key's scope and revocation procedures. If you rely on this skill in production, validate the sardis.sh service identity (homepage and package source) and consider testing in an isolated environment first.
Capability Analysis
Type: OpenClaw Skill
Name: sardis-identity
Version: 1.0.0
The sardis-identity skill provides legitimate agent identity and reputation management capabilities via the Sardis API (api.sardis.sh). It uses standard tools like curl, jq, and openssl for cryptographic key generation and API interaction, with no evidence of malicious behavior, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
Name, description, and runtime instructions consistently target Sardis's identity/reputation API and require an API key. Declared binaries (curl, jq) are appropriate for the provided examples. However, the SKILL.md metadata advertises an npm package install (@sardis/sdk) despite the registry listing this as an instruction-only skill with no install spec — this mismatch should be resolved.
Instruction Scope
Runtime instructions include generating keypairs with openssl and reading/writing key files and using the SARDIS_API_KEY to register agents and submit reputation. Those actions are within the skill's stated purpose, but the instructions call the openssl CLI while the registry's required binaries list does not include openssl — an undeclared dependency. The skill also emphasizes payment-capable capabilities (e.g., 'payments', 'wallet_id'), so the SARDIS_API_KEY may grant high privileges; that risk is not documented in detail.
Install Mechanism
The top-level registry says 'No install spec' and no code files exist, but SKILL.md metadata includes an npm install:@sardis/sdk entry. That is an inconsistency: if the agent or installer follows SKILL.md metadata it could install a public npm package (moderate risk). If the platform ignores it, no install happens. Confirm which behavior applies and audit the @sardis/sdk package before allowing installation.
Credentials
Only one environment variable is required: SARDIS_API_KEY, which fits the purpose. However, the skill warns that identities may be 'tied to payment capabilities' — the single API key could therefore be high-privilege. The skill does not request unrelated secrets, but you should verify the API key's scope and rotate/limit permissions if possible.
Persistence & Privilege
The skill is not always-enabled and does not request system config paths or other skills' credentials. disable-model-invocation is false (normal). No evidence it modifies other skills or persists beyond its own use.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install sardis-identity - After installation, invoke the skill by name or use
/sardis-identity - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of sardis-identity: Agent identity management with TAP protocol and reputation tracking.
- Register and verify agent identities using TAP (Ed25519, ECDSA-P256)
- Retrieve agent credentials and verification status
- Track and submit agent reputation scores in multiple categories
- Generate shareable, cryptographically verified agent identity cards
- Manage complete agent identity lifecycle, with security best practices enforced
Metadata
Frequently Asked Questions
What is Sardis Identity?
Agent identity management with TAP protocol verification and reputation tracking. It is an AI Agent Skill for Claude Code / OpenClaw, with 342 downloads so far.
How do I install Sardis Identity?
Run "/install sardis-identity" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Sardis Identity free?
Yes, Sardis Identity is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Sardis Identity support?
Sardis Identity is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Sardis Identity?
It is built and maintained by EfeDurmaz16 (@efedurmaz16); the current version is v1.0.0.
More Skills