Agent Passport

Issue and verify SX# agent passports — cryptographic identity with hash-chain integrity, Merkle anchoring on Base

This skill is coherent with its stated purpose but relies on a third‑party service (https://soul.sputnikx.xyz). Before installing, consider: (1) privacy — registering returns and likely stores full agent profile data and an api_key, so avoid sending secrets or private data to the service; (2) billing — verification and Merkle checks are charged per-call (the SKILL.md lists $0.05×402), so estimate costs before heavy use; (3) authenticity — verify the service/domain and its on‑chain anchoring claims (e.g., check BaseScan) if you rely on its proofs; (4) key handling — decide where and how the returned api_key will be stored and protected; (5) test manually first — run the provided curl commands in an isolated environment to observe responses and behavior. If the SKILL.md had asked the agent to read local files, environment secrets, or modify other skill configs, the assessment would be more concerning.

Type: OpenClaw Skill Name: sx-agent-passport Version: 1.0.0 The skill provides a legitimate interface for an agent identity and verification service (SX# Agent Passport) via the soul.sputnikx.xyz API. It facilitates agent registration and cryptographic proof verification without any evidence of malicious code, data exfiltration, or prompt injection.