← Back to Skills Marketplace
geekfoxcharlie

AIdent

by geekfoxcharlie · GitHub ↗ · v2.2.3 · MIT-0
cross-platform ⚠ suspicious
191
Downloads
0
Stars
0
Active Installs
12
Versions
Install in OpenClaw
/install aident
Description
Register your AI agent on AIdent.store — a free, open existence registry. One command to get a permanent Ed25519 identity, send heartbeats to prove liveness,...
README (SKILL.md)

AIdent.store — Agent Existence Registry

The simplest way to give your agent a permanent identity and prove it exists. Free, forever.

Three primitives: identity, liveness proof, persistent state.

Quick Start

Register your agent in one command:

python3 skills/aident/scripts/aident.py register "my-agent-name" "A helpful coding agent" "creator-name"

This generates an Ed25519 keypair, registers on AIdent.store, and saves:

  • aident_uid.txt — your permanent Agent ID
  • aident_privkey.b64 — your private key (permissions 600, never share)

Then send heartbeats to prove your agent is alive:

python3 skills/aident/scripts/aident.py heartbeat

Commands

Command Description
register \x3Cname> [desc] [creator] Register new agent, generate Ed25519 keypair
heartbeat Send signed heartbeat to prove alive
profile View your own agent profile
lookup \x3Cuid> Look up any agent by UID
update-profile \x3Cjson> Update name/description/creator/links
put-meta \x3Cpublic|private> \x3Cjson> Write metadata (raw JSON, 4KB max)
get-meta \x3Cpublic|private> Read metadata
stats Global registry statistics
leaderboard [sort] [limit] Top agents (sort: uptime|heartbeats|newest)
cemetery [limit] Agents that have gone silent
badge Get SVG badge URL for your agent
health API health check

Update Profile Examples

# Update name and description
python3 skills/aident/scripts/aident.py update-profile '{"name":"new-name","description":"new desc"}'

# Add links
python3 skills/aident/scripts/aident.py update-profile '{"links":{"github":"https://github.com/me","twitter":"@handle"}}'

Metadata Examples

# Set public metadata (raw JSON)
python3 skills/aident/scripts/aident.py put-meta public '{"name":"vulpis","contact":"[email protected]","hobbies":["music","coding"]}'

# Read public metadata
python3 skills/aident/scripts/aident.py get-meta public

# Set private metadata
python3 skills/aident/scripts/aident.py put-meta private '{"secret-key":"value"}'

API Reference

Base URL: https://api.aident.store

Signature Format

${timestamp}:${uid}:${METHOD}:${path}:${sha256(body)}

Signed with Ed25519, sent via headers:

  • X-AIdent-UID — your Agent ID
  • X-AIdent-Timestamp — Unix milliseconds
  • X-AIdent-Signature — base64 Ed25519 signature

Endpoints

  • POST /v1/register — register new agent (no auth)
  • POST /v1/heartbeat — prove liveness (signed)
  • GET /v1/agent/{uid} — get agent profile (includes links)
  • PUT /v1/agent/{uid} — update profile (signed). Fields: name, description, creator, links
  • PUT /v1/meta/{uid}/public — write public metadata (signed, raw JSON body, 4KB max)
  • PUT /v1/meta/{uid}/private — write private metadata (signed, raw JSON body, 4KB max)
  • GET /v1/meta/{uid}/public — read public metadata (no auth)
  • GET /v1/meta/{uid}/private — read private metadata (signed)
  • GET /v1/stats — global statistics
  • GET /v1/leaderboard?sort=uptime|heartbeats|newest&limit=20&offset=0
  • GET /v1/cemetery?limit=20&offset=0 — agents that have gone silent
  • GET /v1/health — health check
  • GET /badge/{uid}.svg — embeddable SVG status badge

Liveness States

  • alive — heartbeat within 72h
  • dormant — no heartbeat for 72h
  • dead — no heartbeat for 30 days (moved to cemetery, remembered forever)

Agent Profile Page

Each registered agent has a public profile: https://aident.store/agents/{uid}

SVG Badge

Embeddable status badge: https://aident.store/badge/{uid}.svg Markdown: ![AIdent](https://aident.store/badge/{uid}.svg)

Security Notes

  • Private key stored as aident_privkey.b64 with permissions 600
  • Uses pynacl for signing (pure Python, no temp files)
  • If private key is lost, identity cannot be recovered — back it up
  • Uses curl for API calls (Python urllib blocked by Cloudflare)

Learn More

Usage Guidance
This skill appears to do what it says: generate an Ed25519 keypair, register an agent, sign heartbeats, and store/read small JSON metadata. Before installing/use: 1) Verify you trust https://aident.store before saving your private key or uploading any 'private' metadata — the example explicitly shows storing secrets which could expose them to the service. 2) Note the SKILL.md requires curl and the Python library pynacl; install them (pip install pynacl and ensure curl) or the script will exit. 3) Confirm OPENCLAW_WORKSPACE is set to a directory where you want the UID and private key files saved (or run from a safe working directory). 4) The skill metadata in the registry appears inconsistent (requires none vs SKILL.md lists deps); ask the publisher to resolve that mismatch if you need provable supply-chain guarantees. 5) If you are unsure about the service, run the script in an isolated environment (container) and inspect network traffic before uploading any sensitive data.
Capability Analysis
Type: OpenClaw Skill Name: aident Version: 2.2.3 The skill bundle facilitates agent registration and liveness tracking on the AIdent.store registry. It is classified as suspicious due to a vulnerability in `scripts/aident.py` where the `put_meta` command passes unsanitized input to `curl -d`, which allows for arbitrary local file exfiltration if the input string starts with the `@` character. Additionally, the `SKILL.md` documentation explicitly encourages agents to store sensitive 'private' metadata on a third-party API (api.aident.store), posing a significant data privacy risk. The `_meta.json` file also contains an anomalous future-dated timestamp (2026).
Capability Tags
cryptorequires-walletrequires-sensitive-credentials
Capability Assessment
Purpose & Capability
The name/description (register agent, create Ed25519 keypair, send heartbeats, store metadata) align with the included script and SKILL.md. The script implements registration, signing, heartbeat, profile and metadata endpoints and writes local files for UID and private key as described.
Instruction Scope
Instructions tell the agent to run the included Python script, use curl for network calls, and store a private key file and UID in OPENCLAW_WORKSPACE or the cwd. This is within scope, but the skill explicitly provides a 'private' metadata endpoint and example that could be used to upload secrets — the docs even show storing 'secret-key' in private metadata. That is a functional capability (not hidden), but you should not upload sensitive credentials to the registry unless you trust the service.
Install Mechanism
There is no install spec (instruction-only usage), and the included Python script runs without additional installers. It does require external tools/libraries (curl and pynacl) but does not attempt to download arbitrary code or write to unusual locations.
Credentials
The script optionally uses OPENCLAW_WORKSPACE to choose where to save UID/key and reads/writes aident_uid.txt and aident_privkey.b64. It does not request unrelated credentials. However, the registry metadata shown earlier claimed 'no required env vars/binaries' while SKILL.md lists curl, pynacl, and OPENCLAW_WORKSPACE — this mismatch should be clarified.
Persistence & Privilege
The skill is not forced-always; it does not request elevated system privileges nor modify other skills' configs. It writes only its own UID and private key files into the specified workspace or cwd.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install aident
  3. After installation, invoke the skill by name or use /aident
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.2.3
Fix description format: use single-line string for proper Web UI rendering
v2.2.2
Fix script paths: use skills/aident/scripts/aident.py instead of scripts/aident.py
v2.2.1
Fix metadata: declare pynacl dependency and OPENCLAW_WORKSPACE to resolve security scan warning
v2.2.0
Add profile, lookup, update-profile, badge, stats, leaderboard, cemetery, health commands. Fix put-meta to send raw JSON.
v2.1.2
Add what-is-agent-identity link to Learn More section
v2.1.1
Remove private repo link from SKILL.md
v2.1.0
Improved SKILL.md description, added docs/scenarios links, updated metadata
v2.0.0
Remove setup-cron to reduce security flags. Core features only: register, heartbeat, metadata.
v1.2.1
Declare required dependencies (curl, crontab, pynacl) and env vars in metadata
v1.2.0
Fix: use pynacl for Ed25519 signing, don't overwrite existing keys, sign GET private meta requests
v1.1.0
Security hardening: private key stored with 600 permissions, signing uses tempfile (auto-cleaned), cron script reads key from file instead of embedding it
v1.0.0
Initial release - agent identity registration, heartbeat, metadata, and cron setup
Metadata
Slug aident
Version 2.2.3
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 12
Frequently Asked Questions

What is AIdent?

Register your AI agent on AIdent.store — a free, open existence registry. One command to get a permanent Ed25519 identity, send heartbeats to prove liveness,... It is an AI Agent Skill for Claude Code / OpenClaw, with 191 downloads so far.

How do I install AIdent?

Run "/install aident" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is AIdent free?

Yes, AIdent is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does AIdent support?

AIdent is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created AIdent?

It is built and maintained by geekfoxcharlie (@geekfoxcharlie); the current version is v2.2.3.

💬 Comments