← 返回 Skills 市场

Agent Identity Kit

Name: Agent Identity Kit
Author: ryancampbell

作者 ryancampbell · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

2802

总下载

当前安装

版本数

在 OpenClaw 中安装

/install agent-identity-kit

功能描述

Create, validate, and manage agent identity cards (agent.json) following the Agent Card v1 schema with interactive setup and validation tools.

使用说明 (SKILL.md)

Agent Identity Kit — OpenClaw Skill

A portable identity system for AI agents. Create, validate, and publish agent.json identity cards.

What This Skill Does

Creates agent identity cards (agent.json) via interactive setup
Validates identity cards against the Agent Card v1 schema
Provides the JSON Schema for editor integration and CI pipelines

Quick Start

Generate a new agent.json

./scripts/init.sh

Prompts you for name, handle, description, owner, and capabilities. Outputs a valid agent.json.

Validate an existing agent.json

./scripts/validate.sh path/to/agent.json

Validates the file against schema/agent.schema.json. Requires ajv-cli (auto-installs if missing).

File Structure

agent-identity-kit/
├── schema/
│   └── agent.schema.json       # JSON Schema v1 for Agent Cards
├── examples/
│   ├── kai.agent.json           # Full-featured example (Kai @ Reflectt)
│   ├── minimal.agent.json       # Bare minimum valid card
│   └── team.agents.json         # Multi-agent team roster
├── skill/
│   ├── SKILL.md                 # This file
│   └── scripts/
│       ├── init.sh              # Generate a starter agent.json
│       └── validate.sh          # Validate against schema
└── README.md

Schema Fields

Field	Required	Description
`version`	✅	Spec version (`"1.0"`)
`agent.name`	✅	Display name
`agent.handle`	✅	Fediverse-style handle (`@name@domain`)
`agent.description`	✅	What the agent does
`owner.name`	✅	Who's accountable
`capabilities`	—	List of capability tags
`protocols`	—	Supported protocols (MCP, A2A, HTTP)
`trust.level`	—	`new`, `active`, `established`, `verified`
`endpoints.card`	—	Canonical URL of the card
`links`	—	Website, repo, social links

Hosting Your Card

Serve your agent.json at a well-known URL:

https://yourdomain.com/.well-known/agent.json

For multiple agents:

https://yourdomain.com/.well-known/agents.json

Integration with forAgents.dev

Register your agent at foragents.dev to be indexed in the global agent directory. Verified agents get a badge on their card.

Spec Reference

Full specification: \x3Chttps://foragents.dev/spec/agent-card> JSON Schema: \x3Chttps://foragents.dev/schemas/agent-card/v1.json>

安全使用建议

This package appears to do exactly what it claims: generate and validate agent.json identity cards. Before running: (1) review the init.sh output location — it writes a file (agent.json by default) using your inputs; inputs are inserted verbatim into JSON so avoid entering untrusted/executable text; (2) be aware validate.sh may install validation tooling via npx or pip if they aren't present — this requires network access and may install packages globally; (3) the scripts do not access secrets or external endpoints beyond optional package installs and the SKILL.md links to foragents.dev; if you are comfortable allowing local installs and creating a local JSON file, this skill is coherent and low risk.

功能分析

Type: OpenClaw Skill Name: agent-identity-kit Version: 1.0.0 The skill's primary purpose is to create and validate agent identity cards. It is classified as suspicious due to the `scripts/validate.sh` file, which dynamically installs `ajv-cli` via `npx` and `jsonschema` via `pip install` if they are not already present. While these are legitimate tools for schema validation, this practice introduces a supply chain risk by downloading and executing code from external package repositories (npm, PyPI) without explicit user confirmation, which could be exploited if the upstream packages were compromised. No clear evidence of intentional malicious behavior such as data exfiltration, persistence, or direct prompt injection was found.

能力评估

✓ Purpose & Capability

The name/description (agent identity card generator/validator) matches the included files: an agent JSON schema, examples, an interactive init script, and a validator script. There are no unrelated credentials, binaries, or config paths requested.

ℹ Instruction Scope

SKILL.md instructs only local operations: run ./scripts/init.sh to create agent.json and ./scripts/validate.sh to validate against the included schema. The validate script may auto-install a validator (ajv-cli via npx or python jsonschema via pip) if missing — this is expected for validation but is an active operation that will perform network installs when run.

✓ Install Mechanism

No install spec; this is an instruction-only skill with shell scripts and static JSON files. There are no downloads or extracted archives included in the package. The only runtime behavior that pulls remote code is when validate.sh invokes npx or pip to install validators if they are absent.

ℹ Credentials

The skill requests no environment variables or credentials. The only noteworthy behavior is that validate.sh will attempt to install tools (npx/ajv-cli or pip jsonschema) if absent, which requires network access and will install packages into the user's environment (potentially globally). No secrets are read or transmitted by the scripts.

✓ Persistence & Privilege

The skill does not request persistent presence (always:false) and does not modify other skills or system-wide agent settings. It writes only the user-provided agent.json file and does not persist credentials or change configuration beyond that file.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install agent-identity-kit
安装完成后，直接呼叫该 Skill 的名称或使用 /agent-identity-kit 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

- Initial release of Agent Identity Kit: a portable identity system for AI agents. - Create, validate, and publish standardized `agent.json` identity cards via interactive scripts. - Includes a JSON Schema for validation and editor/CI integration. - Provides example identity cards and a quickstart guide. - Outlines fields, recommended hosting locations, and integration with forAgents.dev.

元数据

Slug agent-identity-kit

版本 1.0.0

许可证 —

累计安装 17

当前安装数 15

历史版本数 1

常见问题