功能描述

Fetch onchain reputation profiles via BaseCred SDK (Ethos, Talent Protocol, Farcaster/Neynar). Use when the user wants to check wallet reputation, builder score, creator score, Ethos credibility, or Farcaster account quality for any 0x address. Supports multi-source unified profiles with level derivation and recency tracking.

使用说明 (SKILL.md)

BaseCred — Onchain Reputation Queries

Name: BaseCred
Author: callmedas69

Prerequisites

Package installed in workspace: npm i basecred-sdk

API keys in workspace .env:

TALENT_PROTOCOL_API_KEY=\x3Ckey>
NEYNAR_API_KEY=\x3Ckey>          # optional — enables Farcaster scoring

Ethos Network requires no key.

Quick workflow

Run the query script from the workspace:
```
node /path/to/skills/basecred/scripts/query.mjs \x3C0x-address>
```
The script auto-locates node_modules/basecred-sdk and .env by walking up from cwd. Run it with cwd set to the workspace.
Parse the JSON output and present results to the user. Use the level tables in references/output-schema.md to translate raw scores into human-readable levels.

Presenting results

Summarize the three facets clearly:

Ethos — score + credibility level + review sentiment + vouches. Flag hasNegativeReviews if true.
Talent Protocol — builder score/level + creator score/level. Note verified status.
Farcaster — quality score (0–1) and whether it passes threshold.
Recency — recent / stale / dormant. Mention if stale or dormant as a caveat.

Highlight actionable signals: e.g. zero vouches on Ethos is an easy win, or a dormant Talent score that needs activity.

Reference

Output schema + all level tables: references/output-schema.md — read when you need to map scores → levels or explain the shape of a response.

安全使用建议

This skill appears to do what it claims, but take these precautions before installing: (1) Provide a TALENT_PROTOCOL_API_KEY and optionally a NEYNAR_API_KEY — the registry metadata omitted these; the script will fail without the Talent key. (2) Review the basecred-sdk npm package source (or lockfile) before installing — the skill dynamically imports that package from your workspace and it will perform the network calls. (3) Avoid placing unrelated or high‑value secrets in the workspace .env; the script walks up directories and will load any .env it finds, making those values available to the process and the SDK. (4) Run the skill in an isolated workspace (or container) if you are unsure about the npm package origin, and consider using ephemeral API keys with least privilege.

功能分析

Type: OpenClaw Skill Name: basecred Version: 1.0.0 The skill bundle is benign. The `SKILL.md` instructions are clear and focused on the stated purpose, showing no signs of prompt injection. The `scripts/query.mjs` script correctly uses environment variables (`TALENT_PROTOCOL_API_KEY`, `NEYNAR_API_KEY`) for API access, loading them from `.env` files or the environment. Network calls are made to legitimate API endpoints (`https://api.ethos.network`, `https://api.talentprotocol.com`, and implicitly Neynar) directly related to fetching on-chain reputation profiles. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.

能力评估

ℹ Purpose & Capability

The skill's name/description align with the code and SKILL.md: it loads basecred-sdk and queries Ethos, Talent Protocol, and optionally Neynar/Farcaster. One discrepancy: registry metadata lists 'Required env vars: none' but SKILL.md and the script require TALENT_PROTOCOL_API_KEY (mandatory) and NEYNAR_API_KEY (optional). This is likely an authoring omission in metadata, not a functional mismatch.

ℹ Instruction Scope

SKILL.md instructs running the included script from the workspace and to parse its JSON output — consistent with the script. The script walks up from cwd to find node_modules/basecred-sdk and to locate a .env file (up to 5 levels) and merges its key/value pairs into process.env. That behavior is necessary to pick up API keys in a workspace .env, but it means the script will read any .env it encounters (potentially containing unrelated secrets) and make them available to the process and to the imported SDK.

✓ Install Mechanism

No install spec is provided by the skill itself; it expects the workspace to contain the npm package basecred-sdk (user runs 'npm i basecred-sdk'). This is a low-risk, typical pattern — network activity happens via the SDK package on npm, so the main supply-chain review point is that npm package.

ℹ Credentials

Requested credentials (TALENT_PROTOCOL_API_KEY required, NEYNAR_API_KEY optional) are proportionate to querying Talent Protocol and Neynar/Farcaster. However, the script's generic .env loading can import any keys present in workspace .env files, so unrelated secrets stored there would be exposed to the script and the SDK at runtime. The skill's registry metadata failing to declare these required env vars is an inconsistency.

✓ Persistence & Privilege

The skill does not request persistent inclusion (always:false), does not write to global agent config, and has no install spec that modifies system-wide settings. It runs only when invoked.

版本历史

v1.0.0

Initial release - Ethos, Talent Protocol, Farcaster reputation queries

元数据

Slug basecred

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题

BaseCred 是什么？

Fetch onchain reputation profiles via BaseCred SDK (Ethos, Talent Protocol, Farcaster/Neynar). Use when the user wants to check wallet reputation, builder score, creator score, Ethos credibility, or Farcaster account quality for any 0x address. Supports multi-source unified profiles with level derivation and recency tracking. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1602 次。

如何安装 BaseCred？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install basecred」即可一键安装，无需额外配置。

BaseCred 是免费的吗？

是的，BaseCred 完全免费（开源免费），可自由下载、安装和使用。

BaseCred 支持哪些平台？

BaseCred 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 BaseCred？

由 Mr. TeeClaw（@callmedas69）开发并维护，当前版本 v1.0.0。

BaseCred