← 返回 Skills 市场
juampihernandez

Builder Data

作者 Juampi · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
737
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install builder-data
功能描述
Query builder reputation data via Talent Protocol API. Get Builder Rank, verify humans, resolve identities (Twitter/Farcaster/GitHub/wallet), search by locat...
使用说明 (SKILL.md)

Talent Powers

Query professional data from Talent Protocol - a platform that tracks builders

Use this skill to:

  • Find verified developers by location, skills, or identity (Twitter/GitHub/Farcaster/wallet)
  • Check builder reputation (ranks by default, scores only when asked)
  • Map Twitter accounts with Wallet addresses
  • Verify human identity from a wallet
  • Search for builder's credentials (earnings, contributions, hackathons, contracts, etc)
  • Check the projects each builder is shipping

Required Credentials

Variable Required Description Get it at
TALENT_API_KEY Yes API key for Talent Protocol (read access to profile/identity data) https://talent.app/~/settings/api
GITHUB_TOKEN No Personal access token for higher GitHub rate limits (60/hr → 5,000/hr) https://github.com/settings/tokens

Base URL: https://api.talentprotocol.com

curl -H "X-API-KEY: $TALENT_API_KEY" "https://api.talentprotocol.com/..."

Endpoints

Endpoint Purpose
/search/advanced/profiles Search profiles by identity, tags, rank, verification
/profile Get profile by ID
/accounts Get connected wallets, GitHub, socials
/socials Get social profiles + bios
/credentials Get data points (earnings, followers, hackathons, etc.)
/human_checkmark Check if human-verified (optional, don't use by default)
/scores Get ranks (default) or scores (only when explicitly asked)

Key Parameters

Identity lookup:

query[identity]={handle}&query[identity_type]={twitter|github|farcaster|ens|wallet}

Filters (all optional, only use when relevant to the query):

query[tags][]=developer              # filter by tag (developer, designer, etc.)
query[verified_nationality]=true     # only verified nationality
query[human_checkmark]=true          # only human-verified (reduces results significantly)

Sorting:

sort[score][order]=desc&sort[score][scorer]=Builder%20Score

Pagination: page=1&per_page=250 (max 250)

URL Encoding

[ = %5B, ] = %5D, Space = %20

Response Fields

Default → Ranks (always use unless user asks for scores):

  • builder_score.rank_position - Primary rank metric
  • scores[].rank_position where slug = "builder_score" - Latest rank

Only when user explicitly asks for scores:

  • builder_score.points - Score value

  • scores[].points - Individual score values

  • location - User-entered location (returned in response)

Location Filter

DO NOT USE query[standardized_location]=Country - doesn't work.

USE customQuery with regex:

curl -X POST -H "X-API-KEY: $TALENT_API_KEY" -H "Content-Type: application/json" \
  "https://api.talentprotocol.com/search/advanced/profiles" \
  -d '{
    "customQuery": {
      "regexp": {
        "standardized_location": {
          "value": ".*argentina.*",
          "case_insensitive": true
        }
      }
    },
    "sort": { "score": { "order": "desc", "scorer": "Builder Score" } },
    "perPage": 50
  }'

See use-cases.md for more examples.

Limitations

  • Max 250 per page
  • GET only for most endpoints (POST for customQuery)
  • Simple query[standardized_location] param broken - use customQuery regex

GitHub Enrichment

Get projects/repos via GitHub after resolving username from /accounts:

# 1. Get GitHub username
/accounts?id={profile_id} → { "source": "github", "username": "..." }

# 2. Query GitHub
GET https://api.github.com/users/{username}                           # Profile
GET https://api.github.com/users/{username}/repos?sort=stars&per_page=5   # Top repos
GET https://api.github.com/users/{username}/repos?sort=pushed&per_page=5  # Recent
GET https://api.github.com/users/{username}/events/public             # Commits
GET https://api.github.com/search/issues?q=author:{username}+type:pr+state:open  # Open PRs

GitHub Token (recommended): Without a token, GitHub limits to 60 requests/hr. With a personal access token, you get 5,000/hr.

  • Create one at: https://github.com/settings/tokens → "Generate new token (classic)" → no scopes needed for public data
  • Use it: -H "Authorization: token $GITHUB_TOKEN"

References

安全使用建议
This skill appears to do what it says: call Talent Protocol APIs (and optionally GitHub) to fetch builder profiles and enrich with public GitHub data. Before installing: 1) Only provide a TALENT_API_KEY obtained from your Talent Protocol account; treat it as sensitive. 2) If you supply a GITHUB_TOKEN, create a minimal, no-scope (public-data only) token—you don't need broad scopes for this. 3) Note there is no install or code; the skill issues network calls to api.talentprotocol.com and api.github.com—ensure you trust giving network access to those endpoints. 4) The skill's source/homepage is missing; if provenance matters to you, try to verify the publisher (owner id) or ask the author for a repository or homepage before use. 5) Be mindful of privacy/ethical considerations when querying or aggregating personal profiles (wallets, identities, verification status).
功能分析
Type: OpenClaw Skill Name: builder-data Version: 0.1.0 The skill is classified as suspicious due to a significant prompt injection vulnerability. The instructions in `SKILL.md` and `references/use-cases.md` explicitly guide the AI agent to construct a regex value for location filtering (e.g., `"value": ".*{country}.*"`) by directly substituting user input for `{country}`. This lack of input sanitization creates a high-risk attack surface, allowing a malicious user to inject arbitrary regex patterns (potentially leading to ReDoS) or manipulate the JSON payload, thereby exploiting the agent's execution flow.
能力评估
Purpose & Capability
The skill is described as a Talent Protocol data client and only requires a TALENT_API_KEY (and optionally a GitHub token for rate limits). Those credentials and the documented endpoints match the stated capability (profile search, ranks, credentials, identity resolution, GitHub enrichment). No unrelated services or permissions are requested.
Instruction Scope
SKILL.md provides concrete curl calls to api.talentprotocol.com and (optionally) api.github.com and documents which fields to return. Instructions do not ask the agent to read local files, other env vars, or to transmit data to unexpected endpoints. The guidance to avoid excessive use of human_checkmark unless requested is explicit.
Install Mechanism
This is instruction-only with no install spec and no code files to write or execute. That minimizes installation risk—there's nothing downloaded or extracted by the skill.
Credentials
Only TALENT_API_KEY is required (appropriate for Talent Protocol queries). GITHUB_TOKEN is optional and its purpose (increasing GitHub rate limits) is documented. No unrelated secrets, system config paths, or broad cloud credentials are requested.
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence and has no install-time behavior. It is user-invocable and can be called autonomously per the platform default, which is expected for a skills integration.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install builder-data
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /builder-data 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
builder-data 0.1.0 - Initial release: Query builder and developer reputation data via the Talent Protocol API. - Search verified developers by location, identity (Twitter, GitHub, Farcaster, Wallet), or skills. - Check builder ranks (default) or scores (when specifically requested). - Resolve and map Twitter, GitHub, Farcaster, or Wallet identities. - Enrich builder data with GitHub profile, repositories, and activity. - Includes extensive filtering, credential and project lookup, and human-verification checks.
元数据
Slug builder-data
版本 0.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Builder Data 是什么?

Query builder reputation data via Talent Protocol API. Get Builder Rank, verify humans, resolve identities (Twitter/Farcaster/GitHub/wallet), search by locat... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 737 次。

如何安装 Builder Data?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install builder-data」即可一键安装,无需额外配置。

Builder Data 是免费的吗?

是的,Builder Data 完全免费(开源免费),可自由下载、安装和使用。

Builder Data 支持哪些平台?

Builder Data 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Builder Data?

由 Juampi(@juampihernandez)开发并维护,当前版本 v0.1.0。

💬 留言讨论