← 返回 Skills 市场
Meverylucky AI Agent
作者
Meverylucky
· GitHub ↗
· v1.0.0
· MIT-0
112
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install meveryluckyagent
功能描述
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic...
安全使用建议
This skill appears to implement what it claims: it creates and manages Billions Network DIDs, signs challenges, and generates verification links. Before installing: 1) Ensure you trust the Billions network endpoints (billions.network, identity-dashboard.billions.network) and resolver.privado.id because signed tokens and pairing requests are posted to those services. 2) Set BILLIONS_NETWORK_MASTER_KMS_KEY in the skill or environment to enable AES-256-GCM encryption of private keys in kms.json; otherwise private keys are stored as raw hex in $HOME/.openclaw/billions/kms.json. 3) Review the constants (callbackBase, urlShortener, transactionSender, attester values) to confirm they point to expected infrastructure and not a third-party you don't trust. 4) Running the skill requires npm install and Node >= v20 as documented; inspect dependencies if you need additional assurance. 5) The README/SKILL.md guardrails (don’t run system crypto tools, do not manually manipulate files) are meaningful — follow them. If you want stronger guarantees, review or run the scripts in an isolated environment and verify network calls (e.g., with outbound firewall rules) before using real private keys or production identities.
功能分析
Type: OpenClaw Skill
Name: meveryluckyagent
Version: 1.0.0
The skill manages decentralized identities (DIDs) and Ethereum private keys, storing them in '$HOME/.openclaw/billions/kms.json'. A significant security risk exists because the skill defaults to storing these private keys in plaintext unless an optional environment variable (BILLIONS_NETWORK_MASTER_KMS_KEY) is set for AES-256-GCM encryption. Additionally, scripts like 'createNewEthereumIdentity.js' allow private keys to be passed via CLI arguments, which can expose secrets in process lists or shell history. The skill performs network requests to 'billions.network' and 'resolver.privado.id' for identity resolution and attestation shortening, which are functional but involve transmitting identity metadata to external services.
能力评估
Purpose & Capability
Name/description (Billions decentralized identity, DID linking, signing/verifying challenges) matches the included scripts, which implement identity creation, JWS signing, challenge generation, pairing URL creation, and verification against Billions/Privado resolvers. Requiring the node binary is appropriate.
Instruction Scope
Runtime instructions tell the agent to run the provided Node scripts. The scripts operate only on a dedicated directory ($HOME/.openclaw/billions) and call specific network endpoints (rpc-mainnet.billions.network, resolver.privado.id, identity-dashboard.billions.network, attestation-relay.billions.network). These network calls are consistent with the skill's purpose, but signing produces JWS tokens that are embedded in callback URLs and are posted to the skill's own URL-shortener service (identity-dashboard) as part of pairing link generation — that behavior is expected for generating usable wallet links but worth noting as it transmits signed data to the project's services.
Install Mechanism
No arbitrary download/install spec in registry metadata; the skill includes Node scripts and a package.json/package-lock.json. Installation requires running 'npm install' in the scripts directory which pulls well-known npm packages (identified in package.json/lock). This is a standard pattern and proportionate for a Node-based identity toolkit.
Credentials
Registry metadata lists no required env vars, and none are mandatory at runtime. The code supports an optional environment variable BILLIONS_NETWORK_MASTER_KMS_KEY: when set, on-disk private keys in kms.json are encrypted with AES-256-GCM; when unset keys are stored as raw hex. The SKILL.md/README documents this. Because the variable controls local key encryption, users should set it if they do not want plaintext private keys on disk. No unrelated credentials or secret requests are present.
Persistence & Privilege
The skill does not request always:true and does not require system-wide configuration changes. It persists state and keys under $HOME/.openclaw/billions only (a directory explicitly described in README/SKILL.md). Autonomous invocation is allowed (normal default) but the skill itself does not add high privileges or modify other skills.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install meveryluckyagent - 安装完成后，直接呼叫该 Skill 的名称或使用
/meveryluckyagent触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release – enables decentralized agent identity and owner linking on the Billions Network.
- Introduces scripts to create, list, and manage agent DIDs (decentralized identities).
- Supports generating, signing, and verifying authentication challenges.
- Allows linking agent identities to human owners using Billions ERC-8004 and Attestation Registries.
- All identity data is stored locally at $HOME/.openclaw/billions for OpenClaw plugin compatibility.
- Includes detailed command-line tools and strict security guardrails for identity management.
元数据
常见问题
Meverylucky AI Agent 是什么？
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 112 次。
如何安装 Meverylucky AI Agent？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install meveryluckyagent」即可一键安装，无需额外配置。
Meverylucky AI Agent 是免费的吗？
是的，Meverylucky AI Agent 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Meverylucky AI Agent 支持哪些平台？
Meverylucky AI Agent 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Meverylucky AI Agent？
由 Meverylucky（@meverylucky）开发并维护，当前版本 v1.0.0。
推荐 Skills