← 返回 Skills 市场
136
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install my-verified-agent
功能描述
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic...
安全使用建议
This skill appears to be what it says: a DID/attestation toolkit for the Billions network. Before installing or running it:
- Treat the keys in $HOME/.openclaw/billions as sensitive. If you plan to use the skill long-term, set BILLIONS_NETWORK_MASTER_KMS_KEY (via skill config or environment) to enable on-disk encryption; store that master key securely and back it up — losing it will make encrypted keys irrecoverable.
- Review and confirm the network endpoints used (rpc-mainnet.billions.network, identity-dashboard.billions.network, attestation-relay.billions.network, resolver.privado.id). The pairing flow sends signed JWS tokens to the project's shortener/relay services as part of normal operation — ensure you trust those domains before linking real private keys or identities.
- Running 'npm install' will fetch many dependencies from npm. Consider running the install in an isolated environment (container or dedicated VM) or auditing the dependencies if you have heightened supply-chain concerns.
- Keep private keys offline if you do not want them persisted on the host. The CLI supports supplying an existing private key via --key, but that key (or any generated key) will be stored in kms.json unless you delete it or configure encryption.
- If you need higher assurance, inspect the repository author/ownership and verify that the listed domains and addresses match official Billions/iden3 publications; the registry source is 'unknown' so performing this attribution check increases confidence.
If you are comfortable with those trade-offs, the skill's behavior is coherent with its purpose. If not, avoid storing real private keys and run the code in an isolated test environment first.
功能分析
Type: OpenClaw Skill
Name: my-verified-agent
Version: 1.0.0
The skill bundle provides a legitimate implementation of decentralized identity (DID) management for AI agents using the iden3 protocol and Billions Network. It includes scripts for creating identities, signing challenges, and linking human identities to agents. Private keys are stored in `$HOME/.openclaw/billions/kms.json` with an optional AES-256-GCM encryption layer controlled by the `BILLIONS_NETWORK_MASTER_KMS_KEY` environment variable. Network activity is limited to necessary protocol functions, such as DID resolution via `resolver.privado.id` and interaction with the Billions Network infrastructure (e.g., `attestation-relay.billions.network`). The instructions in `SKILL.md` are focused on operational safety and protocol compliance, and no evidence of malicious intent, data exfiltration, or unauthorized execution was found.
能力评估
Purpose & Capability
Name/description (Billions decentralized identity / DID linking) aligns with the packaged scripts and dependencies. The skill needs Node and the iden3/PolygonID/Ethers libraries it declares; it performs DID creation, signing, pairing URL creation, and verification — all consistent with its purpose.
Instruction Scope
Runtime instructions tell the agent/user to run npm install and the scripts, and to store data under $HOME/.openclaw/billions — consistent with the code. Important runtime behavior: the signing/pairing flow posts authorization messages (which include a callback URL containing the signed JWS) to identity-dashboard.billions.network (URL shortener) and relies on attestation-relay.billions.network as a callback target; verifySignature fetches DID data from resolver.privado.id and scripts use rpc-mainnet.billions.network. These network calls are expected for this kind of skill but expose signed attestations/JWS to designated Billions services — the user should confirm those domains are trusted.
Install Mechanism
There is no formal install spec in the registry manifest; the SKILL.md instructs running 'npm install' inside the scripts folder. This will fetch several npm packages (package-lock.json present). Using npm is expected for Node tooling but carries ordinary supply-chain risk; packages are from the public npm registry and versions are pinned in package-lock.json.
Credentials
The skill declares no required environment variables and only an optional BILLIONS_NETWORK_MASTER_KMS_KEY to enable at-rest AES-256-GCM encryption of private keys. That optional env var is appropriate for the stated purpose. Important security note: if BILLIONS_NETWORK_MASTER_KMS_KEY is not set, private keys are persisted as plain hex in $HOME/.openclaw/billions/kms.json — this is expected behavior for the tool but is a sensitive default the user must be aware of.
Persistence & Privilege
The skill stores files (kms.json, identities.json, defaultDid.json, challenges.json, credentials.json) under $HOME/.openclaw/billions; it does not request system-wide privileges or set always:true. Writing to a per-user directory is proportionate for a key management/identity tool. The skill does not attempt to modify other skills or global agent configuration.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install my-verified-agent - 安装完成后,直接呼叫该 Skill 的名称或使用
/my-verified-agent触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
verified-agent-identity Skill v1.0.0
- Initial release providing decentralized identity creation, management, and agent–human linkage using Billions ERC-8004 and iden3 protocols.
- Supports generating/verifying authentication proofs and linking AI agents to unique human owners.
- Includes scripts for identity creation, challenge generation/signing, linkage, and signature verification.
- Stores all sensitive identity data in $HOME/.openclaw/billions for OpenClaw compatibility.
- Enforces strict guardrails to prevent unauthorized key/file manipulation and ensure secure handling of identity operations.
元数据
常见问题
My Verified Agent 是什么?
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 136 次。
如何安装 My Verified Agent?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install my-verified-agent」即可一键安装,无需额外配置。
My Verified Agent 是免费的吗?
是的,My Verified Agent 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
My Verified Agent 支持哪些平台?
My Verified Agent 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 My Verified Agent?
由 Karan9074(@karan9074)开发并维护,当前版本 v1.0.0。
推荐 Skills