← 返回 Skills 市场
Sardis Identity
作者
EfeDurmaz16
· GitHub ↗
· v1.0.0
342
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install sardis-identity
功能描述
Agent identity management with TAP protocol verification and reputation tracking
安全使用建议
This skill appears to do what it says (manage agent identities via Sardis) but has two things to check before installing: (1) SKILL.md mentions installing @sardis/sdk via npm while the registry says 'no install spec' — confirm whether your platform will actually install that package, and if so, review the package on npm (publisher, versions, source) before proceeding. (2) The examples use openssl to create keys, but openssl is not listed in the required binaries — ensure openssl availability and understand where private keys will be stored. Treat SARDIS_API_KEY as sensitive (it may enable payment or wallet actions); prefer a least-privilege API key and confirm the key's scope and revocation procedures. If you rely on this skill in production, validate the sardis.sh service identity (homepage and package source) and consider testing in an isolated environment first.
功能分析
Type: OpenClaw Skill
Name: sardis-identity
Version: 1.0.0
The sardis-identity skill provides legitimate agent identity and reputation management capabilities via the Sardis API (api.sardis.sh). It uses standard tools like curl, jq, and openssl for cryptographic key generation and API interaction, with no evidence of malicious behavior, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
Name, description, and runtime instructions consistently target Sardis's identity/reputation API and require an API key. Declared binaries (curl, jq) are appropriate for the provided examples. However, the SKILL.md metadata advertises an npm package install (@sardis/sdk) despite the registry listing this as an instruction-only skill with no install spec — this mismatch should be resolved.
Instruction Scope
Runtime instructions include generating keypairs with openssl and reading/writing key files and using the SARDIS_API_KEY to register agents and submit reputation. Those actions are within the skill's stated purpose, but the instructions call the openssl CLI while the registry's required binaries list does not include openssl — an undeclared dependency. The skill also emphasizes payment-capable capabilities (e.g., 'payments', 'wallet_id'), so the SARDIS_API_KEY may grant high privileges; that risk is not documented in detail.
Install Mechanism
The top-level registry says 'No install spec' and no code files exist, but SKILL.md metadata includes an npm install:@sardis/sdk entry. That is an inconsistency: if the agent or installer follows SKILL.md metadata it could install a public npm package (moderate risk). If the platform ignores it, no install happens. Confirm which behavior applies and audit the @sardis/sdk package before allowing installation.
Credentials
Only one environment variable is required: SARDIS_API_KEY, which fits the purpose. However, the skill warns that identities may be 'tied to payment capabilities' — the single API key could therefore be high-privilege. The skill does not request unrelated secrets, but you should verify the API key's scope and rotate/limit permissions if possible.
Persistence & Privilege
The skill is not always-enabled and does not request system config paths or other skills' credentials. disable-model-invocation is false (normal). No evidence it modifies other skills or persists beyond its own use.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install sardis-identity - 安装完成后，直接呼叫该 Skill 的名称或使用
/sardis-identity触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of sardis-identity: Agent identity management with TAP protocol and reputation tracking.
- Register and verify agent identities using TAP (Ed25519, ECDSA-P256)
- Retrieve agent credentials and verification status
- Track and submit agent reputation scores in multiple categories
- Generate shareable, cryptographically verified agent identity cards
- Manage complete agent identity lifecycle, with security best practices enforced
元数据
常见问题
Sardis Identity 是什么？
Agent identity management with TAP protocol verification and reputation tracking. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 342 次。
如何安装 Sardis Identity？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install sardis-identity」即可一键安装，无需额外配置。
Sardis Identity 是免费的吗？
是的，Sardis Identity 完全免费（开源免费），可自由下载、安装和使用。
Sardis Identity 支持哪些平台？
Sardis Identity 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Sardis Identity？
由 EfeDurmaz16（@efedurmaz16）开发并维护，当前版本 v1.0.0。
推荐 Skills