← 返回 Skills 市场
266
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install verified-agent-identity-4
功能描述
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic...
安全使用建议
What to check before installing:
- Expect the skill to create and store private keys and DID state at $HOME/.openclaw/billions. If you do not want keys on disk, do not install.
- By default keys are stored in plaintext unless you set BILLIONS_NETWORK_MASTER_KMS_KEY. If you plan to use this skill, set BILLIONS_NETWORK_MASTER_KMS_KEY to a strong secret (and back it up) to enable AES-256-GCM encryption of keys.
- The SKILL.md instructs running 'npm install' but the registry metadata does not list 'npm' as a required binary — ensure you have a matching Node/npm runtime (package-lock indicates Node >=20 is expected).
- The skill makes HTTPS calls to Billions network services (rpc-mainnet.billions.network, attestation-relay.billions.network, identity-dashboard.billions.network) and to resolver.privado.id — review and confirm these endpoints are acceptable for your environment.
- The scripts accept an existing private key via command-line arguments; be careful not to expose or pass secrets in shell history or CI logs.
- If you need stronger assurance, review the included source files (kms handling, storage, and network code) and test in an isolated environment. The inconsistencies (undeclared env var, missing npm requirement, and plaintext fallback) are explainable but important — handle secrets intentionally.
功能分析
Type: OpenClaw Skill
Name: verified-agent-identity-4
Version: 0.1.0
The skill bundle provides a decentralized identity (DID) management system for AI agents using the iden3 protocol and the Billions Network. It allows agents to generate identities, sign challenges, and link their DIDs to human owners. Sensitive data, including private keys, is stored locally in `$HOME/.openclaw/billions/kms.json` with support for AES-256-GCM at-rest encryption if a master key is provided via environment variables. Network activity is restricted to legitimate identity resolvers (resolver.privado.id) and the project's infrastructure (billions.network). The instructions in SKILL.md include explicit safety guardrails for the AI agent, and the code follows standard cryptographic practices without evidence of exfiltration, backdoors, or malicious intent.
能力评估
Purpose & Capability
Name/description (decentralized DID management on Billions Network) aligns with the included scripts: DID creation, challenge generation/signing, linking humans to agent DIDs, and signature verification. Network endpoints and libraries used (iden3, polygonid, ethers) are consistent with the stated purpose.
Instruction Scope
SKILL.md instructs running the included Node scripts (npm install then node scripts/...). The runtime steps read/write identity material under $HOME/.openclaw/billions and perform network calls to Billions/Privado services. The README also forbids manual cryptographic workarounds. This scope is appropriate for an identity skill, but the SKILL metadata omitted 'npm' even though instructions require running 'npm install'.
Install Mechanism
There is no formal install spec in the registry entry (instruction-only), yet the package includes a scripts/ package.json and package-lock.json and the runtime instructions call 'npm install'. Dependencies are pulled from npm (well-known packages). This is moderate-risk but expected for Node-based tooling; absence of an explicit install spec in the registry is an inconsistency users should notice.
Credentials
The code reads an optional master key environment variable (BILLIONS_NETWORK_MASTER_KMS_KEY) to enable AES-256-GCM encryption of private keys, but the registry metadata did not declare any required environment variables. Keys are persisted to $HOME/.openclaw/billions/kms.json and, if the master key is not set, they are stored as plain hex. The use of a sensitive env var (master KMS key) is reasonable for this skill, but it should be declared explicitly and users must understand the plaintext fallback behavior.
Persistence & Privilege
The skill persists keys and identity files to $HOME/.openclaw/billions (documented in README/SKILL.md). It does not request 'always: true' or system-wide config modifications. File writes are expected for an identity management skill, but this is persistent sensitive data and should be accepted intentionally by the user.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install verified-agent-identity-4 - 安装完成后，直接呼叫该 Skill 的名称或使用
/verified-agent-identity-4触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of Verified Agent Identity on Billions Network
- Enables AI agents to create, manage, and link decentralized identities (DIDs) to human owners using Billions (ERC-8004) and Attestation Registries.
- Provides commands to create and list identities, generate and sign authentication challenges, verify signatures, and link human DIDs.
- Strict usage guardrails: always check for existing identity before linking, halt on script error, prohibit manual cryptography or file edits.
- All identity and credential data stored in `$HOME/.openclaw/billions` for OpenClaw compatibility.
- Documentation includes clear security guidance and example flows for agent-to-human linking and identity verification.
元数据
常见问题
Verified Agent Identity 是什么？
Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 266 次。
如何安装 Verified Agent Identity？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install verified-agent-identity-4」即可一键安装，无需额外配置。
Verified Agent Identity 是免费的吗？
是的，Verified Agent Identity 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Verified Agent Identity 支持哪些平台？
Verified Agent Identity 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Verified Agent Identity？
由 devkonten（@devkonten）开发并维护，当前版本 v0.1.0。
推荐 Skills