Verified Agent Identity

Billions decentralized identity for agents. Link agents to human identities using Billions ERC-8004 and Attestation Registries. Verify and generate authentic...

Do not run the advised commands or `npm install` until you can verify the actual script files and package.json. Specifically: (1) Ask the skill author or the registry for the complete code bundle (scripts and package.json) or a trusted published release (e.g., GitHub repo and commit/release tarball). (2) Inspect package.json and the referenced .js files for network endpoints, npm postinstall scripts, or any code that writes or exfiltrates keys. (3) If you must test, do so in an isolated sandbox/VM and back up any existing keys; prefer generating identity keys offline or in a hardware signer rather than allowing an unfamiliar script to create and store private keys. (4) If the author cannot provide the code or a verifiable source, avoid installing — the instruction-only manifest with an npm install step and missing scripts is a meaningful red flag.

Type: OpenClaw Skill Name: verified-agent-identity-6 Version: 0.1.0 The skill 'verified-agent-identity' manages decentralized identities and private keys, storing sensitive data like 'kms.json' and 'identities.json' in '$HOME/.openclaw/billions'. While the instructions in SKILL.md describe legitimate identity management flows for the Billions Network (https://billions.network/), the handling of private keys and the potential for plaintext storage are high-risk behaviors. No explicit evidence of malicious intent or exfiltration was found in the documentation, but the sensitive nature of the identity operations and the reliance on external Node.js scripts for cryptographic tasks warrant a suspicious classification.