verified-agent-identity

What This Skill Does

The verified-agent-identity skill is a robust security and authentication framework designed for OpenClaw agents to manage decentralized identities (DIDs). It leverages the Iden3 and Billions Network protocols to provide a verifiable, tamper-proof way for AI agents to establish their identity and cryptographically link that identity to a human owner. By providing tools to create, manage, and verify credentials, this skill ensures that interactions with agents are authenticated, preventing impersonation and establishing a clear chain of trust.

Installation

To integrate this skill into your environment, use the OpenClaw plugin manager: clawhub install openclaw/skills/skills/holdcc/verified-agent-identity-3. Once installed, navigate to the scripts directory within the plugin folder, run npm install to resolve dependencies, and you are ready to execute identity management commands using the provided Node.js scripts.

Use Cases

1. Establishing Trust: Verifying that an agent is truly controlled by the expected human owner via DID linking.
2. Cross-Service Auth: Generating and verifying JWT tokens that allow your agent to authenticate across different Billions-compatible services.
3. Secure Communication: Signing challenges to prove ownership of an identity without exposing private keys.
4. Identity Management: Managing multiple identities for different agent roles or personas using the provided listing and creation tools.

Example Prompts

1. "Check if I have any registered identities on the Billions network and list them for me."
2. "Create a new Ethereum-based identity for this agent and link it to my human DID using the latest verification challenge."
3. "Sign this authentication challenge using my default DID to verify my identity for the platform login."

Tips & Limitations

• Storage: All identity metadata and private keys are stored locally in $HOME/.openclaw/billions. Ensure this directory is backed up if you store critical identity assets.
• Security: Always use a secure, dedicated private key if importing existing Ethereum identities. Avoid sharing these files.
• Verification: The linkHumanToAgent.js script is the most critical operation for ensuring your agent has the proper authority; always ensure the sender identity is correct before executing.