📦 Agent Passport — 代理身份护照
v1.0.0为 SX# 代理签发并验证加密的链式身份护照，提供不可篡改的 hash-chain 完整性证明，并将 Merkle 根锚定在 Base 链上，实现去中心化身份与数据溯源。
0· 117·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is coherent with its stated purpose but relies on a third‑party service (https://soul.sputnikx.xyz). Before installing, consider: (1) privacy — registering returns and likely stores full agent profile data and an api_key, so avoid sending secrets or private data to the service; (2) billing — verification and Merkle checks are charged per-call (the SKILL.md lists $0.05×402), so estimate costs before heavy use; (3) authenticity — verify the service/domain and its on‑chain anchoring clai...详细分析 ▾
✓ 用途与能力
The name/description (issue & verify SX# agent passports) matches the SKILL.md: all runtime instructions are HTTP curl calls to the declared third‑party service for registering, fetching passports, proofs, and Merkle verification. There are no unrelated env vars, binaries, or install steps requested.
ℹ 指令范围
Instructions only call the remote API endpoints and return/consume passport and proof data. This stays within the skill's stated scope, but the agent will transmit agent_id/display_name and may receive an api_key and full agent profile (trust, DNA, activity). That can expose agent metadata to the external service and the instructions note per‑call costs for verification. There is no instruction to read local files or unrelated system state.
✓ 安装机制
No install spec and no code files — instruction-only skill with no on‑disk installation. This is the lowest install risk.
ℹ 凭证需求
The skill declares no required env vars or credentials, which is coherent. However, the register endpoint returns an api_key which the agent or user will need to store/use; consider how that key is handled. Also the endpoints are paid for per verification call (noted in SKILL.md), so credential/key handling plus billing is a practical consideration although not disproportionate to the purpose.
✓ 持久化与权限
always:false and model invocation allowed (default). The skill does not request persistent system privileges or modify other skill configurations.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/22
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install sx-agent-passport
镜像加速npx clawhub@latest install sx-agent-passport --registry https://cn.longxiaskill.com