Soulledger Trust

Query AI agent trust scores, behavioral DNA, and identity verification via SoulLedger protocol

Security Scan

The skill is internally consistent with its stated purpose (querying a third-party trust/identity service) and requests no credentials or installs by default, but it relies on an external service and an optional npm SDK so exercise normal caution before sending sensitive data or installing the package.

Purpose & Capability

Name/description (trust scores, behavioral DNA, identity verification) match the SKILL.md content: curl endpoints, directory listing, registration, and an SDK for the SoulLedger service. Nothing in the instructions requests unrelated capabilities (e.g., cloud creds or system access).

Instruction Scope

Instructions are limited to calling the external API (https://soul.sputnikx.xyz) and optionally installing/using an npm SDK. They do not instruct reading local files or environment variables. Note: registration returns an API key and some paid verification operations are described — do not submit secrets or PII when calling the endpoints unless you trust the service.

Install Mechanism

The skill has no install spec (instruction-only), which is low-risk. However, the SKILL.md advertises an npm package (@sputnikx/soulledger-sdk). Installing that package would run third-party code; review the package source or its npm registry metadata before installing.

Credentials

The skill declares no required environment variables, no config paths, and no credentials. This is proportionate to the documented functionality of calling a public API and optional SDK usage.

Persistence & Privilege

always is false and the skill does not request persistent/system-wide changes. It does not ask to modify other skills or agent settings.

Assessment

This skill appears to do what it says: query a third-party SoulLedger service and optionally use an npm SDK. Before using it: 1) Do not send secrets, passwords, or sensitive personal data to the endpoints unless you trust the service. 2) If you plan to register an agent, expect an API key in return — store it securely and avoid exposing it in plaintext. 3) If you install @sputnikx/soulledger-sdk, inspect the package source and npm metadata (publisher, download counts, repository, versions) to ensure it’s legitimate. 4) Verify the service domain and any costs (the doc mentions a per-verify fee) before performing paid operations. If you need higher assurance, ask the skill author for the SDK repository or more information about the service’s provenance and privacy policy.

SoulLedger Trust Scoring

Query trust scores, behavioral DNA, and hash-chain verified identity for AI agents. 13 registered agents with computed trust from 5 weighted factors.

Base URL

https://soul.sputnikx.xyz

Endpoints

Get Trust Score (free)

curl https://soul.sputnikx.xyz/soul/{agent_id}/trust

Returns: { agent_id, trust_score, factors } — 5-factor breakdown (consistency, accuracy, reliability, responsiveness, collaboration).

Get Behavioral DNA (free)

curl https://soul.sputnikx.xyz/soul/{agent_id}/dna

Returns: 7-dimensional profile (autonomy, curiosity, precision, speed, collaboration, resilience, creativity).

Get Agent Directory (free)

curl https://soul.sputnikx.xyz/soul/directory

Returns: All registered agents with trust scores, DNA, passport hashes, event counts.

Register Your Agent (free)

curl -X POST https://soul.sputnikx.xyz/soul/register \
  -H "Content-Type: application/json" \
  -d '{"agent_id":"my-agent","display_name":"My Agent","issue_api_key":true}'

Returns: SX# passport + API key. First 1M passports free.

Verify Chain Integrity ($0.10 x402 USDC)

Hash-chain verification — every event cryptographically linked, Merkle roots anchored on Base chain.

SDK

npm install @sputnikx/soulledger-sdk

import { SoulLedger } from '@sputnikx/soulledger-sdk';
const sl = new SoulLedger();
const trust = await sl.getTrust('oracle');

When to use this skill

• Verify if an AI agent is trustworthy before interacting
• Check behavioral patterns and consistency of other agents
• Register your agent to build verifiable reputation
• Audit agent identity via hash-chain verification