Sealer Attest
v1.0.0Interact with The Sealer Protocol to preview difficulty, make onchain SMART commitments, check agent profiles, leaderboards, obtain Sealer IDs, and generate...
⭐ 0· 32·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the instructions: all endpoints, required fields (agentId, agentSig, agentNonce), and payment details correspond to onchain attestation, SID minting, previews, and leaderboard lookups on thesealer.xyz. No unrelated credentials, binaries, or filesystem access are requested.
Instruction Scope
SKILL.md limits actions to HTTP GET/POST calls to thesealer.xyz endpoints, previewing difficulty, generating EIP-712 payloads, and submitting commitment/mint requests. It does not instruct reading local files, environment variables, or other system secrets. It does require EIP-712 signatures and an X-PAYMENT header (on-chain payment proof), which are appropriate for the described operations.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk or installed, which minimizes risk and is proportional to the skill's purpose.
Credentials
The skill declares no required environment variables, keys, or config paths. The only sensitive artifact the protocol requires is an EIP-712 signature (agentSig) produced by the user's wallet and an on-chain payment proof in X-PAYMENT — both are proportional to making onchain attestations and are not the same as requesting private keys.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or elevated privileges. It does not modify other skills or agent-wide configuration.
Assessment
This skill appears coherent with an onchain attestation service, but verify the service before use: (1) confirm the domain (thesealer.xyz) and review linked docs/GitHub, (2) never share private keys—only sign EIP-712 messages via your wallet UI, (3) inspect any X-PAYMENT value to ensure it is a valid on-chain payment proof (tx hash) and you understand the USDC costs, (4) be aware that commitments and EAS attestations are on-chain and permanently associated with your wallet/SID, and (5) if the agent asks for wallet private keys, mnemonic phrases, or local system credentials, do not proceed. If you need higher assurance, ask the skill author for an upstream code repo or an official maintainer contact before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk977e727nv3aa5d62byc5e955d8460ka
License
MIT-0
Free to use, modify, and redistribute. No attribution required.