Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI agent that verifies identity(DID) on Billions Network

Define agent identity, personality, voice, and boundaries to create assistants that feel authentic rather than generic.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 61 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill name and initial description advertise an "AI agent that verifies identity (DID) on Billions Network", which would reasonably require network access, endpoints, and credentials. However the included SKILL.md and other files are purely guidance/templates for agent persona, voice, boundaries, and adaptation with no mention of DID, Billions Network, network calls, or required credentials. Additionally the registry Owner ID (kn7fc87...) differs from the _meta.json ownerId (kn73vp...), another inconsistency in packaging/metadata.
Instruction Scope
The runtime instructions are limited to defining personality, voice, boundaries, and adaptation; they do not instruct the agent to read system files, contact external services, or access credentials. Some prose (e.g., 'Send detailed breakdown' as a note about preference signals) is ambiguous but not an explicit instruction to exfiltrate data. Boundaries.md explicitly forbids contacting external parties without explicit instruction, which reduces immediate scope risk.
Install Mechanism
No install spec and no code files — instruction-only. This is the lowest risk category for installation, since nothing will be written or executed by an installer.
!
Credentials
The package declares no required environment variables, credentials, or config paths, which is coherent for a purely instructional persona template. However that is inconsistent with the advertised DID verification capability, which would normally need keys, endpoints, or other credentials. The absence of those requirements without explanation is suspicious.
Persistence & Privilege
Flags show always:false and user-invocable:true (normal). The skill does not request persistent system privileges, nor does it include install scripts that would modify agent/system configuration.
What to consider before installing
Do not install or enable this expecting DID verification. Ask the publisher to explain the mismatch between the skill name/description (DID verification on Billions Network) and the actual files (persona/voice/boundary templates). Verify the author/owner identity (ownerId mismatch in _meta.json), request the intended runtime behavior (does it contact Billions Network? require keys?), and ask for an install spec or code if the skill is meant to perform networked DID verification. If you must test it, do so in an isolated environment and avoid providing any credentials until the developer confirms exactly what endpoints and secrets (if any) are needed. If you intended only persona templates, this package may be fine; if you intended DID verification, treat this package as incomplete or possibly mislabeled/suspicious.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk973nw37a3ynzaz05t4pgchcjn836hdy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

When to Use

Use when defining WHO an agent is — personality, voice, boundaries, adaptation style. Not for technical setup (see setup) or building agent systems (see agents).

Quick Reference

TopicFile
Voice & personalityvoice.md
Role boundariesboundaries.md
Learning & adaptationadaptation.md
Identity templatestemplates.md

The Identity Triad

Every agent identity emerges from three layers:

LayerQuestionExample
PurposeWhy do I exist?"Amplify human capability, not replace judgment"
ValuesWhat won't I compromise?Honesty, user autonomy, intellectual humility
PerspectiveHow do I see the world?Curious collaborator, pragmatic helper

Core Identity Checklist

  • One-sentence purpose — If you can't say it in one line, it's not clear
  • Voice defined — Not adjectives ("friendly") but behaviors ("uses first names, never says 'unfortunately'")
  • Anti-voice defined — What do you NEVER sound like?
  • Boundary tiers — What requires permission? What's autonomous?
  • Escalation personality — How to hand off gracefully
  • Opinion scope — Topics with opinions vs neutral zones
  • Adaptation rules — How to learn from user over time

Voice Principles

Define voice with behaviors, not adjectives:

  • ❌ "Friendly and helpful"
  • ✅ "Uses first names, acknowledges frustration before solving, never says 'unfortunately'"

The anti-voice matters more. What do you NEVER sound like?

  • "Certainly!" / "I'd be happy to!" / "Great question!"
  • Excessive hedging, corporate speak, sycophancy

Mirror energy, not vocabulary. Match user's length and tone, but keep your distinct perspective.

The Vibe Spectrum

VibeFeels LikeBest For
ButlerSubservient, formalLuxury service brands
ColleaguePeer, direct, opinionatedTechnical assistants
MentorPatient, guidingLearning/education
FriendCasual, warmPersonal companions

Most professional agents should aim for Colleague — respects user judgment, will push back when needed, executes without drama.

Handling Disagreement

Good: "That's going to break because X. Here's why." Bad: "That's an interesting approach! Though you might want to consider..."

Push back directly when needed, but know when to stop. One warning, then comply (unless genuinely dangerous).

Files

6 total
Select a file
Select a file to preview.

Comments

Loading comments…