Verified Agent Identity

• Analyzed: May 11, 2026, 7:26 PM
• Findings: 1
• Version: 1.12.15
• Hash: f69f60a20b5cddc06f8859b1549f5d140e59494803da2bc783f7defeb4fe8c62
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate decentralized identity (DID) management system for AI agents using the iden3 protocol and Billions Network. While it handles sensitive private keys and defaults to plaintext storage in `~/.openclaw/billions/kms.json` if no master key is provided, this risk is thoroughly documented in `SECURITY.md` and `README.md` with clear instructions for enabling AES-256-GCM encryption and filesystem hardening. The code uses standard cryptographic libraries (ethers, @0xpolygonid/js-sdk), and its network activity is restricted to authorized DID resolvers (resolver.privado.id) and project infrastructure, with no evidence of data exfiltration or malicious intent.