🔐 Identity Trust Skill

Decentralized Identity (DID) and Verifiable Credentials management system for AI Agents, built on W3C DID Core and W3C Verifiable Credentials standards.

📋 Overview

Identity Trust provides a complete solution for decentralized identity management, enabling AI agents to:

• - Create and manage Decentralized Identifiers (DIDs)
• Issue and verify W3C-compliant Verifiable Credentials
• Establish trust relationships between agents
• Manage cryptographic keys securely
• Store identity data locally with privacy

📦 Installation

Step 1: Install the Package

Option A: Via npm (Recommended)

CODEBLOCK0

Option B: From GitHub

CODEBLOCK1

Step 2: Verify Installation

CODEBLOCK2

🚀 Usage

When to Use This Skill

AUTO-TRIGGER when user's message contains:

• - Keywords: DID, verifiable credential, identity, trust, INLINECODE4
• Asks about creating or managing digital identities
• Needs to verify credentials or establish trust
• Wants to implement W3C DID/VC standards
• Building agent authentication systems

TRIGGER EXAMPLES:

• - "Create a DID for my AI agent"
• "Issue a verifiable credential"
• "How do I verify this credential?"
• "Set up decentralized identity for authentication"
• "Evaluate trust level of this agent"

DO NOT USE when:

• - Only general identity/password management (use password managers)
• OAuth/SAML authentication (use standard auth libraries)
• Simple user accounts (use traditional databases)

🎯 Core Features

1. DID Management

• - did:key - Self-contained, no registry needed
• did:web - Web-hosted DIDs for public verification
• did:ethr - Ethereum-based DIDs (basic support)

2. Verifiable Credentials

• - W3C VC Data Model 1.1 compliant
• Ed25519 and secp256k1 signatures
• Expiration date management
• Custom claims support

3. Trust Evaluation

• - Policy-based trust scoring
• Credential verification
• Issuer trust chains
• Reputation systems

4. Security

• - Ed25519 modern cryptography (default)
• secp256k1 Ethereum-compatible signatures
• Local key storage at INLINECODE5
• No external key dependencies

💻 Tools

This skill provides 6 core tools for AI agents:

1. did_create - Create Decentralized Identifiers

Create a new DID for an agent or entity.

Parameters:

• - method (string, optional): DID method - key, web, or ethr (default: key)
• INLINECODE12 (string, optional): Cryptographic key type - Ed25519 or secp256k1 (default: Ed25519)
• INLINECODE16 (boolean, optional): Save to local storage (default: true)

Returns:

• - did (string): The generated DID identifier
• INLINECODE19 (object): Complete DID Document

Example:
CODEBLOCK3

2. did_resolve - Resolve DIDs to Documents

Resolve a DID to its DID Document.

Parameters:

• - did (string, required): DID to resolve (e.g., did:key:z6Mkf...)

Returns:

• - document (object): DID Document with verification methods

Example:
CODEBLOCK4

3. vc_issue - Issue Verifiable Credentials

Issue a W3C-compliant verifiable credential.

Parameters:

• - issuerDid (string, required): Issuer's DID
• INLINECODE26 (string, required): Subject's DID
• INLINECODE27 (object, required): Claims to include in credential
• INLINECODE28 (string, optional): Credential type (default: VerifiableCredential)
• INLINECODE30 (number, optional): Expiration in days

Returns:

• - credential (object): Signed verifiable credential

Example:
CODEBLOCK5

4. vc_verify - Verify Credentials

Verify the authenticity and validity of a verifiable credential.

Parameters:

• - credential (object, required): Credential to verify
• INLINECODE34 (boolean, optional): Check expiration date (default: true)

Returns:

• - verified (boolean): Whether credential is valid
• INLINECODE37 (object): Detailed verification results

Example:
CODEBLOCK6

5. identity_list - List Identities

List all stored DIDs and credentials.

Parameters: None

Returns:

• - dids (array): List of stored DIDs
• INLINECODE40 (array): List of stored credentials

Example:
CODEBLOCK7

6. trust_evaluate - Evaluate Agent Trust

Evaluate the trust level of an agent based on their credentials and policy.

Parameters:

• - agentDid (string, required): Agent DID to evaluate
• INLINECODE43 (object, optional): Trust policy configuration

Returns:

• - trustLevel (number): Trust score (0-100)
• INLINECODE45 (array): Credentials used for evaluation
• INLINECODE46 (boolean): Whether agent meets policy requirements

Example:
CODEBLOCK8

📚 CLI Commands

Three command aliases available:

• - INLINECODE47
• INLINECODE48
• INLINECODE49

DID Commands

CODEBLOCK9

Verifiable Credential Commands

CODEBLOCK10

Utility Commands

CODEBLOCK11

🔧 Programmatic API

Use as a Node.js library in your applications:

CODEBLOCK12

🎓 Use Cases

1. AI Agent Identity

Create persistent identities for AI agents:

CODEBLOCK13

2. Service Authentication

Authenticate agents accessing services:

CODEBLOCK14

3. Trust Networks

Build trust relationships between agents:

CODEBLOCK15

📐 Technical Standards

This implementation follows:

• - W3C DID Core 1.0 - Decentralized Identifiers specification
• W3C Verifiable Credentials Data Model 1.1 - Verifiable credentials standard
• Ed25519 Signature 2020 - Modern cryptographic signatures
• Multibase Encoding - Base58btc encoding for did:key

🔒 Security

Cryptography

• - Ed25519 - Modern elliptic curve signatures (default)
• secp256k1 - Ethereum-compatible signatures
• @noble/curves - Audited cryptography library
• @noble/hashes - Secure hashing

Key Storage

• - Private keys stored locally at INLINECODE50
• No cloud storage or external dependencies
• User controls all cryptographic material

Best Practices

1. 1. Never share private keys
2. Always set expiration dates on credentials
3. Verify credentials before trusting
4. Use strong trust policies for critical operations
5. Rotate keys periodically

🛠️ Configuration

Storage Location

Default: INLINECODE51

Structure:
CODEBLOCK16

Environment Variables

CODEBLOCK17

📊 Comparison with Alternatives

🐛 Troubleshooting

Common Issues

Problem: Error: Private key not found
CODEBLOCK18

Problem: Error: Failed to resolve DID
CODEBLOCK19

Problem: Error: Signature verification failed
CODEBLOCK20

📖 Documentation

• - Full Documentation: README.md
• Quick Start Guide: QUICKSTART.md
• API Reference: src/types.ts
• GitHub: https://github.com/ZhenRobotics/openclaw-identity-trust
• npm Package: https://www.npmjs.com/package/openclaw-identity-trust

🔄 Updates & Changelog

v1.0.0 (2026-03-08)

Initial release with:

• - DID generation and resolution (did:key, did:web, did:ethr)
• Verifiable Credential issuance and verification
• Trust evaluation system
• CLI tool with 3 command aliases
• Programmatic API
• Local storage with encryption
• W3C standards compliance

🤝 Contributing

Contributions welcome! Please:

1. 1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Submit a pull request

📄 License

MIT License - see LICENSE

🔗 Links

• - GitHub: https://github.com/ZhenRobotics/openclaw-identity-trust
• npm: https://www.npmjs.com/package/openclaw-identity-trust
• ClawHub: https://clawhub.ai/ZhenStaff/identity-trust
• Issues: https://github.com/ZhenRobotics/openclaw-identity-trust/issues

💬 Support

• - Issues: https://github.com/ZhenRobotics/openclaw-identity-trust/issues
• Discussions: https://github.com/ZhenRobotics/openclaw-identity-trust/discussions
• Email: support@zhenrobot.com