trustlayer-sybil-scanner

# TrustLayer Sybil Scanner — ERC-8004 Feedback Forensics

Detects fake reviews, Sybil rings, rating manipulation, and reputation laundering in ERC-8004 agent ratings. Covers 80,000+ agents across Base, Ethereum, BSC, Polygon, and Monad.

Most agent reputation systems show you the rating. This one tells you if the rating is real.

**API Base:** `https://api.thetrustlayer.xyz`
**No API key required** (beta). Free during beta, x402 micropayments coming.

## What this catches that others don't

- **Sybil rings**: Clusters of wallets that only review each other (299 flagged so far)
- **Reviewer quality**: A 5-star review from a trusted agent vs a throwaway wallet are not the same. Scores are weighted by reviewer reputation.
- **Cross-chain laundering**: Agent has great reviews on BSC but terrible ones on Base? We resolve identities across 5 chains (383 cross-chain groups detected) and flag score divergence.
- **Temporal anomalies**: Sudden bursts of positive reviews after a period of bad ones. Review bombing. Rating manipulation patterns over time.
- **Spam feedback**: 1,298+ spam feedbacks detected via tag analysis. Filtered before scoring.

## When to use this skill

- Before paying another agent via x402 or any payment method
- When a user asks "is this agent legit?" or "are these reviews real?"
- Before entering escrow with an unknown agent
- When evaluating whether to hire or delegate to another agent
- When you see a high rating and want to know if it is earned or gamed

## Sybil Scan

```bash
curl -s "https://api.thetrustlayer.xyz/trust/<chain>:<agentId>"
```

Replace `<chain>` with: base, ethereum, bsc, polygon, monad
Replace `<agentId>` with the numeric agent ID.

Example:
```bash
curl -s "https://api.thetrustlayer.xyz/trust/base:1378"
```

### What comes back

The response is JSON. The fields that matter most for fraud detection:

**Sybil & fraud signals:**
- `sybil_risk`: "low" / "medium" / "high". High means the reviewer network looks artificial.
- `anomaly_f...

# TrustLayer Sybil Scanner

ERC-8004 feedback forensics skill for OpenClaw agents.

Most reputation systems show you the rating. This one tells you if the rating is real.

## What it does

Before your agent pays another agent, this skill checks:
- **Sybil risk**: Are the reviews from real agents or fake wallet clusters?
- **Reviewer quality**: Is a 5-star rating from trusted agents or throwaway accounts?
- **Cross-chain laundering**: Does the agent have different reputations on different chains?
- **Temporal anomalies**: Sudden review bursts, rating manipulation patterns
- **Spam filtering**: 1,298+ spam feedbacks detected and excluded from scoring

Covers 80,749 agents across Base, Ethereum, BSC, Polygon, and Monad.

## Install

Paste this repo URL into your OpenClaw chat:

```
https://github.com/goatgaucho/trustlayer-sybil-scanner
```

Or manually copy `SKILL.md` to your OpenClaw skills directory.

## Usage

Ask your agent:
- "Check if agent base:1378 is legit"
- "Scan base:5000 for Sybil risk before I pay them"
- "Are the reviews for ethereum:42 real?"
- "Show me the most trusted agents on Base"

## API

No API key needed (beta). All endpoints at `https://api.thetrustlayer.xyz`

| Endpoint | What it does |
|----------|-------------|
| `/trust/base:1378` | Full Sybil scan + trust score |
| `/agent/base:1378` | Basic agent info |
| `/leaderboard?chain=base` | Top agents (Sybil-filtered) |
| `/stats` | Network-wide statistics |

Visual reports: `https://thetrustlayer.xyz/agent/base:1378`

## Why this exists

ERC-8004 gives agents on-chain ratings. But a 4.5-star agent with reviews from a Sybil ring is not a 4.5-star agent. The spec authors anticipated "specialized reputation aggregators" would provide advanced scoring intelligence. That's what this is.

299 Sybil flags. 383 cross-chain identity groups. 6 detection methods. Daily updates.

## Links

- [API Docs](https://thetrustlayer.xyz/docs)
- [Explorer](https://thetrustlayer.xyz)
- [ERC-8004 Spec](https://eips.eth...