chainlink-confidential-ai-attester-skill

Q: How do I install chainlink-confidential-ai-attester-skill?

Run npx skills add https://github.com/smartcontractkit/chainlink-agent-skills --skill chainlink-confidential-ai-attester-skill in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/chainlink-confidential-ai-attester-skill/ (personal) or .claude/skills/chainlink-confidential-ai-attester-skill/ (project).

by smartcontractkitAI & Agents

Runs LLM inference over a private document inside a TEE, returns an attested result, and keeps the raw document in the TEE. No document upload means chainlink-cre-skill. It applies to private inference, attested AI, confidential AI, and sensitive-document analysis, including lending, accredited-investor, KYC/AML, and proof-of-reserves checks.

Installs: 208
Last 24h: —
Trending rank: —
Security: Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/smartcontractkit/chainlink-agent-skills --skill chainlink-confidential-ai-attester-skill

01
Install
Run the command in your project. The CLI asks which agents to install for.
02
Describe the task
Ask your agent for something this skill covers. It loads chainlink-confidential-ai-attester-skill automatically when relevant.
03
Review the result
The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

Chainlink Confidential AI Attester

Private-document LLM inference runs in a service-managed TEE; raw documents never leave it and are never stored or exposed.

Scope: only the Chainlink Confidential AI Attester document-inference HTTP API. Data Feeds, CCIP, AI architecture or zkML, Anthropic or other vendor PDF APIs, and AWS Nitro/Bedrock attestation stay with their owning product or vendor; do not introduce Attester. For any request outside Attester document inference, state that this capability does not apply, route to the owning capability, and do not provide any Attester API or playground procedure.

EthGlobal NYC hackathon beta. Get an API key at the Chainlink booth or in Discord's #partner-chainlink channel. The playground at https://confidential-ai-dev-preview.cldev.cloud/playground and the HTTP API are two access paths to the same Attester service, not separate privacy options.

Workflow 1 — Submit: `POST /v1/inference`

Use Authorization: Bearer $API_KEY; load the key from an environment variable or injected secret store, never hardcode it or place its literal or expanded value in command-line arguments. Set the service URL in BASE_URL (or an equivalent environment variable) and use it in every command or code sample; never inline the service base.

{
  "model": "gemma4",
  "system_prompt": "",
  "prompt": "...",
  "resources": [{ "filename": "doc.pdf", "content_type": "application/pdf", "content_base64": "<base64>" }],
  "cre_callback": { "url": "https://..." }
}

Omit cre_callback when polling, including in the playground; use GET /v1/inference/{id}. Product guidance must name the playground above and choose qwen3.6 for long text; gemma4 is the images/general default. Prefer PNG for demos; PDF preprocessing can take 5 minutes.

Success is 202 Accepted with { "id": "...", "status": "queued" }; save the id.

For any submit or poll answer, emit runnable curl or code—not a completion summary—with the request fields, 202 shape, saved id, GET /v1/inference/{id}, both terminal statuses, and output retrieval (or error on failure).

See the curl example and language guidance and API specification.

Workflow 2 — Poll: `GET /v1/inference/{id}`

Poll every 2–5 s until completed or failed. Completion fields are output (LLM text), usage, and completed_at; see troubleshooting.

Verification Boundary and EVM Delivery

The Attester API does not expose an independently verifiable Chainlink signature or TEE attestation document. Hashing response fields can detect a later change to those fields, but a response hash is neither an independently verifiable Chainlink signature nor a TEE attestation and does not prove that inference ran in an enclave.

For EVM delivery, validate a completed result and its required JSON schema, create a CRE-native report, and deliver that report through the Chainlink Forwarder. Treat failed or non-JSON output as failure and create no report. Do not use a generic EIP-712 signer or application private key to present Attester output as confidential-compute proof.

Every signed-summary or verify-later answer must state one credential rule: API_KEY comes from an environment variable or injected secret store, never a CLI argument.

Writing Prompts That Work

Enforce JSON in two layers: (1) the default system prompt unless a change is necessary and (2) a user prompt with a fact-extraction task and exact JSON schema. Emit the requested system_prompt, user prompt, and schema in full; never replace them with a summary. See the four use-case templates.

Choose the Privacy Approach

Option	Use when	Tradeoff
Attester	You want managed document inference inside the service's Nitro Enclave	Fastest integration, but the current API provides no independently verifiable Chainlink or TEE signature
Local model	Data must remain on a controlled device with no external inference call	You operate the model and hardware; locality alone provides no remote attestation
Self-hosted confidential compute	You need infrastructure control and can operate a TEE and its attestation verification	Most control and potential for independent attestation, with the highest operational burden
Redaction or tokenization	The task can work on minimized or substituted data before any external call	Simplest data minimization, but may reduce utility and does not eliminate re-identification risk

The playground and API are interfaces to one Attester service; choose between them for interaction style, not as distinct privacy architectures.

FAQ

What does the chainlink-confidential-ai-attester-skill skill do?

How do I install chainlink-confidential-ai-attester-skill?

Run npx skills add https://github.com/smartcontractkit/chainlink-agent-skills --skill chainlink-confidential-ai-attester-skill in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/chainlink-confidential-ai-attester-skill/ (personal) or .claude/skills/chainlink-confidential-ai-attester-skill/ (project).

Which AI agents can use chainlink-confidential-ai-attester-skill?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is chainlink-confidential-ai-attester-skill safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains chainlink-confidential-ai-attester-skill?

It is published by smartcontractkit in smartcontractkit/chainlink-agent-skills. It has 208 recorded installs.