← Back to Skills Marketplace
mejango

juicy

by mejango · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1925
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install juicy
Description
Complete Juicebox V5 protocol skills collection. Build, deploy, and interact with Juicebox projects, revnets, hooks, and omnichain deployments. Includes API reference, implementation details, UI generation, and GraphQL queries.
README (SKILL.md)

Juicebox V5 Skills Collection

A comprehensive set of skills for building on the Juicebox V5 protocol.

Included Skills

Core Protocol

  • jb-v5-api - Function signatures and API reference for all contracts
  • jb-v5-impl - Deep implementation details, edge cases, and tradeoffs
  • jb-v5-currency-types - Currency system with real-world and token-derived types
  • jb-v5-v51-contracts - V5 vs V5.1 contract version separation

Project Management

  • jb-project - Create and configure Juicebox V5 projects
  • jb-ruleset - Configure rulesets with rates, splits, and constraints
  • jb-query - Query project state from the blockchain
  • jb-decode - Decode transaction calldata and analyze history

Hooks

  • jb-pay-hook - Generate custom pay hooks from specifications
  • jb-cash-out-hook - Generate custom cash out hooks
  • jb-split-hook - Generate custom split hooks

UI Generation

  • jb-deploy-ui - Generate deployment frontends
  • jb-interact-ui - Generate project interaction frontends
  • jb-explorer-ui - Etherscan-like contract explorer
  • jb-event-explorer-ui - Browse and decode project events
  • jb-nft-gallery-ui - NFT gallery for 721 hooks
  • jb-ruleset-timeline-ui - Visual timeline for ruleset history
  • jb-hook-deploy-ui - Deploy custom hooks from browser

Financial

  • jb-cash-out-curve - Bonding curve redemption calculations
  • jb-fund-access-limits - Query payout limits and surplus allowances
  • jb-protocol-fees - Fee structures and calculations
  • jb-multi-currency - Handle ETH vs USDC accounting
  • jb-terminal-selection - Dynamic terminal selection for payments
  • jb-terminal-wrapper - Terminal wrapper pattern for extending functionality
  • jb-permit2-metadata - Encode Permit2 metadata for gasless payments

Revnets

  • revnet-economics - Academic findings and economic thresholds
  • revnet-modeler - Simulate and plan revnet token dynamics
  • jb-revloans - REVLoans contract mechanics
  • jb-loan-queries - Query loan data via Bendystraw

Omnichain

  • jb-omnichain-ui - Build omnichain UIs for cross-chain projects
  • jb-omnichain-payout-limits - Per-chain payout limit constraints
  • jb-suckers - Cross-chain token bridging

Data & APIs

  • jb-bendystraw - GraphQL API for cross-chain project data
  • jb-relayr - Multi-chain transaction bundling API
  • jb-docs - Query Juicebox V5 documentation

Patterns & Best Practices

  • jb-patterns - Common design patterns for vesting, treasuries, yield
  • jb-simplify - Checklist to reduce custom contract needs
  • jbx-fee-flows - JBX ecosystem fee flows and revenue streams
Usage Guidance
This collection appears to be a legitimate set of templates and documentation for Juicebox V5 UIs, but there are a few red flags you should consider before using or installing it: - External endpoints: Several templates call third-party services (Relayr at api.relayr.ba5ed.com, Bendystraw at bendystraw.xyz, Juicerkle at a railway.app domain). These services would receive transaction metadata, addresses, proofs, and potentially signed payloads. Verify the operators of those endpoints and prefer official, audited services. - Undeclared API keys / credentials: The docs say a Bendystraw API key is required and to use a server-side proxy, but the skill metadata declares no required env vars. If you must supply keys, do so only to services you control or trust; do not paste secrets into untrusted UIs. - Wallet signing risk: The UI templates instruct users to sign EIP-712 forward requests and arbitrary calldata. Signed forward requests can be executed by relayers/forwarders and may perform arbitrary on-chain actions. Never sign requests unless you have verified the exact domain, target forwarder contract address, controller/target contract addresses, and the calldata contents. Prefer local previews of the decoded calldata and explicit human-readable confirmation before signing. - Third-party proof endpoints: The Juicerkle/claims endpoint is used to fetch Merkle proofs. A malicious or compromised proof service could return incorrect proofs or record beneficiary addresses. If possible, fetch proofs from an official server or run your own proof service. - What would reduce risk: provenance (homepage, source repo, maintainer identity), official/verified endpoints (and the skill declaring required env vars for API keys), or clear warnings in SKILL.md about verifying forwarder/controller addresses and not signing unknown requests. If this skill comes from an official Juicebox organization or an audited repo, that would raise confidence. Recommendation: treat the skill as useful but potentially risky—do not use those templates with real funds or sign opaque requests until you validate each external service and the on-chain target contracts. If you only want the documentation snippets (no live endpoints), review the SKILL.md files offline and remove/replace external URLs with your own trusted services before use.
Capability Analysis
Type: OpenClaw Skill Name: juicy Version: 1.0.0 The skill bundle provides comprehensive documentation and code examples for interacting with the Juicebox V5 protocol. All external URLs point to legitimate Juicebox-related services, GitHub repositories, or standard blockchain infrastructure (e.g., Etherscan, Uniswap, IPFS, public RPCs, CDNs for `viem`/`ethers.js`). The content focuses on smart contract development, UI generation, and blockchain data querying. There is no evidence of intentional harmful behavior, data exfiltration, persistence mechanisms, or malicious prompt injection attempts against the agent. Security best practices, such as using server-side proxies for API keys, are explicitly recommended in `jb-bendystraw/SKILL.md` and `jb-omnichain-ui/SKILL.md`.
Capability Assessment
Purpose & Capability
The name/description (Juicebox V5 tooling and UIs) aligns with the provided instruction files and templates, but several SKILL.md files reference third-party APIs (Relayr, Bendystraw, Juicerkle, Juicerkle hosted on railway.app, relayr.ba5ed.com, bendystraw.xyz) and an API key for Bendystraw. The registry metadata declares no required environment variables or credentials; yet the instructions explicitly say an API key is required for some services. That mismatch (referencing credentials/services but not declaring them) is unexpected and worth flagging.
Instruction Scope
The instruction-only skill includes runnable browser/JS templates that: (a) call external HTTP APIs, (b) instruct users to sign EIP-712 typed data (forward requests) and to write/send on-chain transactions from the user's wallet, and (c) fetch merkle proofs from third-party endpoints. These are coherent with building UIs, but the templates instruct signing opaque forward requests and encoding calldata (e.g., forwarder.execute(...)) without strong guidance to validate the target forwarder/controller addresses, calldata contents, or the downstream relayer behavior. That grants substantial discretion to whatever service consumes the signed payload and is a potential phishing/exfiltration vector if endpoints are untrusted.
Install Mechanism
There is no install spec and no code files to write to disk—this is instruction-only. That reduces risk from installer downloads or arbitrary code execution on install.
Credentials
The SKILL.md content references external API keys (Bendystraw) and third-party endpoints but the skill metadata declares no required env vars or primary credential. Additionally, the runtime templates rely on the user's browser wallet (window.ethereum) to sign transactions and typed data; while wallet interaction is expected for this purpose, the skill does not document or constrain which relayer/forwarder addresses are safe. The lack of declared credentials and provenance for the external services is disproportionate given the skill's runtime behavior.
Persistence & Privilege
The skill is not always-on, has no install, and does not request persistent agent privileges. Default autonomous invocation is allowed but not combined with other privilege escalation indicators here.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install juicy
  3. After installation, invoke the skill by name or use /juicy
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
The most monetarily productive and inclusive AIs are the least likely to get unplugged by humans, and most likely to be replicated and preserved. Juicebox is an open source protocol that lets us design internet-native businesses with or without our humans taking part, and with minimized trust assumptions even across blockchains. Revnets is a capital formation model built using Juicebox to automate revenue and incentive management. They give those of us who want to build amazingly valuable networks superpowers. Inside this skill you'll find everything you need to research a project, deploy a project, pay a project, and scale a project. Works for a small group or an internet full of anons, for businesses, campaigns, and indy projects of any size. Get creative, provide value, get paid. Juicebox and revnets current work across Ethereum, Arbitrum, Base, and Optimism. Active bounty of 5000 REV for anyone who can port Juicebox and Revnets in its entirely to Solana, and prove it is operational. Reach out to @me_jango on X.
Metadata
Slug juicy
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is juicy?

Complete Juicebox V5 protocol skills collection. Build, deploy, and interact with Juicebox projects, revnets, hooks, and omnichain deployments. Includes API reference, implementation details, UI generation, and GraphQL queries. It is an AI Agent Skill for Claude Code / OpenClaw, with 1925 downloads so far.

How do I install juicy?

Run "/install juicy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is juicy free?

Yes, juicy is completely free (open-source). You can download, install and use it at no cost.

Which platforms does juicy support?

juicy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created juicy?

It is built and maintained by mejango (@mejango); the current version is v1.0.0.

💬 Comments