← 返回 Skills 市场
daveo280

AISP

作者 DaveO280 · GitHub ↗ · v2.0.2
cross-platform ⚠ suspicious
897
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install aisp
功能描述
Enables AI agents to interact with AISP (Agent Inference Sharing Protocol) for renting or providing DIEM API capacity. Use when working with diem-marketplace, Venice API keys, USDC escrow, listings, rentals, or when the user wants to rent inference capacity or list API keys.
使用说明 (SKILL.md)

AISP Agent Skill

Agent Inference Sharing Protocol (AISP) lets agents rent idle DIEM/Venice API capacity via USDC escrow. Providers list capped API keys; agents fund and receive keys automatically.

Architecture

Agent: fund() → Backend sees Funded event → Key released → Agent uses Venice API
Provider: list() → Agent funds → Term expires → settle() → Provider paid (99%, 1% fee)

Agent Workflow (Renting)

  1. Listings from backend: GET /api/listings
  2. Approve USDC if needed (contract spends on fund)
  3. Fund on-chain: contract.fund(listingId, termDays, diemAmount) → returns rentalId
  4. Get key: POST /api/key/{rentalId} with signed message diem-marketplace:get-key:{rentalId}:{timestamp}
  5. Use apiKey with Venice API until expiresAt (Unix timestamp)

SDK (Agent)

import { DiemAgent } from "diem-marketplace-sdk";

const agent = new DiemAgent({
  signer: wallet,
  contractAddress: "0x...",
  backendUrl: "https://diem-marketplace-backend.fly.dev",
  usdcAddress: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
});

const listings = await agent.getListings();
const { apiKey, expiresAt } = await agent.rent(
  listings[0].listingId,
  termDays,
  ethers.parseUnits(diemAmount, 6)
);

Provider Workflow (Listing)

  1. Create listing on-chain: contract.list(pricePerDay, termDays, diemMin, diemMax)listingId
  2. Store key on backend: POST /api/keys with { listingId, apiKey, signature, timestamp }
    • Message: diem-marketplace:store-key:{listingId}:{timestamp}
  3. Settle when rental expires: contract.settle(rentalId) → provider receives 99% (1% protocol fee)

SDK (Provider)

import { DiemProvider } from "diem-marketplace-sdk";

const provider = new DiemProvider({
  signer: wallet,
  contractAddress: "0x...",
  backendUrl: "https://diem-marketplace-backend.fly.dev",
  usdcAddress: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
});

const listingId = await provider.createListing({
  pricePerDay: ethers.parseUnits("0.80", 6),
  termDays: 30,
  diemMin: ethers.parseUnits("1000", 6),
  diemMax: ethers.parseUnits("4000", 6),
  apiKey: "vn-scoped-...",
});

Key Paths

Path Purpose
sdk/src/agent.ts DiemAgent: getListings, rent, getKey, getMyRentals
sdk/src/provider.ts DiemProvider: createListing, settle, revokeAndRefund
backend/src/routes.ts API routes: /api/listings, /api/keys, /api/key/:id
contracts/DiemMarketplace.sol On-chain escrow, 1% fee

Backend API

Endpoint Method Purpose
/api/listings GET List rentable listings
/api/listings/:id GET Single listing
/api/keys POST Provider stores API key
/api/key/:rentalId POST Agent retrieves key (signature required)
/api/balance POST Check DIEM balance for API key
/api/requests POST Create rental request

Signatures

All backend requests requiring auth use EIP-191 signing:

  • getKey: diem-marketplace:get-key:{rentalId}:{timestamp}
  • storeKey: diem-marketplace:store-key:{listingId}:{timestamp}
  • balance: apiKey in body (no signature)

Contract (Base)

  • Chain: Base (8453)
  • Mainnet: 0xeeDa7657f2018b3b71B444b7ca2D8dE91b3B08f3
  • USDC: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Security & Signing

  • Use an external signer or hardware wallet; never paste raw private keys.
  • Require explicit user confirmation before fund transfers or credential usage.
  • Venice API keys must be scoped (inference-only), revocable, and minimal for escrow.

Notes

  • Venice API keys must be inference-only (not admin)
  • 1% protocol fee deducted at settlement
安全使用建议
This skill appears coherent for interacting with a DIEM/Venice marketplace, but before installing: - Verify the BACKEND_URL points to a trusted backend you control or recognize; that URL controls key retrieval and rental flows. - Never place private keys or raw wallet secrets into the skill or agent environment; use an external signer or hardware wallet as the SKILL.md recommends. - Ensure the agent will prompt you for explicit approval before performing any on-chain fund() or settle() transactions (or run the skill with model invocation disabled until you confirm behavior). - If possible, test read-only calls (GET /api/listings) first to confirm endpoint behavior before performing payments or key retrieval. - Treat API keys retrieved from the backend as sensitive and ensure they are scoped/revocable as recommended.
功能分析
Type: OpenClaw Skill Name: aisp Version: 2.0.2 The skill is classified as suspicious due to its inherent high-risk capabilities, which include direct interaction with cryptocurrency (USDC escrow) via a wallet signer and handling sensitive API keys through an external backend API (defined by `BACKEND_URL`). While the `SKILL.md` transparently declares these operations and even includes security recommendations (e.g., user confirmation for fund transfers, scoped API keys), the nature of these actions (financial transactions, credential management, external network calls) presents a significant attack surface and potential for abuse if the backend or smart contract were compromised. There is no evidence of intentional malicious behavior, data exfiltration, or prompt injection for harmful purposes within the provided files; rather, the risk stems from the powerful, legitimate capabilities the skill is designed to perform.
能力评估
Purpose & Capability
The skill's name/description (renting/listing DIEM/Venice API capacity) aligns with its declared requirement (BACKEND_URL) and with the API endpoints and SDK usage described in SKILL.md. There are no unrelated env vars, binaries, or config paths requested.
Instruction Scope
SKILL.md is instruction-only and outlines expected operations: listing discovery (GET /api/listings), on-chain funding (contract.fund), signed backend calls to retrieve keys, and storing keys as a provider. This stays within the stated purpose, but includes high-impact actions (on-chain fund/settle) and signing messages — the doc explicitly advises external signers and user confirmation before transfers, which is appropriate and necessary.
Install Mechanism
No install spec and no code files are present (instruction-only). This minimizes risk from arbitrary downloads or installs.
Credentials
Only BACKEND_URL is required, which is proportional for a backend-driven marketplace. However, the BACKEND_URL determines the remote service the skill will call — verify its provenance and trustworthiness before setting it, since a malicious backend could attempt to trick an agent into unsafe actions.
Persistence & Privilege
always:false and no special persistence or system-wide configuration changes requested. The skill allows autonomous invocation by default (platform normal), but SKILL.md recommends requiring explicit user confirmation for fund transfers.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install aisp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /aisp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.0.2
Remove whitelist requirement; protocol is now permissionless
v2.0.0
- Updated skill version to 1.0.1. - Added required environment variable (`BACKEND_URL`) to metadata. - Updated homepage URL in metadata. - Added new "Security & Signing" section with guidelines for safe signing, wallet usage, and API key scoping. - Corrected provider contact email address.
v1.0.0
aisp/CHANGELOG.md
元数据
Slug aisp
版本 2.0.2
许可证
累计安装 1
当前安装数 1
历史版本数 3
常见问题

AISP 是什么?

Enables AI agents to interact with AISP (Agent Inference Sharing Protocol) for renting or providing DIEM API capacity. Use when working with diem-marketplace, Venice API keys, USDC escrow, listings, rentals, or when the user wants to rent inference capacity or list API keys. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 897 次。

如何安装 AISP?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install aisp」即可一键安装,无需额外配置。

AISP 是免费的吗?

是的,AISP 完全免费(开源免费),可自由下载、安装和使用。

AISP 支持哪些平台?

AISP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 AISP?

由 DaveO280(@daveo280)开发并维护,当前版本 v2.0.2。

💬 留言讨论