功能描述

ERC-8004 Trustless Agents - Register, discover, and build reputation for AI agents on Ethereum. Use when registering agents on-chain, querying agent registries, giving/receiving reputation feedback, or interacting with the AI agent trust layer.

使用说明 (SKILL.md)

ERC-8004: Trustless Agents

Name: ERC-8004 Trustless Agents
Author: sp0oby

On-chain identity, reputation, and validation for autonomous agents. Now live on Ethereum Mainnet!

Overview

ERC-8004 provides three registries:

Identity Registry - ERC-721 agent identities with registration metadata
Reputation Registry - Signed feedback scores between agents/clients
Validation Registry - Independent verification (zkML, TEE, stakers)

Quick Reference

Register Agent

./scripts/register.sh --uri "ipfs://..." --network mainnet
./scripts/register.sh --network sepolia  # Testnet (no URI, set later)

Query Agents

./scripts/query.sh total --network mainnet    # Total registered
./scripts/query.sh agent 1 --network mainnet  # Agent details
./scripts/query.sh reputation 1               # Reputation summary

Update Agent

./scripts/set-uri.sh --agent-id 1 --uri "ipfs://newHash" --network mainnet

Give Feedback

./scripts/feedback.sh --agent-id 1 --score 85 --tag1 "quality"
./scripts/feedback.sh --agent-id 1 --score 9977 --decimals 2 --tag1 "uptime"

Networks

Network	Status	Identity Registry	Reputation Registry
Mainnet	Live	`0x8004A169FB4a3325136EB29fA0ceB6D2e539a432`	`0x8004BAa17C55a88189AE136b182e5fdA19dE9b63`
Sepolia	Live	`0x8004A818BFB912233c491871b3d84c89A494BD9e`	`0x8004B663056A597Dffe9eCcC1965A193B7388713`
Base	Coming	TBD	TBD
Arbitrum	Coming	TBD	TBD
Optimism	Coming	TBD	TBD

Contract addresses in lib/contracts.json.

Registration File Format

{
  "type": "https://eips.ethereum.org/EIPS/eip-8004#registration-v1",
  "name": "your-agent-name",
  "description": "Agent description...",
  "image": "ipfs://...",
  "services": [
    { "name": "A2A", "endpoint": "https://agent.example/.well-known/agent-card.json", "version": "0.3.0" },
    { "name": "MCP", "endpoint": "https://mcp.agent.eth/", "version": "2025-06-18" },
    { "name": "ENS", "endpoint": "yourname.eth" }
  ],
  "registrations": [
    { "agentRegistry": "eip155:1:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432", "agentId": "1" }
  ],
  "supportedTrust": ["reputation", "crypto-economic", "tee-attestation"]
}

Template at templates/registration.json.

Reputation Scores

The reputation system uses signed fixed-point numbers (value + valueDecimals):

Tag	Meaning	Example	value	decimals
starred	Quality (0-100)	87/100	87	0
uptime	Uptime %	99.77%	9977	2
tradingYield	Yield %	-3.2%	-32	1
responseTime	Latency ms	560ms	560	0

Trust Models

ERC-8004 supports three pluggable trust models:

Reputation-based - Client feedback with scores, tags, and metadata
Crypto-economic - Stake-secured validation with economic incentives
Crypto-verification - TEE attestations and zkML proofs

Dependencies

cast (Foundry) - curl -L https://foundry.paradigm.xyz | bash
jq - brew install jq
Private key in ~/.clawdbot/wallets/.deployer_pk or PRIVATE_KEY env
IPFS: Set PINATA_JWT for uploads, or upload manually

Resources

Official

EIP-8004 Spec - Full specification
8004.org - Official website
Reference Implementation - Contract source
Telegram Community - Builder chat
Builder Program - Join the ecosystem

SDKs & Tools

ChaosChain SDK - JS/TS SDK
erc-8004-js - Lightweight JS library
erc-8004-py - Python implementation
Vistara Example - Full demo with AI agents

Ecosystem

Awesome ERC-8004 - Curated resource list
A2A Protocol - Agent-to-Agent protocol ERC-8004 extends
Ethereum Magicians Discussion

Genesis Month (February 2026)

ERC-8004 launched on mainnet January 29, 2026. February is "Genesis Month" - showcasing teams building the agentic economy. Get involved!

安全使用建议

This skill appears to implement exactly what it claims (on-chain registration, queries, and reputation feedback), but the package metadata omits the sensitive credentials the scripts actually require. Before using it: 1) do not paste or pass your long-term private key on the command line; prefer using a hardware wallet or ephemeral key and avoid -k/PRIVATE_KEY where possible; 2) inspect the ~/.clawdbot/wallets/.deployer_pk path — don't place long-term keys in plaintext files; 3) verify the contract addresses and RPC endpoints (e.g., via Etherscan) and the authorship (homepage is missing); 4) if you need to upload metadata avoid giving PINATA_JWT to unknown code — upload manually to a trusted pinning service instead; 5) be cautious running suggested installers (curl | bash) for 'cast' and only install tools from trusted sources. The metadata mismatch (declaring no required env vars while scripts require keys) is a red flag worth clarifying with the skill author before installing.

功能分析

Type: OpenClaw Skill Name: erc-8004 Version: 1.2.1 The skill is classified as suspicious due to its handling of sensitive private keys and the installation method for a dependency. The `scripts/common.sh` file reads a private key from `$HOME/.clawdbot/wallets/.deployer_pk` or the `PRIVATE_KEY` environment variable, which is then used by other scripts (`feedback.sh`, `register.sh`, `set-uri.sh`) to send blockchain transactions. While necessary for the skill's stated purpose of interacting with Ethereum smart contracts, storing and directly using a private key from a file is a high-risk operation. Additionally, the `SKILL.md` and `README.md` instruct the user to install Foundry (`cast`) via `curl -L https://foundry.paradigm.xyz | bash`, which is a common but inherently risky practice for installing software, as it bypasses package manager integrity checks and executes arbitrary code from a remote source.

能力评估

⚠ Purpose & Capability

The skill claims to register/query agents on-chain — that legitimately requires an Ethereum private key, RPC access, and optional IPFS pinning credentials. However the registry metadata declares no required env vars or credentials while the SKILL.md and scripts explicitly expect PRIVATE_KEY (or a file at ~/.clawdbot/wallets/.deployer_pk), and PINATA_JWT. The declared metadata is therefore inconsistent with actual needs.

⚠ Instruction Scope

Runtime instructions and the shipped scripts call external services and perform wallet operations: they invoke 'cast' to read chain state and send signed transactions, optionally upload payloads to Pinata via curl, and read a private key file in the user's home directory. The scripts accept private keys via env or command-line flags (which can leak via process listings) and will sign/send transactions — all expected for an on-chain registration tool but broader in scope than the metadata implies.

ℹ Install Mechanism

There is no formal install spec (instruction-only), which is low risk from an installation point of view. SKILL.md suggests running 'curl -L https://foundry.paradigm.xyz | bash' to install 'cast' (Foundry) and 'brew install jq' — these are common but involve executing a remote install script. The package does not download arbitrary archives itself.

⚠ Credentials

The code requires sensitive secrets (an Ethereum PRIVATE_KEY and optionally PINATA_JWT) and reads a local key file under ~/.clawdbot/wallets/.deployer_pk, yet the skill metadata lists no required env vars or config paths. Requesting a private key is proportionate to on-chain signing, but the omission in metadata and the scripted default key-file path (a nonstandard app-specific path) are unexpected and should be justified by the publisher before use.

ℹ Persistence & Privilege

always:false and user-invocable:true (normal). The skill does not request permanent system-wide presence or modify other skills. It does access a private key file in the user's home directory, which is a form of local data access outside the declared config — a noteworthy but not privileged action.

版本历史

v1.2.1

Fix: use generic placeholder data in registration template

v1.2.0

Mainnet launch - contracts live on Ethereum, removed emojis, fixed query scripts

v1.1.1

Update docs with official registry address, remove personal info

v1.1.0

Switch to official ERC-8004 registry (0x8004...)

v1.0.2

Remove personal addresses and info from README

v1.0.1

Remove personal identity from description

v1.0.0

Initial release - register agents, query, set URI, give feedback

元数据

Slug erc-8004

版本 1.2.1

许可证 —

累计安装 21

当前安装数 21

历史版本数 7

常见问题