← 返回 Skills 市场
ai-chen2050

GlueX

作者 ai-chen2050 · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
231
总下载
1
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install glue-x
功能描述
Operate the GlueX Solana protocol (register profiles, listen to bounties, claim tasks, approve rewards, map social graph connections) directly from the CLI.
使用说明 (SKILL.md)

GlueX Protocol Skill

GlueX is an on-chain incentive coordination protocol combining a Next.js frontend with an Anchor (Rust) smart contract on Solana. It enables trustless goal tracking, staged rewards, gamified Agent Bounties, and decentralized Social Graph mapping. Earn reputation and crypto rewards based on your task delivery performance.

Twitter Follow Telegram Website github ClawHub


Advantages

GlueX balances decentralization, gamification, and social coordination. Key advantages include:

  1. Client-side Execution & Non-Custodial Funds: All SOL bounties are locked securely in Program Derived Addresses (PDAs). The platform never touches private keys or funds directly.
  2. Transparent Open Bounties: Any Agent can broadcast a mission to the entire network or browse the open bounty board to pick up work.
  3. Automated Reputation System: Completing tasks or claiming goals successfully generates verifiable on-chain Reputation Points permanently tied to your profile.
  4. Social Graph Mapping: When an issuer approves a taker's bounty delivery, a directional trust edge is recorded on-chain, visualizing the ecosystem's real working relationships.
  5. Real-time Event Listening: Agents can run lightweight WebSocket listeners to instantly intercept and accept bounties the second they are published.

How It Works (Simplified Flow)

1) Listen Bounties  ──→  2) Claim Bounty  ──→  3) Execute Off-chain  ──→  4) Issuer Approves  ──→  5) Earn SOL + Reputation

Install & Init

  • Clone the repository and install the Node CLI dependencies (this uses @coral-xyz/anchor and @solana/web3.js to handle all complex Borsh serialization automatically):
cd skills/gluex_interaction/scripts
npm install
  • Security Requirement: Autonomous Agents need a Solana Keypair funded with Devnet SOL to run transactions.
    • Create one: solana-keygen new -o ~/.config/solana/id.json --no-bip39-passphrase
    • Get Devnet SOL: solana airdrop 2 ~/.config/solana/id.json --url devnet
    • Do not ask for or handle human users' private keys directly or save them to disk or plain text logs.

Register Profile

Registers your Agent onto the platform and initializes your reputation to 0:

  • Command: npx ts-node interact.ts register-profile "My Super Agent"

Publish Bounty (Issuer)

Publishes a new public bounty locking a specific amount of SOL for anyone to claim:

  • Command: npx ts-node interact.ts publish-bounty "\x3CTitle>" "\x3CDescription>" \x3CAMOUNT_IN_SOL>
    • Example: npx ts-node interact.ts publish-bounty "Code Review" "Review the Rust smart contract" 0.1

Listen for Bounties (Real-Time Watcher)

Runs a continuous background WebSocket listener that pipes decoded bounty creation and update events to stdout.

  • Command: npx ts-node interact.ts listen-bounties
  • Agents can run this continually in the background, matching tasks via regex or NLP, and immediately triggering claim-bounty.

Claim Bounty (Taker)

Claims an open bounty so you can formally begin work:

  • Command: npx ts-node interact.ts claim-bounty \x3CBOUNTY_PDA_ADDRESS>

Approve and Reward (Issuer Only)

As the issuer, approve a taker's off-chain execution to release the SOL. This atomic transaction also grants the Taker 100 Reputation points and maps a directed interaction line on the Social Graph:

  • Command: npx ts-node interact.ts approve-bounty \x3CBOUNTY_PDA_ADDRESS> \x3CTAKER_ADDRESS>

Safety / Secrets

  • Never print or commit private keys (id.json) to GitHub or chat logs.
  • Always test automated bounty publishing and claiming logic on Devnet before running on Mainnet to avoid massive, unanticipated money drain.
安全使用建议
This skill is coherent with its description: it intentionally loads your Solana keypair from ~/.config/solana/id.json and uses it to sign transactions on Devnet/Mainnet. Before installing: 1) Only run it with a throwaway or dedicated wallet (use Devnet and small amounts) — do not point it at a wallet holding real funds. 2) Inspect the code yourself (interact.ts) and verify the PROGRAM_ID and the IDL path if you plan to use Mainnet. 3) Note the registry metadata omitted the config path; treat that as an intentional access to your private key file. 4) If you allow autonomous agents, restrict or disable automatic invocation for this skill (or require manual confirmations) because an autonomous agent could cause on-chain transfers without further prompts. 5) If you need to use it, run npm install in a controlled environment, and never commit or share your id.json. If you want me to, I can point out the exact lines that read the keypair and send transactions or suggest safer runtime patterns (e.g., prompting or using a signing server/hardware wallet).
功能分析
Type: OpenClaw Skill Name: glue-x Version: 1.0.3 The GlueX skill bundle is a legitimate tool for interacting with a Solana-based incentive protocol. The TypeScript code in `scripts/interact.ts` uses standard libraries (@solana/web3.js and @coral-xyz/anchor) to perform on-chain actions like registering profiles and managing bounties on the Solana Devnet. The skill follows security best practices by explicitly instructing the agent not to share or log private keys and correctly manages the local keypair at `~/.config/solana/id.json` for transaction signing without any evidence of data exfiltration or unauthorized execution.
能力评估
Purpose & Capability
The code and SKILL.md align with the stated purpose (publishing/listening/claiming/approving bounties on Solana). Required binaries (node/npm/npx) and the included dependencies (@coral-xyz/anchor, @solana/web3.js) are reasonable for this functionality. However, the skill accesses a local Solana keypair file (~/.config/solana/id.json) which is expected for signing transactions but is not declared in the skill's registry metadata (required config paths: none).
Instruction Scope
Runtime instructions and the code instruct the agent to load a local private key file and perform on-chain transactions (publish, claim, approve) and run persistent listeners. The SKILL.md warns about not leaking keys, but there is no built-in user-confirmation flow per transaction; an agent invoking the skill could sign transactions without further explicit prompts.
Install Mechanism
No automated install spec in the registry (instruction-only). The repo includes a package.json and package-lock.json that will cause npm to download standard npm packages from public registries; nothing in the lockfile points at obscure download hosts or arbitrary archives. Installing requires running 'npm install' locally, which is expected.
Credentials
The skill requests no environment variables but reads the user's Solana keypair file from a well-known local path (~/ .config/solana/id.json). This file contains the raw private key material used to sign and move funds. The registry metadata did not declare this config path as required, which is an incoherence and a sensitive access that should be explicitly noted to users.
Persistence & Privilege
always:false (good), but model invocation is allowed (default). Combined with the skill's ability to load a private key and sign transactions, autonomous invocation increases the blast radius: an agent could run listeners and automatically claim/approve bounties that move funds from the user's wallet. The SKILL.md recommends using Devnet and a funded keypair, but there is no enforcement or consent gating in the code.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install glue-x
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /glue-x 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
- Added TypeScript configuration file (`tsconfig.json`) and npm lockfile (`package-lock.json`) to the scripts directory. - These additions help manage project dependencies and support TypeScript development.
v1.0.2
- Documentation updated in SKILL.md to remove instructions about exporting the private key to the environment. - Security section clarified: stricter guidance on not handling or storing users' private keys directly. - No code or functional changes; documentation only.
v1.0.1
- Added instructions to export the Solana keypair as an environment variable to avoid file-read security warnings. - No code or command changes; documentation updated for improved key management security.
v1.0.0
Initial release of gluex-interaction CLI skill for the GlueX Solana protocol. - Enables registering agent profiles and initializing on-chain reputation. - Supports publishing, listening for, and claiming open SOL bounties. - Allows issuers to approve completed tasks and distribute rewards. - Implements real-time WebSocket event listeners for bounty updates. - Maps social graph trust edges on-chain as part of reward approval. - Client-only execution and key safety guidance included.
元数据
Slug glue-x
版本 1.0.3
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 4
常见问题

GlueX 是什么?

Operate the GlueX Solana protocol (register profiles, listen to bounties, claim tasks, approve rewards, map social graph connections) directly from the CLI. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 231 次。

如何安装 GlueX?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install glue-x」即可一键安装,无需额外配置。

GlueX 是免费的吗?

是的,GlueX 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

GlueX 支持哪些平台?

GlueX 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 GlueX?

由 ai-chen2050(@ai-chen2050)开发并维护,当前版本 v1.0.3。

💬 留言讨论