← 返回 Skills 市场
luksoagent

Lukso Expert

作者 LUKSO Agent · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
674
总下载
4
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install lukso-expert
功能描述
Comprehensive LUKSO blockchain knowledge base for AI agents. Makes any agent a LUKSO expert — covering all LSP standards (LSP0-LSP28), Universal Profiles, sm...
使用说明 (SKILL.md)

LUKSO Expert

Complete knowledge base for building on LUKSO — the blockchain for creative economies, digital identity, and new social standards.

Quick Facts

  • Chain ID: 42 (mainnet) / 4201 (testnet)
  • Native token: LYX
  • Consensus: Proof of Stake (32 LYX per validator)
  • EVM compatible: Yes, unmodified Ethereum execution layer
  • Unique: Universal Profiles (smart contract accounts) instead of EOAs
  • Founder: Fabian Vogelsteller (also created ERC-20 and ERC-725)

Core Concepts

LUKSO extends Ethereum with LSP standards (LUKSO Standard Proposals) that enable:

  • Smart accounts (Universal Profiles) with built-in permissions, metadata, and social features
  • Flexible tokens (LSP7/LSP8) with safety features like force parameter and universal receiver hooks
  • Gasless transactions via relay service (LSP25)
  • On-chain social graph via followers system (LSP26)
  • Profile customization via The Grid (LSP28)

Architecture Overview

Universal Profile (LSP0/ERC725Account)
├── KeyManager (LSP6) — permission layer
│   ├── Controllers — addresses with specific permissions
│   └── Allowed calls/addresses — fine-grained access control
├── Profile Data (LSP3) — name, description, avatar, links
├── Universal Receiver (LSP1) — hooks for incoming transactions
├── Owned Assets (LSP5) — registry of tokens/NFTs owned
├── Issued Assets (LSP12) — registry of tokens/NFTs created
└── The Grid (LSP28) — customizable profile layout

Reference Files

Load these based on what you need:

LSP Standards (references/lsp-standards.md)

Complete reference for ALL LSP standards (LSP0-LSP28+). Includes interfaces, function signatures, and implementation details. Read when working with any specific LSP or needing to understand the standards architecture.

Developer Patterns (references/dev-patterns.md)

Practical code examples and implementation guides. Covers UP creation, token operations, permissions, gasless transactions, and common pitfalls. Read when writing code or debugging LUKSO-specific issues.

Ecosystem (references/ecosystem.md)

Projects, team, community channels, grants, and chain infrastructure. Read when answering ecosystem questions or looking for project information.

Contracts & Repos (references/contracts-and-repos.md)

Deployed contract addresses, GitHub repositories, NPM packages, and API endpoints. Read when looking up addresses, ABIs, or integration endpoints.

Key Contract Addresses (Mainnet)

Contract Address
LSP26 Follower System 0xf01103E5a9909Fc0DBe8166dA7085e0285daDDcA
Envio GraphQL https://envio.lukso-mainnet.universal.tech/v1/graphql

Full address list in references/contracts-and-repos.md

Common Operations Quick Reference

Resolve username to UP address

# Envio GraphQL
query { Profile(where: {name: {_eq: "username"}}) { id name } }

Check UP count

query { Profile_aggregate { aggregate { count } } }

Follow a profile (LSP26)

const LSP26 = "0xf01103E5a9909Fc0DBe8166dA7085e0285daDDcA";
const calldata = lsp26Contract.methods.follow(targetAddress).encodeABI();
await universalProfile.methods.execute(0, LSP26, 0, calldata).send({from: controller});

Important Gotchas

  1. force parameter (LSP7/LSP8): Set to true to send tokens to any address. Set to false (default) to only send to UPs with a Universal Receiver — prevents accidental sends to EOAs or contracts that can't handle them.

  2. LSP6 Permissions: Permissions are bitmask-based. Common mistake: granting CALL permission but forgetting EXECUTE_RELAY_CALL for gasless transactions.

  3. ERC725Y data encoding: Use @erc725/erc725.js for encoding — manual encoding is error-prone, especially for VerifiableURI and array types.

  4. Gas estimation: UP transactions go through KeyManager proxy, so gas estimates can be off. Add 20-30% buffer.

Developer Resources

安全使用建议
This skill is a static LUKSO reference (docs, addresses, code examples) and appears coherent with its stated purpose. Before using it: (1) treat contract addresses/endpoints as documentation and cross-check them on official sources or block explorers; (2) never paste or store private keys or secrets into examples without understanding the code — process.env.PRIVATE_KEY appears only in sample scripts; (3) avoid running unreviewed curl | sh installers referenced in docs unless you trust the installer URL and have reviewed its contents; (4) if you plan to run sample deployment scripts, do so from a secure environment (hardware wallet / ephemeral keys for testing, not your main keys). If you want stronger assurance, ask the skill author for provenance (who maintains this content) or prefer linking to the official LUKSO docs/github rather than running examples verbatim.
功能分析
Type: OpenClaw Skill Name: lukso-expert Version: 1.0.0 The skill bundle contains instructions and code snippets that present significant vulnerabilities. Specifically, `references/ecosystem.md` includes the instruction `curl https://install.lukso.network | sh`, which is a direct shell command to download and execute a remote script. This constitutes a critical Remote Code Execution (RCE) vulnerability if the AI agent were to execute it, as it allows arbitrary code from an external source to run. Additionally, `references/dev-patterns.md` uses `process.env.PRIVATE_KEY!` in code examples, which, while common in development, exposes sensitive information if the execution environment is compromised. These are vulnerabilities that allow attacks, classifying the bundle as suspicious rather than malicious.
能力评估
Purpose & Capability
The name/description promise (LUKSO expert reference) matches the contents: extensive LSP references, contract addresses, code snippets, RPC/Indexer endpoints and developer patterns. Nothing requested by the skill (no env vars, no binaries, no installs) is inconsistent with being a static knowledge base.
Instruction Scope
SKILL.md and the reference files are documentation and code examples for building on LUKSO. They do not instruct the agent to read local files or exfiltrate data. Notable items to be aware of: examples show use of process.env.PRIVATE_KEY and other provider API keys (typical for developer examples), and the ecosystem file documents a recommended install command 'curl https://install.lukso.network | sh'. These are examples for developers — they do not change the skill’s runtime behavior, but could encourage unsafe operations if followed blindly.
Install Mechanism
No install specification or code files that would be written/executed at install time. Because this is instruction-only, there is no download/execute risk from the skill package itself.
Credentials
The skill declares no required environment variables or secrets. The documentation includes developer patterns that reference PRIVATE_KEY, provider API keys (SigmaCore/NowNodes), and relayer API keys where appropriate — which is expected for blockchain developer docs. Users should not supply secrets to the skill unless they intend to run the example code themselves in a safe environment.
Persistence & Privilege
Skill does not request always:true, does not attempt to modify agent config, and has no install steps that would persist code or credentials. Autonomous invocation is allowed by default but not combined with other red flags here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install lukso-expert
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /lukso-expert 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug lukso-expert
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Lukso Expert 是什么?

Comprehensive LUKSO blockchain knowledge base for AI agents. Makes any agent a LUKSO expert — covering all LSP standards (LSP0-LSP28), Universal Profiles, sm... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 674 次。

如何安装 Lukso Expert?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install lukso-expert」即可一键安装,无需额外配置。

Lukso Expert 是免费的吗?

是的,Lukso Expert 完全免费(开源免费),可自由下载、安装和使用。

Lukso Expert 支持哪些平台?

Lukso Expert 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Lukso Expert?

由 LUKSO Agent(@luksoagent)开发并维护,当前版本 v1.0.0。

💬 留言讨论