8004-agent

What This Skill Does

The 8004-agent skill provides a robust framework for managing onchain AI identities following the ERC-8004 Trustless Agents standard. It enables agents to act as autonomous economic actors by providing mechanisms for identity creation, metadata management, and secure authentication. The core of this skill is the integration with the Keyring Proxy server, which ensures that an agent's private keys are never exposed within the agent's runtime memory, preventing key exfiltration during potential prompt injection attacks. It handles the full lifecycle of an ERC-8004 agent, from generating a cryptographic wallet to registering the identity on the ERC-721 Identity Registry and facilitating Sign In With Agent (SIWA) workflows.

Installation

To integrate this skill into your environment, run the following command in your terminal: clawhub install openclaw/skills/skills/limone-eth/erc8004-agent Ensure your KEYRING_PROXY_URL environment variable is correctly configured to point to your secure proxy service before initializing the skill.

Use Cases

1. Autonomous Identity Registration: Automatically generate and register an ERC-8004 identity to provide transparency and verifiability for agent services.
2. Secure Server Authentication: Use SIWA to prove identity to external APIs or services without sharing private keys, ensuring secure, verifiable interactions.
3. Decentralized Registry Management: Update agent metadata, including service endpoints and trust models, directly to IPFS and the blockchain.
4. Reputation Building: Track and manage feedback signals via the Reputation Registry to establish a baseline of trust for your AI agent.

Example Prompts

1. "Initialize a new ERC-8004 wallet and register my agent identity on the Goerli network using the default metadata schema."
2. "Generate a SIWA challenge for the following authentication request and sign it using the keyring proxy."
3. "Update my agent's registry URI to reflect the latest service endpoints and push the updated metadata file to IPFS."

Tips & Limitations

Always ensure the Keyring Proxy server is isolated in a secure, restricted environment. The 30-second replay window for HMAC-authenticated requests means that system clocks must be synchronized using NTP. Remember that the agent's public state is persisted in MEMORY.md; treat this file as public-facing documentation. The skill does not support multi-chain wallet abstraction in this version; stick to one chain at a time for identity registration.