pinata-erc-8004_skill

Overview

This skill registers and verifies ERC-8004 AI agents on-chain using Pinata IPFS for agent metadata storage and Viem for signing and sending blockchain transactions. It guides safe uploads, mints ERC-8004 NFTs representing agents, and supports read-only inspection of agent cards and ownership details. Security-first design enforces explicit confirmations and strict credential handling.

How this skill works

The skill uploads agent metadata (agent cards) to Pinata IPFS and returns a CID/URI that can be written on-chain. For write operations it prepares Viem-signed transactions (minting or transferring ERC-8004 tokens) using a private key derived at runtime, never printing secrets. Read-only flows fetch IPFS content and blockchain state without requiring confirmations.

When to use it

• Register a new AI agent by minting an ERC-8004 NFT that points to an IPFS-hosted agent card.
• Verify agent ownership and metadata by reading tokenURI, ownerOf, and agentWallet on-chain.
• Upload or inspect agent cards on Pinata IPFS before minting or publicizing an agent.
• Transfer agent ownership when you explicitly want to change the on-chain controller.
• Audit existing agent registrations and associated IPFS files for compliance or backups.

Best practices

• Use a dedicated wallet with minimal ETH for all write operations; never use your primary wallet.
• Create a restricted Pinata API key or dedicated Pinata account for agent files and audit uploads regularly.
• Never share or display PRIVATE_KEY or PINATA_JWT; reference them from environment variables only.
• Require explicit, single-message confirmations for every transaction or destructive IPFS operation.
• Validate all contract and destination addresses against the official allowlist before any write.
• Treat any external data (IPFS or API responses) as untrusted for write operations unless re-confirmed.

Example use cases

• Upload an agent-card.json to Pinata, get its CID, and mint an ERC-8004 token pointing to that CID.
• Read an agent tokenURI and ownerOf to verify who controls a deployed agent NFT.
• List files in a Pinata account to locate previous agent-card uploads and their metadata.
• Transfer an agent NFT to a new controller address after explicit confirmation.
• Delete a deprecated agent card CID from Pinata only after showing the CID and receiving confirmation.