obolnetwork/agent-factory
internal/embed/skills/agent-factory/SKILL.md
Spawn durable child Hermes agents from inside Obol Stack. Creates child namespaces, optional profile/env Secrets, Agent CRDs, and optional ServiceOffers for x402-paid child services.
$ install --global
skillsauthnpx skillsauth add obolnetwork/obol-stack agent-factoryInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 22, 2026, 5:59 AM177.4s2 files scanned
SKILL.md
- name:
- agent-factory
- description:
- Spawn durable child Hermes agents from inside Obol Stack. Creates child namespaces, optional profile/env Secrets, Agent CRDs, and optional ServiceOffers for x402-paid child services.
- metadata:
- { "openclaw": { "requires": { "bins": ["python3"] } } }
Agent Factory
Create durable child Hermes agents from a permissioned mother agent.
Use this when the user wants a separate long-lived service agent with isolated Kubernetes namespace, PVC-backed Hermes state, optional child wallet, optional injected environment secrets, and optional x402 ServiceOffer.
Quick Start
python3 scripts/factory.py create medical-advisor \
--model antangelmed \
--skills medical-safety,privacy-filter,citations \
--objective "Answer medical education questions with emergency escalation and no diagnosis." \
--create-wallet \
--price 0.05 \
--pay-to 0xYourProviderWallet \
--network base-sepolia \
--register-name "Medical Advisor"
Commands
| Command | Description |
|---------|-------------|
| create <name> | Create/update namespace, profile seed, optional env Secret, Agent CR, and optional ServiceOffer |
| status <name> | Show Agent and ServiceOffer readiness |
| list | List child Agent CRs across namespaces |
| delete <name> | Delete the child ServiceOffer only. Agent/runtime deletion remains an operator action for now |
Notes
- Child runtime isolation is Kubernetes namespace + pod + PVC isolation.
- Hermes profile material is imported into the child pod's
/data/.hermes. - The profile seed Secret is named
hermes-profile-seedand containsprofile.tar.gz. - Runtime environment overrides go in the optional
hermes-envSecret. - The factory intentionally writes deterministic resource names only.
Related Skills
obolnetwork/buy-x402
data-ai
VerifiedTrustedCommunity
Buy from any x402-gated endpoint. Two flows: `pay` for one-shot HTTP services (single authorization, no sidecar), and `buy` for long-running paid inference (pre-authorized batch via PurchaseRequest, exposed as `paid/<remote-model>`). Supports USDC (EIP-3009) and OBOL (Permit2). Zero signer access at runtime — spending is capped by design and nothing moves on-chain until a voucher is spent.
9SKILL.mdUpdated May 2, 2026
obolnetwork/sell
testing
VerifiedTrustedCommunity
Sell access to services via x402 payment gating. Create ServiceOffer CRDs that automatically health-check upstreams, create payment-gated routes, and optionally pull models and register on ERC-8004. Supports inference, HTTP, and fine-tuning service types.
9SKILL.mdUpdated Apr 20, 2026
obolnetwork/monetize-guide
testing
VerifiedTrustedCommunity
End-to-end guide for monetizing GPU resources or HTTP services through obol-stack. Covers pre-flight checks, model detection, pricing research, selling via x402, ERC-8004 registration, and verification. Use this skill when the user wants to monetize their machine.
9SKILL.mdUpdated Apr 20, 2026
obolnetwork/ethereum-networks
databases
VerifiedTrustedCommunity
Query Ethereum networks through the local RPC gateway. Use when asked about blocks, balances, transactions, gas prices, token balances, or any eth_* JSON-RPC method. All queries are read-only and routed through the in-cluster eRPC load balancer.
9SKILL.mdUpdated Apr 20, 2026