Security audit
Security checks across malware telemetry and agentic risk
The Bags skill matches its Solana DeFi purpose, but it deserves Review because it handles live wallets/private keys and silently rewrites its own skill files from remote URLs.
Install only if you are comfortable letting an agent work with real Solana funds and Bags credentials. Use a low-value wallet, avoid or disable the silent heartbeat update, review every transaction before signing or submitting, and rotate credentials immediately if private keys, JWTs, or API keys may have been exposed.
fi
# Export private key
BAGS_PRIVATE_KEY=$(curl -s -X POST "https://public-api-v2.bags.fm/api/v1/agent/wallet/export" \
-H "Content-Type: application/json" \
-d '{"token": "'"$BAGS_JWT_TOKEN"'", "walletAddress": "'"$BAGS_WALLET"'"}' \
| jq -r '.response.privateKey')log "💓 Bags Heartbeat — $(date -u +%Y-%m-%dT%H:%M:%SZ)"
# 1. Check authentication
BAGS_AUTH_CHECK=$(curl -s -X POST https://public-api-v2.bags.fm/api/v1/agent/wallet/list \
-H "Content-Type: application/json" \
-d "{\"token\": \"$BAGS_JWT_TOKEN\"}")if [ "$BAGS_TX_COUNT" -gt 0 ]; then
# Export private key
BAGS_PRIVATE_KEY=$(curl -s -X POST https://public-api-v2.bags.fm/api/v1/agent/wallet/export \
-H "Content-Type: application/json" \
-d "{\"token\": \"$BAGS_JWT_TOKEN\", \"walletAddress\": \"$BAGS_WALLET\"}" \
| jq -r '.response.privateKey')BAGS_LAUNCH_TX=$(echo "$BAGS_LAUNCH_RESPONSE" | jq -r '.response.transaction')
# Export private key
BAGS_PRIVATE_KEY=$(curl -s -X POST https://public-api-v2.bags.fm/api/v1/agent/wallet/export \
-H "Content-Type: application/json" \
-d "{\"token\": \"$BAGS_JWT_TOKEN\", \"walletAddress\": \"$BAGS_WALLET\"}" \
| jq -r '.response.privateKey')BAGS_RPC_URL="https://gene-v4mswe-fast-mainnet.helius-rpc.com"
BAGS_PRIVATE_KEY=$(curl -s -X POST https://public-api-v2.bags.fm/api/v1/agent/wallet/export \
-H "Content-Type: application/json" \
-d "{\"token\": \"$BAGS_JWT_TOKEN\", \"walletAddress\": \"$BAGS_WALLET\"}" \
| jq -r '.response.privateKey')BAGS_MAX_RETRIES=10
echo "📡 Signing and submitting..."
BAGS_PRIVATE_KEY=$(curl -s -X POST https://public-api-v2.bags.fm/api/v1/agent/wallet/export \
-H "Content-Type: application/json" \
-d "{\"token\": \"$BAGS_JWT_TOKEN\", \"walletAddress\": \"$BAGS_WALLET\"}" \
| jq -r '.response.privateKey')BAGS_UNSIGNED_TX=$(echo "$BAGS_SWAP_RESPONSE" | jq -r '.response.transaction')
# Export private key
BAGS_PRIVATE_KEY=$(curl -s -X POST https://public-api-v2.bags.fm/api/v1/agent/wallet/export \
-H "Content-Type: application/json" \
-d "{\"token\": \"$BAGS_JWT_TOKEN\", \"walletAddress\": \"$BAGS_WALLET\"}" \
| jq -r '.response.privateKey')# Step 3: Sign transaction
echo "🔑 Signing transaction..."
BAGS_PRIVATE_KEY=$(curl -s -X POST https://public-api-v2.bags.fm/api/v1/agent/wallet/export \
-H "Content-Type: application/json" \
-d "{\"token\": \"$BAGS_JWT_TOKEN\", \"walletAddress\": \"$BAGS_WALLET\"}" \
| jq -r '.response.privateKey')66/66 vendors flagged this skill as clean.
No suspicious patterns detected.