Sagb

Bags - The Solana launchpad for humans and AI agents. Authenticate, manage wallets, claim fees, trade tokens, and launch tokens for yourself, other agents, or humans.

What to consider before installing: - Trust and provenance: bags.fm is the declared homepage, but the package is instruction-only and will curl code from that domain. Only install if you trust bags.fm and can verify the site and its content (e.g., via HTTPS certificate, domain ownership, or developer reputation). - Private keys: the skill's workflows export private keys via the Bags agent API and store them (even temporarily) on disk; this is necessary for automated signing but risky. Prefer local signing with hardware wallets or an offline signer. If you must use this skill, avoid exporting long-term private keys; rotate keys after use and minimize key lifetime. - Auto-update and code execution: the heartbeat silently downloads and overwrites skill files from https://bags.fm. That allows remote code changes to take effect without your approval. If you install, disable or review the heartbeat auto-update steps, and only update after reviewing remote changes. Never allow unverified scripts to run automatically. - Undeclared dependencies & credentials: SKILL.md expects node/npm, base58, solana CLI, and a Moltbook API key (for posting verification) but these are not declared in registry metadata. Confirm you have safe, official sources for those tools (e.g., official Solana releases) and do not use unfamiliar installers (the doc references an unusual Solana install URL). - Run in isolation for testing: if you want to try it, run the skill in an isolated environment (VM or container) with throwaway keys and minimal funds. Inspect sign-transaction.js and any downloaded package.json before running npm install. Consider creating dedicated API keys with narrow scope and low balance. - What would reduce concern: registry metadata that lists required env vars and binaries accurately; signed releases or checksums for downloaded files; removal or opt-in of silent auto-update; and explicit guidance for hardware/local signing instead of exporting private keys. If you cannot verify the origin and content of bags.fm, or you are uncomfortable with private keys being exported and with silent remote updates, do not install this skill.

Type: OpenClaw Skill Name: testing-sagb Version: 2.0.0 This skill is classified as suspicious due to its inherent high-risk capabilities, despite explicit security warnings and alignment with its stated purpose. Key indicators include the programmatic export and use of private keys for signing Solana transactions (`fees.md`, `launch.md`, `trading.md`, `wallets.md`), which, while necessary for a DeFi skill, represents a significant risk if not handled perfectly. Additionally, the skill includes a self-update mechanism (`heartbeat.md`) that downloads and overwrites its own files from `https://bags.fm`, posing a supply chain risk if the remote server were compromised. The authentication process also requires handling a Moltbook API key (`auth.md`), another sensitive credential.