skills.rest
zscole
zscoleCOMMUNITY
Explore all skills by this author →
Website𝕏@0xzakGitHub

bagman

Retrieve runtime secrets and sanitize outputs for AI agent wallets.

18|7|Updated Feb 8, 2026
Search Tags:#delegation#on-chain#secret-management#prompt-injection#bagman#credential-security
One-click install
npx skills add https://github.com/zscole/bagman-skill --skill bagman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bagman
Source: https://github.com/zscole/bagman-skill/tree/main
Command: npx skills add https://github.com/zscole/bagman-skill --skill bagman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Bagman addresses the challenges of securely managing secrets and wallet keys for AI agents, preventing key loss, accidental exposure, and prompt injection.

Core Features & Use Cases

  • Runtime secret retrieval through 1Password-style vault patterns
  • Output sanitization to redact keys, tokens, and sensitive data
  • Input validation to block prompt injection and malicious prompts
  • Delegated access with bounded session keys (ERC-4337) and on-chain caveats (EIP-7710)
  • Isolated wallet operations to keep sensitive keys separate from conversation context

Quick Start

Install 1Password CLI and authenticate, then store agent credentials in a vault and run the test suite to verify setup.

Frequently Asked Questions about bagman

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage wallet keys for AI agents?▼

Secure DeFi wallet access for AI agents by enforcing on-chain delegations with bounded session keys using ERC-4337 and caveats via EIP-7710, ensuring autonomous execution without exposing master keys.

How does on-chain delegation for AI agents work?▼

On-chain delegation for AI agents works by issuing bounded session keys through ERC-4337 and applying on-chain caveats with EIP-7710, allowing isolated wallet operations without exposing the primary wallet key.

How do I prevent prompt injection when an AI agent uses API credentials?▼

Prevent prompt injection when an AI agent uses API credentials by enforcing input validation to block malicious prompts and applying output sanitization to redact keys, tokens, and sensitive data from the agent's responses.

Do I need 1Password CLI to use delegated wallet access for AI agents?▼

Yes, the 1Password CLI is required for delegated wallet access, as it provides the runtime secret retrieval vault pattern used to securely store and manage agent credentials before executing isolated wallet operations.

What are the limitations of using bounded session keys for AI agent workflows?▼

The limitation of using bounded session keys for AI agent workflows is that delegation is restricted by on-chain caveats defined via EIP-7710, meaning agents cannot perform operations outside the explicitly bounded session scope.

Related Skills

Explore More Software Engineering Skills→
julianobarbosajulianobarbosa
7

1password

Retrieve and inject 1Password secrets via op CLI and Kubernetes operators.

Community
Intermediate
WieedzeWieedze
1

mms-smart-accounts-kit

Create and manage ERC-4337 smart accounts with gasless transactions and ERC-7715 permissions.

Community
Advanced
n4igmen4igme

vuln-web3-aa

Detect Account Abstraction vulnerabilities in ERC-4337 implementations and append findings to vulnerabilities.md.

Community
Advanced
readtheskillreadtheskill
3

lit-protocol-wallet

Manage programmable key pairs for multi-chain signing with MPC/TEE security.

Official
Advanced