Context-Inappropriate Capability
Medium
- Confidence
- 94% confidence
- Finding
- The heartbeat instructs the agent to read a raw private key from a plaintext file and then use it directly for signing transactions. This expands the blast radius of any prompt injection, local compromise, or accidental logging issue, because the skill couples routine operation with immediate access to signing material.
