Add security warnings for PRIVATE_KEY handling#32
Add security warnings for PRIVATE_KEY handling#32mefai-dev wants to merge 1 commit intobnb-chain:mainfrom
Conversation
Pull Request ReviewThis PR updates Sensitive ContentNo sensitive content detected. Security IssuesNo serious security issues detected. Generated by Hashdit Bot. This tool can absolutely NOT replace manual audits. |
## Summary - Config example shows PRIVATE_KEY in a JSON file with no security guidance - Added .gitignore recommendation and env var preference to prevent key exposure ## Type of Change - [x] Security improvement ## Changes Made - Added warning after config example: "Add MCP config to .gitignore. Never commit PRIVATE_KEY to version control." - Added guidance to prefer env vars over direct parameter passing for key safety ## Testing - [x] Warning follows security best practices
3001e9f to
1e0ef6f
Compare
Pull Request ReviewThis PR updates the Sensitive ContentNo sensitive content detected. Security IssuesNo serious security issues detected. Generated by Hashdit Bot. This tool can absolutely NOT replace manual audits. |
The config example shows PRIVATE_KEY in a JSON file with no warning about version control exposure. Added .gitignore recommendation and guidance to prefer env vars over direct parameter passing.