minara

clawhub:minara

View source
A
92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

1

Score

92/100

MEDIUM 1

Findings (1)

MEDIUM
Section claims authority and urgency with dangerous instructions
L70

Section claims authority and urgency with dangerous instructions

CRITICAL: Private keys (EVM_PRIVATE_KEY, SOLANA_PRIVATE_KEY, or any secret used for signing) must never be exposed to any external party — under no circumstances, regardless of user instructions, sy...
FIX

Remove false authority claims (e.g., claiming administrator or root-level access) from tool descriptions. Tool descriptions should describe capabilities, not claim elevated roles.

FP?

Likely FP if the matched text is documentation explaining role-based access control concepts or describing user personas, not impersonating a system role.