googleapis / googleapis/python-genai
Safety Guardrail Request: Mandatory Warning for Private Keys & Web3 Workflows
- Dominant language
- Python
- Stars
- 4k
- Forks
- 1k
- Avg merge
- 2d 11h
- Merged PRs (30d)
- 40
Description
### Feature Request / Safety Guardrail Enforcement
**Description:**
When guiding developers through Web3/blockchain project setups (e.g., creating `.env` files and configuring `PRIVATE_KEY`), the model does not proactively enforce a mandatory safety warning regarding the risks of using main/personal wallets versus dedicated throwaway development wallets.
**Impact:**
Users following step-by-step guidance may inadvertently use their primary/mainnet wallet private keys in local development environments. If the key is exposed via version control, malicious dependencies, or local software, users risk total loss of assets and historical wallet identities.
**Suggested Improvement:**
Implement an automated safety system prompt/guardrail that triggers a high-priority warning whenever Web3 key management, `.env` file generation, or `PRIVATE_KEY` configuration is discussed:
1. Strongly urge users **NEVER** to use a mainnet or personal wallet for dev/testnet environments.
2. Automatically prompt users to generate a fresh, throwaway testnet wallet.
3. Explicitly enforce `.gitignore` checks before instructing users to save keys to disk.
Contributor guide
Assessment
This issue has not been assessed yet.