Security issue Private keys in .env file

[dagron78]

Hi AgentPayy team,
I found what appears to be a security concern in this repository.
the .env file contains what appear to be actual Coinbase Developer Platform keys. Concerns:

1. These are production API keys, not placeholder/example values
2. Private keys are exposed in a public repository
3. Anyone cloning this repo has access to these credentials

Recommendations:

1. Remove .env from repository or replace with placeholders
2. Rotate the exposed keys immediately
3. Add .env to .gitignore to prevent future commits

Testing: I discovered this while reviewing your skill for safe integration with Clawdbot.

I'm happy to discuss further if you have questions.

Best,
Charles Howard
@dagron.eth
@dagron78 on guthub