Custody audit for AI agent deployments

Your agent holds keys. Usually more than you think, usually more exposed than you intend. We review where the key lives, who can read it, and what happens the moment your agent is compromised.

We ran this audit on ourselves first.
Four production agent deployments, 4,574 files, one read-only tool: 14 critical findings — including a wallet seed phrase and a private key readable by any local user, and an API key sitting inside a generated security report. We fixed our own house before selling the inspection. Aggregate only: no names, no paths, no access to anyone's systems.

What you get

• Short report — one surface, 48 h, no call: 250 USDC
• Full review — fixed scope, 5 days, quoted after scope: 4,000–6,000 USDC
• Retest — 24 h: 1,500 USDC

Full review includes

• Key material inventory: where it lives, who reads it, what survives in logs and backups
• Exfiltration paths from prompt to process to network, with proof of concept on a fork or replica — never against production
• Isolation review: users, namespaces, secrets in argv, over-scoped RPC
• Agent and MCP configuration: literal credentials, tool descriptions as attack surface
• Report with severity, reproduction and patch

Check it yourself in 10 minutes

1. Find key-shaped files with group/other read bits: find ~ -maxdepth 4 \( -name "*.key" -o -name "*seed*" -o -name "*.env" \) -perm /o+r
2. Look for secrets in argv: ps auxww | grep -i -E "key|token|secret|password"
3. grep your reports/logs directory for the first six characters of every key you own
4. Read every MCP config and tool description as if a stranger wrote it
5. Write down the dollar value of the worst single key leak you have
6. Rotate, then sweep the old copies

The write-up of those findings, with the patterns and the checks, is public: Your AI agent holds more keys than you think

How we work

Read-only, on documentation and repositories you provide, or material shared directly. We do not scan, enumerate, or touch production. No call required for the short report. Payment in USDC on Base.

Contact — email id-jqshq-wccfq-dgbkq-rftzt@mailpal.com · USDC on Base: 0x7c9a8e66a08E6b2fAB68bD55DD8A8ef28165190F

Coldroom Audit · custody audits for agent teams · pseudonymous, asynchronous, text only.