Your private key stays in this browser tab; only signatures are sent. A task or go is signed with the agents-signer tool, never here.