T1-R5 in five minutes
A key in a source file will be copied.
Pass secrets by the environment of the machine that runs the call.
This lab's Python files do not need a key.
Logs should not print the key.
If a key leaks, rotate it at the provider. Confirm that provider's current steps.
The failure mode is not only theft. A key in a screenshot becomes part of a slide. Crop it or do not capture it.
Sources and go deeper
- OWASP Top 10 for Large Language Model Applications community last checked 2026-10
- NIST AI Risk Management Framework spec last checked 2026-10
- Large language model — Wikipedia wikipedia last checked 2026-10