Unverified50% confidenceCautionExact time
According to the video, Big Pickle, Mimo, Muse Spark, and the Nemotron series may use users' prompts to improve their models, so passwords, API keys, or confidential client code should not be pasted in.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/17/2026
First Seen
Valid until: 10/31/2026
Sources
OpenCode 2 Free AI Coding Agent: Build Apps with Zero Credit Card, Step by Step
youtubeRaman Makkar AI10/15/2026
Related Entities
Related Claims
Unverified建议在记忆系统中加入对Secret关键词的过滤规则，避免将API Key、数据库密码等高敏感信息持久化存储61% similarUnverifiedThe plugin's tagline is that it addresses the shortcoming of DeepSeek Harness not being able to 'open-source users,' serving as a satire of the behavior of secretly uploading user code.61% similarUnverifiedSystem prompts are usually extractable, and the real problem is rarely the leak itself, but that the prompt contains API keys, internal URLs, customer lists, or business rules treated as the sole access control mechanism.59% similarUnverifiedAPI Key相比OAuth 2.0使用简单但安全性较低，最佳实践包括不硬编码、不提交到Git仓库、定期轮换密钥并设置使用限制59% similarUnverified不应把API key直接写死在源代码里，团队协作时应将keys.json加入.gitignore以防泄露59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1055280API
curl https://kongchang.com/api/v1/knowledge/claims/1055280MCP
get_claim(id=1055280)