Unverified50% confidenceCautionExact time
如果API密钥被硬编码上传至公开仓库，会因GitHub被自动化爬虫扫描而产生意外费用、账号被封禁或数据泄露风险
1
Sources
50%
Confidence
Long-term
Relevance
7/21/2026
First Seen
Sources
Related Claims
UnverifiedNormal Security披露的GitLost研究指出，当AI编程代理能访问多个仓库时，一条公开issue可能成为数据泄露入口78% similarUnverified通过非官方平台获取的API密钥，其请求经中间服务器转发，对话内容、代码、提示词可能被中间方记录，存在敏感数据泄露风险77% similarUnverifiedOnce an API Key is leaked, others can charge expenses to your account; never hard-code it and commit it to a public code repository.77% similarUnverifiedAfter a successful attack, the attacker can steal local sensitive credentials, including API Keys, GitHub Tokens, and cloud service keys.77% similarPartially VerifiedGitHub has reported that thousands of API keys are accidentally committed to public repositories every day, resulting in serious security incidents.77% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/577956API
curl https://kongchang.com/api/v1/knowledge/claims/577956MCP
get_claim(id=577956)