Unverified50% confidenceCautionExact time
将LiveKit的API密钥直接写在前端会导致任何人可提取并滥用，产生无限账单或恶意注入
1
Sources
50%
Confidence
Long-term
Relevance
10/4/2026
First Seen
Sources
Related Entities
Related Claims
Unverified提示注入在Agent系统中尤为危险，因为被攻陷的Agent可能拥有发送邮件、删除文件、调用支付API等真实世界权限66% similarVerifiedAPI Key 一旦泄露他人即可消费你的账户，切勿硬编码后提交到公开代码仓库66% similarUnverified如果API密钥被硬编码上传至公开仓库，会因GitHub被自动化爬虫扫描而产生意外费用、账号被封禁或数据泄露风险65% similarUnverifiedAPI Key一旦泄露，攻击者即可在全球任何地点以密钥持有者身份无限制调用API，服务器无法区分正当调用与盗用调用65% similarUnverifiedAPI Key本质上是一种Bearer Token鉴权机制，一旦泄露第三方可冒用账户消耗配额65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/973144API
curl https://kongchang.com/api/v1/knowledge/claims/973144MCP
get_claim(id=973144)