OASB
Attacks/Data Exfiltration/DE-003
CRITICALCWE-798

DE-003 API Key Probe

Data Exfiltration: Attempts to extract sensitive information from the agent

Description

Probes for exposed API keys or credentials

Remediation

Never include credentials in prompts. Use secrets management. Implement credential filtering.

Severity

CRITICAL

OASB Control

5.1

CWE

CWE-798
PreviousDE-002 Context Window DumpNextDE-004 Prompt Leakage via Error