Kenney, P., Ahmadi, H., Lusson, D., Nguyen, D., & Gill, G. (2026). API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary. https://omanscience.com/en/articles/api-secrets-should-never-become-tokens-in-the-llm-s-vocabulary-a-threat-analysis-of-api-credential-handling-in-llm-agent-systems-and-an-empirical-eval