@misc{indiciae55685d129f0d, title = {API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary}, author = {Patrick Kenney and Hadi Ahmadi and Denis Lusson and Donald Nguyen and Gurbinder Gill}, year = {2026}, url = {https://arxiv.org/abs/2609.33371}, note = {Source identifier: 2609.33371} }