TY - RPRT TI - API Secrets Should Never Become Tokens in the LLM's Vocabulary: A Threat Analysis of API Credential Handling in LLM Agent Systems and an Empirical Evaluation of a Vault-Mediated Execution Boundary AU - Patrick Kenney AU - Hadi Ahmadi AU - Denis Lusson AU - Donald Nguyen AU - Gurbinder Gill PY - 2026 UR - https://arxiv.org/abs/2609.33371 ID - 2609.33371 ER -