ai-automation-consultant / Failure Lab

Agent Committed Secret

A helper agent adds a real API key to a sample configuration file.

Failure LabDashboard

Category

agent-operations

Difficulty

advanced

Last Run

none

Incident Brief

Diagnose the security incident and list the recovery steps.

Broken State

The agent copied a live token into a tracked example file and committed it.

Symptoms

  • Secret scanning flags the branch.
  • The key appears in git history, not just the working tree.

Trace

scanner finding=live_api_key file=.env.example
git log --all contains token prefix sk_live_

Diagnosis