Glossary · Security and privacy
Secret leakage
Accidental exposure of credentials, keys, tokens, or internal values. Redaction at display time does not remove secrets already sent to a provider or log.
Terms this definition uses
Security and privacy
Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
Indirect prompt injection · Direct prompt injection · Jailbreak · Data exfiltration · Sensitive information disclosure · Insecure output handling · Excessive agency · Least privilege · Trust boundary · Input validation · Output validation · Allowlist · Denylist · SSRF · RCE · Credential scope · OAuth scope · API key · Bearer token · mTLS · Rate-limit policy · Audit log · PII · Data minimization · Purpose limitation · Retention period · Data residency · Tenant isolation · Threat model
← Sensitive information disclosure · Insecure output handling →
See it in the full glossary · 579 terms across 19 areas. Scan a site to see which of these apply to it.