Security audit patterns for AI API key leakage in applications integrating AI providers.

</overview> <rules>

针对集成AI服务商的应用中AI API密钥泄露问题的安全审计模式。

</overview> <rules>

Core Principles

核心原则

MUST treat AI API keys as secrets and keep them server-side.
MUST NOT ship keys to browsers or mobile clients.
SHOULD avoid logging keys; redact before logging or error reporting.
MUST rotate keys immediately if exposure is suspected.

</rules> <vulnerabilities>

必须将AI API密钥视为机密信息，仅保留在服务器端。
严禁将密钥部署到浏览器或移动客户端。
应避免记录密钥；记录或错误报告前需先脱敏。
一旦怀疑密钥泄露，必须立即轮换密钥。

</rules> <vulnerabilities>

Common Leak Paths

常见泄露途径

1) Client-Side Exposure

1) 客户端暴露

```
NEXT_PUBLIC_*
```
/
```
VITE_*
```
env vars containing AI keys
Direct calls to AI provider endpoints from browser code

包含AI密钥的
```
NEXT_PUBLIC_*
```
/
```
VITE_*
```
环境变量
浏览器代码直接调用AI服务商的接口

2) Build Artifacts

2) 构建产物

Keys embedded in bundles (
```
dist/
```
,
```
build/
```
,
```
.next/
```
)
Source maps exposing server code containing keys

密钥嵌入在打包文件中（
```
dist/
```
、
```
build/
```
、
```
.next/
```
）
Source map暴露包含密钥的服务器代码

3) Logs and Telemetry

3) 日志与遥测

```
console.log
```
/ logger statements that include key values
Error tracking payloads (Sentry, Datadog) with headers included

</vulnerabilities> <commands>

包含密钥值的
```
console.log
```
/ 日志语句
包含请求头的错误追踪负载（如Sentry、Datadog）

</vulnerabilities> <commands>

Quick Audit Commands

快速审计命令

bash

undefined

bash

undefined

Env files: AI keys accidentally exposed to client

环境文件：意外暴露给客户端的AI密钥

Client code calling AI APIs directly (check for browser use)

直接调用AI API的客户端代码（检查浏览器端使用情况）

Scan build outputs for likely keys (heuristic)

扫描构建产物中可能存在的密钥（启发式检测）

rg -a "sk-[A-Za-z0-9]{20,}|sk-ant-[A-Za-z0-9-]{20,}|sk-or-[A-Za-z0-9-]{20,}|AIza[0-9A-Za-z_-]{35}|hf_[A-Za-z0-9]{20,}" dist/ build/ .next/ 2>/dev/null

Service account credentials and cloud auth files

服务账号凭证与云认证文件

rg -n ""type"\s*:\s*"service_account"|GOOGLE_APPLICATION_CREDENTIALS|AWS_ACCESS_KEY_ID|AWS_SECRET_ACCESS_KEY|AZURE_OPENAI_API_KEY" . -g ".env" -g "*.json"


</commands>

<checklist>