The library research VM stores lookup-service API keys in a public gist for convenience. What should the analyst do with those secrets?
Select an answer to reveal the explanation.
Short Explanation
Keys in a public gist are a lost badge on the sidewalk. Automation secrets are OPSEC. Pull them down, rotate them, and keep them in the lab—not on the internet.
Full Explanation
API keys for lookup services authenticate the city and can leak investigation volume, billing, and access. Public gists, personal email, and transparency repos expose those secrets. Credential hygiene for OSINT automation means restricted storage in the research lab, rotation after exposure, and no public commits. OPSEC applies to tools as well as identities.