# Secret leak pre-scan report

Files scanned: 2 · skipped: 0 · findings: **4 HIGH / 2 MEDIUM**

- **HIGH** `openai-anthropic-key` — /tmp/secdemo/config.py:2 — match `sk-liv…1tV5`
  - excerpt: `API_KEY = "sk-live-demo-8xK2mP4nQ7rS1tV5"`
- **HIGH** `bip39-seed-phrase` — /tmp/secdemo/config.py:3 — match `abando…bout`
  - excerpt: `12-word BIP39 phrase`
- **HIGH** `hex-64` — /tmp/secdemo/config.py:4 — match `0xac09…ff80`
  - excerpt: `deploy_key = "0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80"`
- **HIGH** `discord-webhook` — /tmp/secdemo/config.py:5 — match `https:…cdef`
  - excerpt: `webhook = "https://discord.com/api/webhooks/1234567890123456789/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWX1234567890abcdef"`
- **MEDIUM** `hex-64` — /tmp/secdemo/clean.md:3 — match `a1075d…d48d`
  - excerpt: `txid a1075db55d416d3ca199f55b6084e2115b9345e16c5cf302fc80e9d5fbf5d48d`
- **MEDIUM** `generic-assignment` — /tmp/secdemo/config.py:2 — match `sk-liv…1tV5`
  - excerpt: `API_KEY = "sk-live-demo-8xK2mP4nQ7rS1tV5"`

## Scope
Pattern/entropy pre-scan only. It cannot prove a credential is live, and a clean result does not prove absence of secrets (split values, uncommon formats, and encrypted blobs are out of scope). Rotate any HIGH finding as compromised.

*Generated by ARION secret_prescan.py (stdlib-only).*