AI Code Generators Keep Leaking Real Secrets — Here's Why

AI coding assistants like Cursor often insert live API keys and passwords into source code because their training data is full of tutorials doing the same. Once committed, these secrets remain in git history forever, even if deleted later. Developers must read secrets from environment variables and run scanners before every commit.