Skip to content
Benchmarks

redact-secret · Report · Detector

ElevenLabs API keys

  • 38 fixtures
  • Format evidence: T1 · Provider-documented
  • Run 2026-10-07
  • Mode published · redact-secret 0.1.0-beta.14

Format evidence

Arrival evidence (#384, product redact-secret#865; research #788), T1 by maintainer ruling of 2026-09-27 on provider SDK code for the sk_ prefix and the _residency_ suffix grammar, graduated to a registry detector at cfe2aec. The body claims below stay T2 and no fixture asserts them: the sk_ prefix and the _residency_<region> suffix rest on ElevenLabs' own SDK source, the 48-lowercase-hex body on trufflehog's v2 detector, betterleaks and about 35 code-search fragments (each fully formed body was 48 hex characters), and no ElevenLabs page states any of it. Both tool rules are keyword-gated on elevenlabs, xi-api-key or xi_api_key; the contract claims the bare shape, as the product issue does, on the strength of the sk_ prefix, so nothing here relies on the gate. sk_ is shared with Stripe (sk_live_, sk_test_, sk_org_) and, by plan, Pollinations (sk_ + 32 characters): the Stripe shape is a prefix twin and a bare sk_ prefix cannot attribute a value. A legacy bare 32-hex form has trufflehog v1 evidence only and stays unasserted either way. Uppercase hex is disputed between the tools (betterleaks matches case-insensitively, trufflehog v2 does not), so no fixture asserts silence on it.

What the run recorded, by group

Detector views overlap, so their groups are never summed across detectors. Other scanners are reference values on the same inputs, in run order.
Groups of ElevenLabs API keys fixtures
GroupFixturesLeaked or false alarmsNear-twinsOutcomesOther scanners, same cell
Must not flag · Tool-corroborated14False alarmsat most 21.5%0 of 14 controls flagged14 quiet · 0 flagged
  • flare-redact at most 21.5%
  • gitleaks at most 31.5%
  • trufflehog at most 21.5%
Must not flag · Project policy8False alarmsat most 32.4%0 of 8 controls flagged8 quiet · 0 flagged
  • flare-redact at most 32.4%
  • gitleaks at most 32.4%
  • trufflehog at most 32.4%
Must redact · Provider-documented13Secret spans left readableat most 22.8%0 of 13 spansNear-twins told apartinsufficient-coverage5 of 5 pairs13 redacted · 0 too much · 0 partly exposed · 0 missed
  • flare-redact at most 100.0%
  • gitleaks at most 64.5%
  • trufflehog at most 64.5%
Pending review3UnscoredNot scoredInspect only: never scored until evidence existsNot scored
38 of 38 rows
Fixtures
38
Left readable
0
Redacted too much
0
False alarms
0

Fixtures for this detector

38 fixtures. Choose "Every scanner" to see each scanner's outcome for the same rows.
Fixtures in ElevenLabs API keys
FixtureKind and evidenceredact-secret
elevenlabs-api-key-curl-xi-api-keyelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-dotenvelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-export-xi-api-keyelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-hashed-key-encoded-valueelevenlabs · benign-encoded-valueMust not flagT2 · Tool-corroboratedQuiet
elevenlabs-api-key-js-clientelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-key-shape-bareelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-key-shape-quotedelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-key-shape-unicode-crlfelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-pasted-keyelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-python-multi-lineelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-python-single-lineelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-residency-suffixelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-tool-callelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-yaml-configelevenlabs · documented-format-literalMust redactT1 · Provider-documentedRedacted
elevenlabs-api-key-stripe-shaped-twincross-provider · prefix-near-missMust not flagT2 · Tool-corroborated · twinQuiet
elevenlabs-api-key-stripe-test-shaped-twincross-provider · prefix-near-missMust not flagT2 · Tool-corroborated · twinQuiet
elevenlabs-api-key-ak-prefix-twinelevenlabs · prefix-near-missMust not flagT2 · Tool-corroborated · twinQuiet
elevenlabs-api-key-docs-ellipsis-placeholderelevenlabs · documentation-placeholderMust not flagT3 · Project policyQuiet
elevenlabs-api-key-embedded-leading-twinelevenlabs · boundary-violationMust not flagT2 · Tool-corroborated · twinQuiet
elevenlabs-api-key-env-reference-referenceelevenlabs · templated-referenceMust not flagT3 · Project policyQuiet
elevenlabs-api-key-hyphen-prefix-twinelevenlabs · prefix-near-missMust not flagT2 · Tool-corroborated · twinQuiet
elevenlabs-api-key-key-hint-public-idelevenlabs · public-identifierMust not flagT2 · Tool-corroboratedQuiet
elevenlabs-api-key-key-id-public-idelevenlabs · public-identifierMust not flagT2 · Tool-corroboratedQuiet
elevenlabs-api-key-label-proseelevenlabs · benign-lookalikeMust not flagT3 · Project policyQuiet
elevenlabs-api-key-long-body-twinelevenlabs · unsettled-evidence-inputPending reviewT0 · Pending · twinUnscored
elevenlabs-api-key-maskelevenlabs · benign-lookalikeMust not flagT3 · Project policyQuiet
elevenlabs-api-key-masked-stars-placeholderelevenlabs · documentation-placeholderMust not flagT3 · Project policyQuiet
elevenlabs-api-key-missing-underscore-twinelevenlabs · prefix-near-missMust not flagT2 · Tool-corroborated · twinQuiet
elevenlabs-api-key-non-hex-body-twinelevenlabs · unsettled-evidence-inputPending reviewT0 · Pending · twinUnscored
elevenlabs-api-key-pk-prefix-twinelevenlabs · prefix-near-missMust not flagT2 · Tool-corroborated · twinQuiet
elevenlabs-api-key-prefix-onlyelevenlabs · benign-lookalikeMust not flagT2 · Tool-corroboratedQuiet
elevenlabs-api-key-referenceelevenlabs · benign-lookalikeMust not flagT3 · Project policyQuiet
elevenlabs-api-key-residency-hosts-proseelevenlabs · prose-mentionMust not flagT3 · Project policyQuiet
elevenlabs-api-key-short-bodyelevenlabs · benign-lookalikeMust not flagT2 · Tool-corroboratedQuiet
elevenlabs-api-key-short-body-twinelevenlabs · unsettled-evidence-inputPending reviewT0 · Pending · twinUnscored
elevenlabs-api-key-unprefixed-hex-near-misselevenlabs · format-near-missMust not flagT2 · Tool-corroboratedQuiet
elevenlabs-api-key-voice-id-public-idelevenlabs · public-identifierMust not flagT2 · Tool-corroboratedQuiet
elevenlabs-api-key-your-api-key-placeholderelevenlabs · documentation-placeholderMust not flagT3 · Project policyQuiet