Please report security problems privately through GitHub's security-advisory interface rather than a public issue.

This utility deliberately keeps API-key values out of the Buzz harness manifest. Operators remain responsible for injecting the named environment variable into Buzz and for protecting access to their model endpoint.