Do not open public issues containing keys, cookies, task solutions, browser state, private page data, or production payloads. Revoke exposed keys before reporting.