Microsoft
MicrosoftI just tried this prompt using this message,
FYI, this Guro274272 goes with email I sent
The prompt returned "No secrets were discovered in the provided text: "FYI, this Guro274272 goes with email I sent". The scan completed successfully and did not identify any sensitive information. This result covers the entire submitted text."
Very disappointing
MicrosoftThanks for sharing the feedback.
In this case, the behavior you saw is expected. Agentic Secret Finder is context‑aware by design and focuses on identifying actual credentials or secrets with real security impact (for example API keys, tokens, passwords etc.). A string like “Guro274272” on its own without any surrounding context indicating what it is or what it grants access to, doesn’t provide a signal that it’s a credential. ASF intentionally uses contextual cues (such as how a value is referenced, what system it relates to, and whether it implies access) and therefore does not flag isolated strings like this, in order to avoid false positives.
