The application has hard-coded API keys exposed in the source code, specifically in utils/chatbot.py lines 6-7.
Why This Issue Matters:
- Security Risk: API keys are publicly visible in the repository
- API Abuse: Anyone can use these keys, potentially exhausting quotas
- Best Practices: Violates standard security practices for credential management
- Production Ready: The app can't be safely deployed with hard-coded keys