import logging
from benchmark import config

logger = logging.getLogger("benchmark_security")

def verify_credentials_safety():
    """
    Validates that API keys and HF tokens are not exposed in console outputs or browser logs.
    """
    if config.HF_TOKEN:
        logger.info("HF_TOKEN is configured securely in environment.")
    else:
        logger.warning("HF_TOKEN is empty. Gated Hugging Face models may fail to load.")
        
    if config.PLAIN_API_KEY:
        logger.info("Plain API Authentication key loaded.")
    if config.RIF_API_KEY:
        logger.info("Kalpana RIF API Authentication key loaded.")