diff --git a/rdagent/components/coder/factor_coder/eurusd_llm.py b/rdagent/components/coder/factor_coder/eurusd_llm.py
index 1ce4e341..f0cad75b 100644
--- a/rdagent/components/coder/factor_coder/eurusd_llm.py
+++ b/rdagent/components/coder/factor_coder/eurusd_llm.py
@@ -362,8 +362,9 @@ if __name__ == "__main__":
 
     print("Konfigurierte Provider:")
     for provider in llm.providers:
-        # Security fix: Don't log API keys, only show status and masked endpoint
-        api_key_status = "✓ Key set" if provider.api_key else "✗ No key"
+        # Security fix: Don't log API keys or their presence, only show generic status and masked endpoint
+        # This prevents clear-text logging of sensitive information (CodeQL: py/clear-text-logging-sensitive-data)
+        api_key_status = "API key required"  # Constant string, not derived from provider.api_key
         masked_endpoint = provider.endpoint[:30] + "..." if len(provider.endpoint) > 30 else provider.endpoint
         print(f"  {provider.priority}. {provider.name} ({api_key_status}) - {masked_endpoint}")