Does anyone need a bot to continuously scan Slack/MS Teams for API keys?

No?

Can't you actually set up teams to actually block posts containing credentials before they're sent? I had to deal with false positives from this system when I worked at Microsoft. I think it even OCR'd screenshots to find credentials.