Actually it's quite the opposite, because of how they learn, they only know what the API keys and stuff look like because people kept accidentally committing them to GitHub. So there's a very solid chance that it either is a valid key or at least was at one point.