Close Open Privacy Scan

link https://github.com/vitali87/code-graph-rag
bolt Snapshot: commit ee15321
science engine v1.22
schedule 2026-07-22T04:07:41.827966+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: mcp, qdrant-client — detected in dependencies, not a safety judgment.

App Privacy Score

100 /100
Low privacy risk

Low risk · 11 finding(s)

Dependency score: 97 (Low risk)

bar_chart Score Breakdown

No category deductions recorded.

list Scan Summary

0 high 0 medium 11 low
First-party packages: 1
Dependency packages: 2
Ecosystem: rust

swap_horiz External domains

687fb701029421ae5549d998--8000.hf.jobsapi-inference.huggingface.coapi.anthropic.comapi.cerebras.aiapi.cohere.comapi.deepinfra.comapi.endpoints.huggingface.cloudapi.featherless.aiapi.fireworks.aiapi.github.comapi.groq.comapi.minimax.ioapi.novita.aiapi.openai.comapi.publicai.coapi.replicate.comapi.scaleway.aiapi.together.xyzapi.wavespeed.aiapi.z.aiapp.neptune.aiarxiv.orgastral.shattribution.omnilib.devblog.amjith.combugs.python.orgcdn-media.huggingface.cocdn.britannica.comcdnjs.cloudflare.comclear.mlclick.palletsprojects.comclip-cn-beijing.oss-cn-beijing.aliyuncs.comconemu.github.ioconsole.anthropic.comconsole.cloud.google.comcoqui.aicoverage.readthedocs.iodagshub.comdatasets-server.huggingface.codatatracker.ietf.orgdeveloper.apple.comdeveloper.mozilla.orgdevelopers.google.comdiscord.comdiscuss.huggingface.codiscuss.pytorch.orgdocs.github.comdocs.microsoft.comdocs.neptune.aidocs.nvidia.comdocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.pytorch.orgdocs.ray.iodocs.swanlab.cndocs.wandb.aidvc.orgeli.thegreenplace.neten.wikipedia.orgendpoints.huggingface.coessentia.upf.edufal.runfarm4.staticflickr.comfilesystem-spec.readthedocs.iofishshell.comflyte.orgformulae.brew.shgiou.stanford.edugist.github.comgit-scm.comgithub.comgoogle-auth.readthedocs.iogooseberrycreative.comguillaumejaume.github.iohf.cohg.python.orghips.hearstapps.comhub-ci.huggingface.cohub.my-company.comhuggingface.coi.postimg.ccimages.cocodataset.orgimages.pexels.cominference.api.nscale.cominotify.aiken.czjson-schema.orgjzgu0buei5.us-east-1.aws.endpoints.huggingface.cloudkeras.iolists.sourceforge.netmistralai.github.iomkdocstrings.github.iomodelcontextprotocol.iomsdn.microsoft.commy-text-to-image.region.vendor.endpoints.huggingface.cloudndjson.orgnew-url.comnew.webhook.sitenineplanets.orgnlp.stanford.eduoai.endpoints.kepler.ai.cloud.ovh.netonnxruntime.aiopenaipublic.blob.core.windows.netoptuna.readthedocs.iopaddle-model-ecology.bj.bcebos.compawamoy.github.iopbs.twimg.compendulum.eustace.iopeps.python.orgplatform.minimax.ioplatform.openai.comportal.azure.comproceedings.neurips.ccprotobuf.devpygments.orgpypi.orgpypi.python.orgpytorch.orgpyyaml.orgqianwen-res.oss-cn-beijing.aliyuncs.comqueue.fal.runqwenlm.github.ioraw.githubusercontent.comrequests.readthedocs.iorouter.huggingface.corrc.cvc.uab.essafetensors-convert.hf.spacestackoverflow.comstorage.googleapis.comsuno-ai.notion.siteswanlab.cnthumbs.dreamstime.comtimgolden.me.uktldp.orgtwine.readthedocs.iotwitter.comtyper.tiangolo.comupload.wikimedia.orgvt100.netwebhook.sitewww.apache.orgwww.brynosaurus.comwww.comet.comwww.cs.cmu.eduwww.deepmind.comwww.delorie.comwww.dvc.orgwww.google.comwww.googleapis.comwww.ietf.orgwww.ilankelman.orgwww.kxan.comwww.linuxjournal.comwww.mkdocs.orgwww.mlflow.orgwww.mlsite.netwww.nature.comwww.oreilly.comwww.paddleocr.aiwww.python-httpx.orgwww.python.orgwww.scivision.devwww.tensorflow.orgwww.textualize.iowww.w3.orgwww.w3schools.comwww.wandb.com

</> First-Party Code

first-party (rust): evals/oracles/rs_oracle

rust first-party
expand_more 1 low-confidence finding(s)
low env_fs test-only Excluded from app score #a8a1cd21fc4f8275 — Filesystem access.
repo/evals/oracles/rs_oracle/src/main.rs:486 
            if let Ok(src) = fs::read_to_string(&path) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

proc-macro2

rust dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #015049c2403dc82a — Environment-variable access.
pkgs/rust/[email protected]/build.rs:82 
    } else if let Some(rustc_bootstrap) = env::var_os("RUSTC_BOOTSTRAP") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b372ee2b8aa03fb — Environment-variable access.
pkgs/rust/[email protected]/build.rs:158 
    env::var_os("RUSTC_STAGE").is_none() && do_compile_probe(feature, rustc_bootstrap)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99c08efaa439e579 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:162 
    env::var_os("RUSTC_STAGE").is_some() || do_compile_probe(feature, true)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28a9eb3b913b8cfc — Environment-variable access.
pkgs/rust/[email protected]/build.rs:183 
    let rustc_wrapper = env::var_os("RUSTC_WRAPPER").filter(|wrapper| !wrapper.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0066dfa19dc1a85d — Environment-variable access.
pkgs/rust/[email protected]/build.rs:185 
        env::var_os("RUSTC_WORKSPACE_WRAPPER").filter(|wrapper| !wrapper.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01d3e9df33b32985 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:208 
    if let Some(target) = env::var_os("TARGET") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #238f5d280017b9c1 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:213 
    if let Ok(rustflags) = env::var("CARGO_ENCODED_RUSTFLAGS") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2675593d275417f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:260 
    env::var_os(key).unwrap_or_else(|| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

syn

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #b0c7106a417414f4 — Filesystem access.
pkgs/rust/[email protected]/benches/file.rs:36 
    let content = fs::read_to_string(FILE).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #539c91eac5994535 — Filesystem access.
pkgs/rust/[email protected]/benches/rust.rs:132 
            let content = fs::read_to_string(path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • pydantic-ai prod — no python source in sdist
  • tree-sitter-php prod — no sdist (wheels only)
  • torch prod — no sdist (wheels only)
  • pymilvus prod — no sdist (wheels only)