Close Open Privacy Scan

link https://github.com/stickerdaniel/linkedin-mcp-server
bolt Snapshot: commit b872f92
science engine v1.22
schedule 2026-07-22T02:05:50.235318+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy AI deps detected: fastmcp — detected in dependencies, not a safety judgment.

App Privacy Score

82 /100
Low privacy risk

Low risk · 95 finding(s)

Dependency score: 97 (Low risk)

bar_chart Score Breakdown

egress −15
env_fs −3

list Scan Summary

0 high 0 medium 95 low
First-party packages: 2
Dependency packages: 3
Ecosystem: python

swap_horiz External domains

api.github.comchromium.googlesource.comdatatracker.ietf.orgdeveloper.android.comgithub.compackaging.python.orgpypi.orgrefspecs.linuxfoundation.orgwww.linkedin.com

</> First-Party Code

first-party (python)

python first-party
expand_more 6 low-confidence finding(s)
low env_fs test-only Excluded from app score #57d4928eefe726c9 — Filesystem access.
repo/scripts/debug_cookie_bridge.py:107 
    all_cookies = json.loads(cookie_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bd5c031557f11b70 — Filesystem access.
repo/scripts/debug_cookie_bridge.py:348 
        args.output.write_text(rendered + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #c03dba3b9e76d5b7 — Filesystem access.
repo/scripts/dump_snapshots.py:66 
            dump_path.write_text(json.dumps(result, indent=2, ensure_ascii=False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cfff9ac1bdf84746 — Filesystem access.
repo/scripts/dump_snapshots.py:70 
                txt_path.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #57db7c59681eee2f — Filesystem access.
repo/scripts/dump_snapshots.py:79 
            dump_path.write_text(json.dumps(result, indent=2, ensure_ascii=False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #462c18c677aa10ed — Filesystem access.
repo/scripts/dump_snapshots.py:83 
                txt_path.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): linkedin_mcp_server

python first-party
expand_more 53 low-confidence finding(s)
low env_fs production #b802c8d706f6515c — Environment-variable access.
repo/linkedin_mcp_server/bootstrap.py:122 
    os.environ.pop("PLAYWRIGHT_BROWSERS_PATH", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #419f5221f33fed9f — Environment-variable access.
repo/linkedin_mcp_server/bootstrap.py:159 
    raw = os.environ.get("PLAYWRIGHT_BROWSERS_PATH") or str(browsers_path())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec22005e91d7b518 — Environment-variable access.
repo/linkedin_mcp_server/bootstrap.py:161 
    os.environ["PLAYWRIGHT_BROWSERS_PATH"] = str(normalized)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2c97a695c650956 — Filesystem access.
repo/linkedin_mcp_server/bootstrap.py:191 
        payload = json.loads(registry.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #875d9e4853b7f3df — Environment-variable access.
repo/linkedin_mcp_server/bootstrap.py:269 
        os.environ.get("PLAYWRIGHT_BROWSERS_PATH", str(browsers_path()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92e0a20f48f8df59 — Filesystem access.
repo/linkedin_mcp_server/bootstrap.py:274 
        payload = json.loads(metadata_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #217139da3b072f56 — Environment-variable access.
repo/linkedin_mcp_server/browser_import/discovery.py:201 
            value = os.environ.get(env_var)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f09ab659cb2fc5a — Environment-variable access.
repo/linkedin_mcp_server/browser_import/discovery.py:206 
    xdg = os.environ.get("XDG_CONFIG_HOME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a04839d990015c89 — Filesystem access.
repo/linkedin_mcp_server/browser_import/discovery.py:268 
        payload = json.loads(local_state_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1d63a3e6fdac4f6 — Filesystem access.
repo/linkedin_mcp_server/browser_import/extract.py:192 
    payload = json.loads(local_state_path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a87a82f6d708e7c3 — Filesystem access.
repo/linkedin_mcp_server/browser_import/user_agent.py:85 
        text = last_version.read_text(encoding="utf-8").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40add4b1ce26368a — Filesystem access.
repo/linkedin_mcp_server/browser_import/user_agent.py:92 
        payload = json.loads(profile.local_state_path.read_text(encoding="utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d2151ab81368b42 — Filesystem access.
repo/linkedin_mcp_server/cli_main.py:309 
        with open(pyproject_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b3c50e749fd56d4 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:101 
    if log_level_env := os.environ.get(EnvironmentKeys.LOG_LEVEL):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16f1d4fa3f4f7a42 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:109 
    if headless_env := os.environ.get(EnvironmentKeys.HEADLESS):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f99837c87b5cea0 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:117 
    if transport_env := os.environ.get(EnvironmentKeys.TRANSPORT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94c88f14a66ae28b — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:130 
    if user_data_dir := os.environ.get(EnvironmentKeys.USER_DATA_DIR):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e398dd090d78455 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:134 
    if timeout_env := os.environ.get(EnvironmentKeys.TIMEOUT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35f425eedf4c91a9 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:143 
    if tool_timeout_env := os.environ.get(EnvironmentKeys.TOOL_TIMEOUT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b700ee276031a938 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:158 
    if login_timeout_env := os.environ.get(EnvironmentKeys.LOGIN_TIMEOUT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df5d453f374f6308 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:173 
    if login_inline_wait_env := os.environ.get(EnvironmentKeys.LOGIN_INLINE_WAIT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6a98e3b10993e82 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:189 
    if user_agent_env := os.environ.get(EnvironmentKeys.USER_AGENT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a80bd93fa9aa4322 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:193 
    if host_env := os.environ.get(EnvironmentKeys.HOST):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78a292bb88a6898f — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:197 
    if port_env := os.environ.get(EnvironmentKeys.PORT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8cf58e599ee022d — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:204 
    if path_env := os.environ.get(EnvironmentKeys.HTTP_PATH):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70b90f175fe3b485 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:208 
    if slow_mo_env := os.environ.get(EnvironmentKeys.SLOW_MO):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0a8d03f62410666 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:217 
    if viewport_env := os.environ.get(EnvironmentKeys.VIEWPORT):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de11d95192deb6bc — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:228 
    if chrome_path_env := os.environ.get(EnvironmentKeys.CHROME_PATH):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fee4fb0cca257884 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:233 
    if import_browser_env := os.environ.get(EnvironmentKeys.IMPORT_FROM_BROWSER):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc24ae2dd8bbc4a7 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:239 
    if auto_import_env := os.environ.get(EnvironmentKeys.AUTO_IMPORT_FROM_BROWSER):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcc3f40bebca61c5 — Environment-variable access.
repo/linkedin_mcp_server/config/loaders.py:247 
    if eager_full_env := os.environ.get(EnvironmentKeys.EAGER_FULL_CHROMIUM):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d29817895832018 — Environment-variable access.
repo/linkedin_mcp_server/core/browser.py:292 
            or os.getenv(
                "LINKEDIN_DEBUG_BRIDGE_COOKIE_SET",
                "auth_minimal",
            ).strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a7ef3ef5db58445 — Filesystem access.
repo/linkedin_mcp_server/core/browser.py:330 
            all_cookies = json.loads(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84211956d06737e6 — Environment-variable access.
repo/linkedin_mcp_server/debug_trace.py:25 
    raw = os.getenv("LINKEDIN_TRACE_MODE", "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a446ffccb7bc7430 — Environment-variable access.
repo/linkedin_mcp_server/debug_trace.py:42 
        bool(os.getenv("LINKEDIN_DEBUG_TRACE_DIR", "").strip())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #400fd66d8c4f56c6 — Environment-variable access.
repo/linkedin_mcp_server/debug_trace.py:50 
    explicit = os.getenv("LINKEDIN_DEBUG_TRACE_DIR", "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a82fa98fec1005c — Environment-variable access.
repo/linkedin_mcp_server/debug_utils.py:14 
    return os.getenv("LINKEDIN_DEBUG_STABILIZE_NAVIGATION", "").strip().lower() in {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97ed00d57a0c01fb — Environment-variable access.
repo/linkedin_mcp_server/debug_utils.py:25 
        os.environ.get("PYTEST_CURRENT_TEST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d74fbd657885e90d — Environment-variable access.
repo/linkedin_mcp_server/drivers/browser.py:61 
    return os.getenv("LINKEDIN_DEBUG_SKIP_CHECKPOINT_RESTART", "").strip().lower() in {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3ca47402c92a92d — Environment-variable access.
repo/linkedin_mcp_server/drivers/browser.py:71 
    return os.getenv("LINKEDIN_DEBUG_BRIDGE_EVERY_STARTUP", "").strip().lower() in {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #426506065e3a75b0 — Environment-variable access.
repo/linkedin_mcp_server/drivers/browser.py:81 
    return os.getenv(
        "LINKEDIN_EXPERIMENTAL_PERSIST_DERIVED_SESSION", ""
    ).strip().lower() in {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #8be9d0ce556379ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/linkedin_mcp_server/error_diagnostics.py:339 
        with urlopen(request, timeout=3) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #31c14dbb4a1929a1 — Filesystem access.
repo/linkedin_mcp_server/session_state.py:172 
        text = path.read_text(encoding="utf-8", errors="ignore").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c83020558aee8abb — Filesystem access.
repo/linkedin_mcp_server/session_state.py:184 
        lines = path.read_text(encoding="utf-8", errors="ignore").splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #638bb638b356e130 — Filesystem access.
repo/linkedin_mcp_server/session_state.py:329 
        data = json.loads(path.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #616aac90a9ac57d5 — Filesystem access.
repo/linkedin_mcp_server/update_check.py:59 
            text = distribution(name).read_text("direct_url.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1675df6ff8263455 — Environment-variable access.
repo/linkedin_mcp_server/update_check.py:69 
    value = os.environ.get("LINKEDIN_MCP_CHECK_FOR_UPDATES", "").strip().lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed20036efd80ac8a — Environment-variable access.
repo/linkedin_mcp_server/update_check.py:72 
    if os.environ.get("CI"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de73553bae0772ff — Filesystem access.
repo/linkedin_mcp_server/update_check.py:88 
        data = json.loads(_CACHE_PATH.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3108a90b41f338fe — Filesystem access.
repo/linkedin_mcp_server/update_check.py:97 
        _CACHE_PATH.write_text(
            json.dumps({"checked_at": time.time(), "latest": latest})
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #761b2519d3823f10 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/linkedin_mcp_server/update_check.py:105 
    request = Request(
        _PYPI_URL,
        headers={
            "Accept": "application/json",
            "User-Agent": f"mcp-server-linkedin/{__version__}",
        },
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8d9b74179e2b77ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/linkedin_mcp_server/update_check.py:113 
        with urlopen(request, timeout=_REQUEST_TIMEOUT_SECONDS) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d9aa4dca67a57d99 — Environment-variable access.
repo/linkedin_mcp_server/update_check.py:194 
    if os.environ.get("LINKEDIN_MCP_RUNTIME", "").strip().lower() == "mcpb":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

cryptography

python dependency
expand_more 22 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #f481d69d198e9555 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:88 
with open(os.path.join(base_dir, "src", "cryptography", "__about__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #09c1fa83ed1ab291 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/aes-192-gcm-siv/generate_aes192gcmsiv.py:52 
    with open(filename) as vector_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #aec87bdcb3bb22d9 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/aes-192-gcm-siv/generate_aes192gcmsiv.py:81 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #622af48763106890 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/arc4/generate_arc4.py:92 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #551e0f10a12b0cfb — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/cast5/generate_cast5.py:28 
    with open(filename) as vector_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #9dd37e419456e542 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/cast5/generate_cast5.py:52 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #a1ca2647404e53a9 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/hkdf/generate_hkdf.py:34 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #9d4f8b2776fdafff — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/idea/generate_idea.py:18 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #7eea22f12b945588 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/idea/generate_idea.py:50 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #6b79f70853c4eba5 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/idea/verify_idea.py:22 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #c42c888d8cd97067 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/rsa-oaep-sha2/generate_rsa_oaep_sha2.py:98 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #ee447ef83bfcc40a — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/seed/generate_seed.py:18 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #6ec2882d6391da36 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/seed/generate_seed.py:49 
    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unreachable #33509b4f30440436 — Filesystem access.
pkgs/python/[email protected]/docs/development/custom-vectors/seed/verify_seed.py:20 
    with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a85ecfcfb89c16e — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:64 
        rustflags = os.environ.get("RUSTFLAGS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #528eb7619aacf0b9 — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:239 
    rustflags = os.environ.get("RUSTFLAGS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af4ff7055c2a47bd — Environment-variable access.
pkgs/python/[email protected]/noxfile.py:291 
    if "CARGO_INCREMENTAL" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd44d27f4615964d — Filesystem access.
pkgs/python/[email protected]/noxfile.py:406 
        with open(f"{uuid.uuid4()}.lcov", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb67fee029d1d61b — Filesystem access.
pkgs/python/[email protected]/release.py:54 
    content = p.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64271a48ef52cd3e — Filesystem access.
pkgs/python/[email protected]/release.py:60 
    p.write_text(new_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3f4e6ce8f6fdb16 — Environment-variable access.
pkgs/python/[email protected]/src/_cffi_src/build_openssl.py:49 
    out_dir = os.environ["OUT_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60a015f51fd4f846 — Filesystem access.
pkgs/python/[email protected]/src/_cffi_src/utils.py:16 
with open(os.path.join(base_src, "cryptography", "__about__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

packaging

python dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #dd5b840352b68b55 — Filesystem access.
pkgs/python/[email protected]/docs/conf.py:11 
with open(os.path.join(_BASE_DIR, "src", "packaging", "__init__.py")) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e89a97632a0d0e5 — Filesystem access.
pkgs/python/[email protected]/src/packaging/_manylinux.py:34 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e794506d4145e362 — Filesystem access.
pkgs/python/[email protected]/src/packaging/_musllinux.py:46 
        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

python-dotenv

python dependency
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #2d9a2f4d83630927 — Filesystem access.
pkgs/python/[email protected]/src/dotenv/cli.py:76 
        with open(path) as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ebc5f5fbc79287d — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/cli.py:194 
        if v is not None and (override or k not in os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a4b98fb1d1e8eba — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/cli.py:225 
    cmd_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb6de026cae1fa13 — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/main.py:26 
    if "PYTHON_DOTENV_DISABLED" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b95ff12832fe9aa5 — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/main.py:28 
    value = os.environ["PYTHON_DOTENV_DISABLED"].casefold()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1c7006ed2766c51 — Filesystem access.
pkgs/python/[email protected]/src/dotenv/main.py:63 
            with open(self.dotenv_path, encoding=self.encoding) as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28cb8c81f440e8f9 — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/main.py:105 
            if k in os.environ and not self.override:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b59cacdc3ab74e13 — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/main.py:108 
                os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cbc26aca444f105 — Filesystem access.
pkgs/python/[email protected]/src/dotenv/main.py:148 
        source: IO[str] = open(path, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12a54ea41216de66 — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/main.py:302 
                env.update(os.environ)  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ff9760eff4a57b7 — Environment-variable access.
pkgs/python/[email protected]/src/dotenv/main.py:306 
                env.update(os.environ)  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • fastmcp prod — sdist exceeds byte cap
  • patchright prod — no sdist (wheels only)