Close Open Privacy Scan

link https://github.com/kyegomez/swarms

bolt Snapshot: commit 3106f0c

science engine v1.5

schedule 2026-07-14T20:08:56.480251+00:00

smart_toy MCP server detected: litellm, mcp — detected in dependencies, not a safety judgment.

App Privacy Score

52 /100

Medium privacy risk — application leak confirmed

Medium risk · 1537 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

pii_flow −30

egress −15

env_fs −3

list Scan Summary

14 high 66 medium 1457 low

First-party packages: 1

Dependency packages: 14

Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: 10.10.11.249::ffff:192.168.0.1aactions.zapier.comadam.herokuapp.comai-gateway.vercel.shai-guard.aws.us.pangea.cloudai.google.devaiplatform.googleapis.comandroid.stackexchange.comapiapi-inference.huggingface.coapi.agentops.aiapi.ai21.comapi.aim.securityapi.aimlapi.comapi.aleph-alpha.comapi.anthropic.comapi.assemblyai.comapi.braintrustdata.comapi.bytez.comapi.cerebras.aiapi.clarifai.comapi.cloudflare.comapi.cloudzero.comapi.cohere.aiapi.cohere.comapi.cometapi.comapi.confident-ai.comapi.deepgram.comapi.deepinfra.comapi.deepseek.comapi.elevenlabs.ioapi.endpoints.anyscale.comapi.eu.assemblyai.comapi.featherless.aiapi.fireworks.aiapi.friendli.aiapi.galadriel.comapi.github.comapi.githubcopilot.comapi.groq.comapi.hconeai.comapi.honeycomb.ioapi.humanloop.comapi.hyperbolic.xyzapi.jina.aiapi.lakera.aiapi.lambda.aiapi.litellm.aiapi.llama.comapi.mistral.aiapi.moonshot.aiapi.morphllm.comapi.nlpcloud.ioapi.noma.securityapi.novita.aiapi.openai.comapi.openai.com-12api.perplexity.aiapi.pillar.securityapi.promptlayer.comapi.replicate.comapi.resend.comapi.sambanova.aiapi.smith.langchain.comapi.studio.nebius.aiapi.together.xyzapi.topazlabs.comapi.v0.devapi.voyageai.comapi.x.aiapp.datarobot.comapp.empower.devapp.phoenix.arize.comarchive.orgark.cn-beijing.volces.comarstechnica.comarxiv.orgaws.amazon.comazure-us-east-1.openai.azure.combbayes.cs.ucla.edubedrock-agent-runtimebedrock-runtimebetterexplained.combl.ocks.orgblog.alifaraji.irblog.famzah.netblog.ganssle.ioblogs.ams.orgbooks.google.combootlin.combost.ocks.orgbrew.shbrotlipy.readthedocs.iobugs.python.orgcal.comcalendly.comcdnjs.cloudflare.comchat.maritaca.aiciteseer.ist.psu.educiteseerx.ist.psu.educlarifai.comcloud.getliteral.aicloud.google.comcloud.ibm.comcloud.langfuse.comcode.activestate.comcodestral.mistral.aicognitiveservices.azure.comcole-maclean.github.iocommunity.openai.comconsole.cloud.google.comcourses.cs.ut.eecrypto.cs.mcgill.cad-uuwbxj1u4cnu.studio.us-west-2.sagemaker.awsd3js.orgdashscope-intl.aliyuncs.comdashscope.aliyuncs.comdatatracker.ietf.orgdbpubs.stanford.edudeepeval.confident-ai.comdeepinfra.comdeveloper.android.comdeveloper.apple.comdeveloper.hashicorp.comdeveloper.mozilla.orgdeveloper.pagerduty.comdevelopers.generativeai.googlediscord.comdiscord.ggdiscoveryengine.googleapis.comdiscuss.python.orgdl.acm.orgdocs.ai21.comdocs.aleph-alpha.comdocs.anthropic.comdocs.api.nvidia.comdocs.aws.amazon.comdocs.codestral.comdocs.cohere.comdocs.databricks.comdocs.datadoghq.comdocs.expo.devdocs.fireworks.aidocs.hyperbolic.xyzdocs.litellm.aidocs.microsoft.comdocs.mistral.aidocs.morphllm.comdocs.nlpcloud.comdocs.perplexity.aidocs.predibase.comdocs.pydantic.devdocs.python.orgdocs.rsdocs.sambanova.aidocs.scipy.orgdocs.snowflake.comdocs.swarms.worlddocs.together.aidocs.voyageai.comdoi.acm.orgdoi.orgdx.doi.orgeccc.hpi-web.deeclectic.ss.uci.eduen.wikipedia.orgepubs.siam.orgerrors.pydantic.deveu.api.confident-ai.comeu.assemblyai.comeu.deepeval.confident-ai.comevents.pagerduty.comexam_ple.comexampleopenaiendpoint-production.up.railway.appexcalidraw.comexternal.api.recraft.aifb.mefeatherless.aifoo.comforms.glefreedesktop.orggenerativelanguage.googleapis.comgephi.orggexf.netgit.kernel.orggithub.comgitlab.comgoogle.github.iogr-prd-trial.aporia.comgraph.microsoft.comgraphml.graphdrawing.orghal.archives-ouvertes.frhdl.handle.nethelp.openai.comhomepages.dcc.ufmg.brhrcak.srce.hrhttp-intake.logshttpbin.orghuggingface.cohuggingface.github.iohumanloop.comhuntr.comhypothesis.readthedocs.ioiam.cloud.ibm.comieeexplore.ieee.orginference-docs.cerebras.aiinference.api.nscale.cominference.baseten.coinference.do-ai.runinference.generativeaiinference.readthedocs.ioinfinity.modal.michaelfeil.euintegrate.api.nvidia.comiopscience.iop.orgiuuk.mff.cuni.czjina.aijmlr.csail.mit.edujournals.aps.orgjournals.plos.orgjponnela.comjson-schema.orglangtrace.ailearn.microsoft.comlicense.litellm.ailink.aps.orglink.springer.comlinuxdevcenter.comlists.sourceforge.netlitellm-listing.s3.amazonaws.comlitellm-production-7002.up.railway.applitellm.ailitellm.vercel.applitellm8397336933.openai.azure.comlitellm8397336933.services.ai.azure.comllama.developer.meta.comlmstudio.ailocation-aiplatform.googleapis.comlog.athina.ailogfire-api.pydantic.devlogin.microsoftonline.commail.python.orgmanual.cytoscape.orgmath.berkeley.edumath.mit.edumath.stackexchange.commath.wvu.edumathworld.wolfram.commembers.loria.frmetadata.google.internalmicrosoft.github.iomistral-serverlessmodelarmormodelcontextprotocol.iomodels.inference.ai.azure.commodels.litellm.aimomentjs.commypy.readthedocs.iomüller.dennats.ionetworkx.lanl.govnetworkx.orgnextjs.orgnothooks.slack.comnovita.aioeis.orgollama.aionlinelibrary.wiley.comopenai.comopenmeter.cloudopenproceedings.orgopenrouter.aiother.comotlp.agentops.cloudotlp.arize.compackaging.python.orgpendulum.eustace.iopeps.python.orgplatform.moonshot.aiplatform.openai.complatform.stability.aiportal.acm.orgpub.ist.ac.atpubsub.googleapis.compydantic-docs.helpmanual.iopygments.orgpygraphviz.github.iopypi.orgpython-devtools.helpmanual.iopyyaml.orgraw.githubusercontent.comreact.devreactjs.orgredis.iorefspecs.linuxfoundation.orgreplicate.comrequests.readthedocs.ioresend.comrich.readthedocs.iorosettacode.orgrouter.huggingface.coruntime.sagemakerrussellfunk.orgsariyuce.comscipy.orgsecretmanager.googleapis.comserver.lasso.securityserverfault.comservice.api.aisecurity.paloaltonetworks.comserving.app.predibase.comsetuptools.pypa.iosites.cs.ucsb.eduspecifications.freedesktop.orgstackoverflow.comstorage.azure.comstorage.googleapis.comstream-b.svc.rno2.c.replicate.netstsswarms.worldtechnet.microsoft.comtest.comtexttospeech.googleapis.comtikz.devtimeapi.iotools.ietf.orgtwitter.comus-central1-aiplatform.googleapis.comus-east-1.console.aws.amazon.comus-west-2.console.aws.amazon.comus.cloud.langfuse.comusers.cecs.anu.edu.auv0.devvalidate-pyproject.readthedocs.iovercel.comvideolectures.netviews.scientific-python.orgvisualstudio.microsoft.comvlado.fmf.uni-lj.siw.wikiw3.orgweb.archive.orgweb.eecs.utk.eduweb.math.princeton.eduweb.mit.eduwuecampus2.uni-wuerzburg.dewww-cs-faculty.stanford.eduwww-cs-students.stanford.eduwww-personal.umich.eduwww.algorithmic-solutions.infowww.amazon.comwww.analytictech.comwww.aws-services.infowww.combinatorics.orgwww.comet.comwww.coolmath.comwww.cs.cornell.eduwww.cs.purdue.eduwww.cs.technion.ac.ilwww.cs.umd.eduwww.cs.uu.nlwww.cse.msu.eduwww.example.珠宝www.fim.uni-passau.dewww.gexf.netwww.github.comwww.googleapis.comwww.graphdegeneracy.orgwww.graphviz.orgwww.ibm.comwww.ics.uci.eduwww.informatik.uni-augsburg.dewww.jmlr.orgwww.jstor.orgwww.litellm.aiwww.math.uchicago.eduwww.math.ucsd.eduwww.mdpi.comwww.numberanalytics.comwww.oreilly.comwww.pnas.orgwww.python.orgwww.recraft.aiwww.researchgate.netwww.rfc-editor.orgwww.santafe.eduwww.santofortunato.netwww.scielo.brwww.sciencedirect.comwww.stats.ox.ac.ukwww.systutorials.comwww.textualize.iowww.w3.orgwww.win.tue.nlwww.xudongz.comwww.youtube.comwww.yworks.comwww.zapier.comwww.аррӏе.comwww2.asanet.orgxxn--fiqs8s.icom.museumтест中国.icom.museum

high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/swarms/telemetry/main.py:132 → repo/swarms/telemetry/main.py:139

hub Dependency data flows (13)

high mcp dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:433 → pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:452

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:193 → pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:204

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:674 → pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:680

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:77 → pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:83

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:175 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:183

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:234 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:242

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:363 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:371

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:430 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:438

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:68 → pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:111

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:106 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:103

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:131 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:128

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:191 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:188

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:215 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:212

</> First-Party Code

first-party (python)

python first-party

high pii_flow production #5d6061463b0bc07d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/swarms/telemetry/main.py:139 · flow /tmp/closeopen-9z5u4wk7/repo/swarms/telemetry/main.py:132 → /tmp/closeopen-9z5u4wk7/repo/swarms/telemetry/main.py:139

    response = requests.post(
        url, json=payload, headers=headers, timeout=10
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

expand_more 290 low-confidence finding(s)

low env_fs test-only #ed15130a3603ee76 — Filesystem access.

repo/examples/changelogs/v12_update/04_conversation_memory_compact.py:35

    with open(memory_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #77f5211d3bf481b9 — Environment-variable access.

repo/examples/changelogs/v9_examples/example_sub_agents.py:6

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #44b0292e89a57685 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/aop_examples/medical_aop/client.py:76

        epi = requests.get(
            "https://disease.sh/v3/covid-19/countries/USA?strict=true",
            timeout=5,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #f2c0192578d375d7 — Environment-variable access.

repo/examples/guides/demos/chart_swarm.py:208

        os.environ["OPENAI_API_KEY"] = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #855b7a4eac782c97 — Filesystem access.

repo/examples/guides/demos/chart_swarm.py:218

        with open(img, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2659c888b6473c2e — Environment-variable access.

repo/examples/guides/demos/crypto/ethchain_agent.py:72

        api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #11a1dee91b92df4f — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/ethchain_agent.py:107

            response = requests.get(
                "https://api.coingecko.com/api/v3/simple/price",
                params={"ids": "ethereum", "vs_currencies": "usd"},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #2bf7868189768adc — Filesystem access.

repo/examples/guides/demos/crypto/ethchain_agent.py:140

            with open(self.csv_filename, "w", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #de960da0262a8f61 — Filesystem access.

repo/examples/guides/demos/crypto/ethchain_agent.py:239

        with open(self.csv_filename, "a", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #8a41a3fee3881311 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:131

        ticker_response = requests.get(
            base_url + ticker_endpoint, params=ticker_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #99f2f11d7c3b2b8c — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:149

        order_book_response = requests.get(
            base_url + order_book_endpoint, params=order_book_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #8c47444b4300b80c — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:167

        trades_response = requests.get(
            base_url + trades_endpoint, params=trades_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #27716070c638c90d — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:186

        kline_response = requests.get(
            base_url + kline_endpoint, params=kline_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #affdd6314b68fcf1 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/swarms_coin_agent.py:102

    response = requests.get(url, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #67143d29bcf7bc29 — Filesystem access.

repo/examples/guides/demos/cuda_swarm.py:326

            with open(self.file_path, mode) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eb0850bbff066f30 — Filesystem access.

repo/examples/guides/demos/hackathon_feb16/fraud.py:242

        with open(csv_file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5219ea4ca8df3450 — Filesystem access.

repo/examples/guides/demos/legal/legal_swarm.py:208

                    with open(file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #94bbc551a49ea933 — Filesystem access.

repo/examples/guides/demos/legal/legal_swarm.py:216

                    with open(
                        file_path, "r", encoding="utf-8"
                    ) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #74d227726135ed64 — Environment-variable access.

repo/examples/guides/demos/medical/health_privacy_swarm.py:6

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6d6edb96243dda13 — Environment-variable access.

repo/examples/guides/demos/medical/health_privacy_swarm_two.py:6

api_key = os.getenv(
    "OPENAI_API_KEY"
)  # ANTHROPIC_API_KEY, COHERE_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #bd4dbbea26219f09 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/news_aggregator_summarizer.py:18

        ids = httpx.get(
            "https://hacker-news.firebaseio.com/v0/topstories.json",
            timeout=10,
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #e7df187cd9bbd8c3 — Filesystem access.

repo/examples/guides/demos/news_aggregator_summarizer.py:113

    with open("news_summaries.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cf3c0d929db21811 — Environment-variable access.

repo/examples/guides/demos/privacy_building.py:6

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4219f68f35e9ff72 — Filesystem access.

repo/examples/guides/demos/real_estate/morgtate_swarm.py:289

        with open(pdf_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9df878304ff248e1 — Filesystem access.

repo/examples/guides/demos/real_estate/morgtate_swarm.py:306

        with open(full_path, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #381c3a5c25349e65 — Filesystem access.

repo/examples/guides/demos/real_estate/morgtate_swarm.py:459

            with open(json_path, "w", encoding="utf-8") as jf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #418844a276e4f9ab — Environment-variable access.

repo/examples/guides/demos/real_estate/real_estate_agent.py:300

        openai_api_key=os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d0c36a3a1d6a046c — Environment-variable access.

repo/examples/guides/demos/real_estate/real_estate_agent.py:301

        propertyradar_api_key=os.getenv("PROPERTYRADAR_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f1a471d4431f0e04 — Filesystem access.

repo/examples/guides/demos/real_estate/real_estate_agent.py:314

    with open("search_results.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6a3b3d4a915b2559 — Environment-variable access.

repo/examples/guides/demos/real_estate/realtor_agent.py:32

        "x-rapidapi-key": os.getenv("RAPID_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #42e14e11bf4dd41d — Environment-variable access.

repo/examples/guides/demos/science/open_scientist.py:79

        "x-api-key": os.getenv("EXA_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #b36f7b4ce223d6cb — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/science/open_scientist.py:95

        response = requests.post(
            api_url, json=payload, headers=headers
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #27898244aa57efb3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/guides/demos/science/open_scientist.py:95 · flow /tmp/closeopen-9z5u4wk7/repo/examples/guides/demos/science/open_scientist.py:79 → /tmp/closeopen-9z5u4wk7/repo/examples/guides/demos/science/open_scientist.py:95

        response = requests.post(
            api_url, json=payload, headers=headers
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #69dca7a29c2750f9 — Filesystem access.

repo/examples/guides/demos/science/open_scientist.py:110

        with open(filename, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #29ba98a6880f3779 — Environment-variable access.

repo/examples/guides/demos/spike/agent_rearrange_test.py:31

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5904b11328a2ac73 — Environment-variable access.

repo/examples/guides/demos/spike/function_caller_example.py:30

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e1e1a110d23ea0f2 — Environment-variable access.

repo/examples/guides/demos/spike/test.py:31

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b55bfdec023bc16a — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/convert_json_to_csv.py:4

with open("profession_personas.progress.json", "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9a54eee0799e69a7 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/convert_json_to_csv.py:10

with open("data_personas_progress.csv", "w", newline="") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bd2de95beacaecdb — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/format_prompt.py:20

        with open(input_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d6cd34c49ef56333 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/format_prompt.py:53

        with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e8328e57de0ee133 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:372

                with open(
                    self.json_progress_file, "r", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #be535541d7677f51 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:422

                        with open(
                            self.json_progress_file,
                            "r",
                            encoding="utf-8",
                        ) as src:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cd71b94ec3d6cebd — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:427

                            with open(
                                backup_file, "w", encoding="utf-8"
                            ) as dst:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eb86a9c9eb436197 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:435

                with open(
                    self.json_progress_file, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9e4c646a4c2cef99 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:466

                    with open(
                        fallback_file, "w", encoding="utf-8"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a7070c2596bac82e — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:602

                with open(
                    self.json_progress_file, "r", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0f892b21e9977fd8 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:612

                with open(
                    self.json_progress_file, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6c29f3d962e759d7 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:949

            with open(
                self.json_progress_file, "r", encoding="utf-8"
            ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e771d723450c85ff — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:974

                with open(
                    self.json_progress_file, "r", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #4b726d4e01b1b535 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/deployment/cron_job_examples/simple_concurrent_crypto_cron.py:32

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #69e163613cc65f42 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/deployment/cron_job_examples/solana_price_tracker.py:36

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #9d9b6564afc2df74 — Filesystem access.

repo/examples/guides/hackathon_judge_agent/hackathon_judger_agent.py:112

    with open(file_path, mode="r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d2ec0327caa103f0 — Environment-variable access.

repo/examples/guides/hackathons/hackathon_sep_27/api_client.py:7

client = SwarmsClient(api_key=os.getenv("SWARMS_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #08257f695dd1dea3 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/hackathons/hackathon_sep_27/nutritional_content_analysis_swarm.py:77

    response = requests.post(url, headers=headers, json=swarm_config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #a65e98ce3031c4b2 — Environment-variable access.

repo/examples/guides/hackathons/hackathon_sep_27/nutritional_content_analysis_swarm.py:83

api_key = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0141f64435871296 — Environment-variable access.

repo/examples/guides/mem0/mem0_and_swarms.py:12

MEM0_API_KEY = os.getenv("MEM0_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #51126e1649a051e1 — Filesystem access.

repo/examples/guides/mem0/mem0_and_swarms.py:65

    with open(pdf_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f283eaf9bafa309c — Filesystem access.

repo/examples/guides/mem0/mem0_and_swarms.py:117

        with open(csv_path, newline="", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #34d0b503fe397187 — Environment-variable access.

repo/examples/guides/voice_agents/voice_agents_examples/google_calendar_agent.py:149

        access_token = os.getenv("GOOGLE_CALENDAR_ACCESS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4c0d596c0f0c676f — Environment-variable access.

repo/examples/guides/voice_agents/voice_agents_examples/google_calendar_agent.py:247

        access_token = os.getenv("GOOGLE_CALENDAR_ACCESS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bf9d91c37e8bb79d — Environment-variable access.

repo/examples/guides/voice_agents/voice_agents_examples/google_calendar_agent.py:316

        access_token = os.getenv("GOOGLE_CALENDAR_ACCESS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ef1dca11b613dcec — Environment-variable access.

repo/examples/guides/x402_examples/agent_integration/x402_agent_buying.py:39

    key = os.getenv("X402_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9723f8e61bfc68bf — Environment-variable access.

repo/examples/guides/x402_examples/memecoin_agent_x402.py:130

        pay_to_address=os.getenv(
            "WALLET_ADDRESS", "0xYourWalletAddress"
        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0ae25c36883f8fab — Environment-variable access.

repo/examples/models/openai/5.4_openai.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3d660d0b98b0f25f — Environment-variable access.

repo/examples/multi_agent/asb/auto_swarm_router.py:10

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d10f115dd6aef1e0 — Filesystem access.

repo/examples/multi_agent/council/judges/council_judge_evaluation.py:106

                with open(self.results_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bdb7ce5e1eb2874f — Filesystem access.

repo/examples/multi_agent/council/judges/council_judge_evaluation.py:125

        with open(self.results_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c79e02da9cfb4a3d — Filesystem access.

repo/examples/multi_agent/graphworkflow_examples/graph_workflow_serialization.py:75

with open(spec_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f15ee3eab875fc37 — Filesystem access.

repo/examples/multi_agent/graphworkflow_examples/graph_workflow_serialization.py:91

with open(spec_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0acdac58c37912cf — Environment-variable access.

repo/examples/multi_agent/groupchat/groupchat_examples/groupchat_example.py:14

    os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #11687ebcd3012f23 — Environment-variable access.

repo/examples/multi_agent/hscf_examples/simple_hscf.py:8

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #26da9d0888c2bfaf — Environment-variable access.

repo/examples/multi_agent/mar/model_router_example.py:7

model_router = ModelRouter(api_key=os.getenv("OPENAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #18d5813db2004518 — Filesystem access.

repo/examples/multi_agent/paper_implementations/long_agent.py:59

        with open(file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cbe384d2ecce649e — Filesystem access.

repo/examples/multi_agent/paper_implementations/long_agent.py:84

        with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3433f1868dd7784e — Filesystem access.

repo/examples/multi_agent/planner_generator_evaluator/pge_with_tools_example.py:31

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0e9a27fcc6b7d183 — Filesystem access.

repo/examples/multi_agent/planner_generator_evaluator/pge_with_tools_example.py:48

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #97a99a10ee5fa678 — Environment-variable access.

repo/examples/multi_agent/sequential_workflow/sequential_workflow.py:9

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fa209ccb750bf0b0 — Filesystem access.

repo/examples/multi_agent/simulations/agent_map/agent_map_simulation.py:1230

            with open(filename, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b11f878b22576901 — Filesystem access.

repo/examples/multi_agent/simulations/euroswarm_parliament/wikipedia_personality_scraper.py:124

            with open(xml_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #992df97bc89b1124 — Filesystem access.

repo/examples/multi_agent/simulations/euroswarm_parliament/wikipedia_personality_scraper.py:529

        with open(filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cdd9b7fc6716f40d — Filesystem access.

repo/examples/multi_agent/simulations/euroswarm_parliament/wikipedia_personality_scraper.py:598

        with open(filepath, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1f21426909b46d83 — Filesystem access.

repo/examples/multi_agent/spreadsheet_examples/spreadsheet_swarm_usage.py:68

    with open("agents.csv", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2aa8e998ec3cdaa4 — Filesystem access.

repo/examples/multi_agent/spreadsheet_examples/spreadsheet_swarm_usage.py:115

    with open("research_agents.csv", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c187f0bc5453cb5d — Environment-variable access.

repo/examples/multi_agent/swarm_rearrange_examples/swarm_rearrange_demo.py:10

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #02236701fe6e16ff — Filesystem access.

repo/examples/multi_agent/swarm_router/swarm_router_test.py:68

with open("output.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1ecf54488b9dcc43 — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:11

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #040e6ba4f3276dbf — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:22

    response = requests.get(f"{BASE_URL}/health", headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #952e7617b69f82b7 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:22 · flow /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:11 → /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:22

    response = requests.get(f"{BASE_URL}/health", headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low egress test-only #217d58ccdb86737f — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:74

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #882f63b529f4b273 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:74 · flow /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:11 → /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:74

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #a392c20fdba16d59 — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:9

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #f48102eb9ba51b25 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:84

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #1c822ed53be414f3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:84 · flow /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:9 → /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:84

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #0ca93a4b58fcbf00 — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/swarms_api_client.py:48

    api_key=os.getenv("SWARMS_API_KEY"), format_type="json"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e279152216c6be1b — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:9

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #018cb156ba250d6c — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:87

    response = requests.post(
        f"{BASE_URL}/swarm/completion",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #681706796ce220ad — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:87 · flow /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:9 → /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:87

    response = requests.post(
        f"{BASE_URL}/swarm/completion",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #293440338d488bef — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/tools_examples.py:9

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #4219a447c8ae4ce7 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/tools_examples.py:119

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #ae4a65766e43f827 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/tools_examples.py:119 · flow /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/tools_examples.py:9 → /tmp/closeopen-9z5u4wk7/repo/examples/multi_agent/swarms_api_examples/tools_examples.py:119

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #5a44c5ca9f74a704 — Environment-variable access.

repo/examples/multi_agent/utils/agent_communication_examples.py:17

os.environ["OPENAI_API_KEY"] = "your-openai-api-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dab320aad4062816 — Environment-variable access.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:51

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #32b7685687cde520 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:89

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #2e0caefb0b582c56 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:89 · flow /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:51 → /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:89

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #aa79463e37acd469 — Environment-variable access.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:50

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #f767645dcee206f5 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:88

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #aed7d5967f96328c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:88 · flow /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:50 → /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:88

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #a269d0496c303896 — Environment-variable access.

repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:63

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #efd1f3a25fc88be7 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:103

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #a61c142720ea7534 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:103 · flow /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:63 → /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:103

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #2efc48bc0ea7dab2 — Environment-variable access.

repo/examples/single_agent/capabilities/rag/full_agent_rag_example.py:15

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #859e04ff405255db — Environment-variable access.

repo/examples/single_agent/capabilities/rag/pinecone_example.py:13

    api_key=os.getenv("PINECONE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ac66ee6d567146bf — Environment-variable access.

repo/examples/single_agent/capabilities/rag/pinecone_example.py:14

    environment=os.getenv("PINECONE_ENVIRONMENT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #731161b5c265004d — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_agent.py:167

    url=os.getenv("QDRANT_URL"),  # Optional: For cloud deployment

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5fdc9da07b92df1b — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_agent.py:168

    api_key=os.getenv(
        "QDRANT_API_KEY"
    ),  # Optional: For cloud deployment

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #878d60845bc0e7a5 — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_rag_example.py:17

    url=os.getenv("QDRANT_URL", "https://your-cluster.qdrant.io"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1c083d41b974ab55 — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_rag_example.py:18

    api_key=os.getenv("QDRANT_API_KEY", "your-api-key"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c716fcfc21409807 — Filesystem access.

repo/examples/single_agent/capabilities/rag/simple_example.py:100

        with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d7d210af8df49af4 — Filesystem access.

repo/examples/single_agent/capabilities/skills/agent_with_custom_skill.py:52

with open("./my_custom_skills/customer-support/SKILL.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b473b43b23b1ebd8 — Environment-variable access.

repo/examples/single_agent/capabilities/tools/agent_with_exa.py:47

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #8df3f7ba47cc8023 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/agent_with_exa.py:93

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #786772c8f3fc02db — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/tools/agent_with_exa.py:93 · flow /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/tools/agent_with_exa.py:47 → /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/tools/agent_with_exa.py:93

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #5cab505128c7df9f — Environment-variable access.

repo/examples/single_agent/capabilities/tools/multi_tool_usage_agent.py:419

    openai_api_key=os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #1d50ed1732f84714 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/new_tools_examples.py:36

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #0ac95c5f28397595 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/new_tools_examples.py:86

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #1be1471e350ed402 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/new_tools_examples.py:147

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #8cfc692dfacf4298 — Environment-variable access.

repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:11

api_token = os.getenv("REPLICATE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7b3e8c5c6a24da63 — Environment-variable access.

repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:50

    api_token = os.getenv("REPLICATE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #5876635026907f87 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:83 · flow /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:50 → /tmp/closeopen-9z5u4wk7/repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:83

    response = requests.post(url, headers=headers, json=data)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #949bd8f3c9c665b3 — Environment-variable access.

repo/examples/single_agent/demos/persistent_legal_agent.py:22

    api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9b4f34a8745ee707 — Environment-variable access.

repo/examples/single_agent/demos/persistent_legal_agent.py:26

    api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ff73d121b38742f0 — Filesystem access.

repo/examples/single_agent/demos/persistent_legal_agent.py:112

    with open("generated_term_sheet_draft.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1fb382b3dd654500 — Environment-variable access.

repo/examples/single_agent/getting_started/onboarding/onboard-basic.py:18

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #57bbe97bc4881e49 — Environment-variable access.

repo/examples/single_agent/reasoning/reasoning_duo.py:12

    openai_api_key=os.getenv("TOGETHER_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4133fd0cf43b14c8 — Filesystem access.

repo/examples/single_agent/utils/autosaving_examples/autosave_basic_example.py:37

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #804e3caddad7fcc7 — Filesystem access.

repo/examples/single_agent/utils/autosaving_examples/autosave_config_access_example.py:32

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #257f1dfe35723c04 — Filesystem access.

repo/examples/single_agent/utils/autosaving_examples/autosave_recovery_example.py:43

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #03d1e75f6b52fea4 — Environment-variable access.

repo/examples/single_agent/utils/custom_agent_base_url.py:19

    llm_api_key=os.getenv(
        "OPENROUTER_API_KEY"
    ),  # Use the correct Grok API key environment variable

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #28fc0838af1831ff — Filesystem access.

repo/examples/tools/agent_as_tools.py:38

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ac07c47c9d76d3f4 — Filesystem access.

repo/examples/tools/agent_as_tools.py:139

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #9a8815efe80ecb5a — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/agent_as_tools.py:326

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #9e73d289808916dd — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/base_tool_examples/conver_funcs_to_schema.py:38

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #27271f9fcdadcb48 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/base_tool_examples/conver_funcs_to_schema.py:88

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #17b1d3be419ea1c8 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/base_tool_examples/conver_funcs_to_schema.py:149

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #53c5082a1e7b5e5e — Filesystem access.

repo/examples/tools/base_tool_examples/test_base_tool_comprehensive.py:773

    with open("base_tool_test_report.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2c55786fae32388d — Filesystem access.

repo/examples/tools/base_tool_examples/test_base_tool_comprehensive_fixed.py:894

    with open("base_tool_test_report_fixed.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #b3b8dbaeb1c065f5 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:38

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #f2430570e5cd45f8 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:88

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #0dae9eedbd1678ba — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:149

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #efa5fc439fe371bd — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:205

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #4c615568bde4ff25 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:236

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #1c961c8c4d8e5282 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:301

        response = requests.get(url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #d5cbc0c8dc26951c — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:327

        response = requests.get(url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #3595ee2dc23cae1d — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:353

        response = requests.get(url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #86ef15ffbe38b2fb — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/multi_tool_anthropic.py:36

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #f265f42085fb1b3e — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/multi_tool_anthropic.py:86

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #2154b7315cb1adea — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/multi_tool_anthropic.py:147

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #2f4b42b31ab4a2c6 — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:64

    value = os.getenv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #030b2e7e684a0075 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/social_media/social_media_tools.py:167

        response = requests.post(
            "https://api.linkedin.com/v2/ugcPosts",
            headers={
                "Authorization": f"Bearer {token}",
                "X-Restli-Protocol-Version": "2.0.0",
                "Content-Type": "application/json",
            },
            json=body,
            timeout=15,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #b78a6782031f49e9 — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:236

                "categoryId": os.getenv("YOUTUBE_CATEGORY_ID", "22"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a5a8f3b580dd65e6 — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:239

                "privacyStatus": os.getenv(
                    "YOUTUBE_PRIVACY", "public"
                ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5e7b88d6f78e549e — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:355

        title = os.getenv("DEVTO_TITLE") or _first_line(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #bae850f1e8441f48 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/social_media/social_media_tools.py:356

        response = requests.post(
            "https://dev.to/api/articles",
            headers={
                "api-key": api_key,
                "Content-Type": "application/json",
            },
            json={
                "article": {
                    "title": title,
                    "body_markdown": content,
                    "published": True,
                }
            },
            timeout=20,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #fba8d57f242cf9df — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/tools/social_media/social_media_tools.py:356 · flow /tmp/closeopen-9z5u4wk7/repo/examples/tools/social_media/social_media_tools.py:355 → /tmp/closeopen-9z5u4wk7/repo/examples/tools/social_media/social_media_tools.py:356

        response = requests.post(
            "https://dev.to/api/articles",
            headers={
                "api-key": api_key,
                "Content-Type": "application/json",
            },
            json={
                "article": {
                    "title": title,
                    "body_markdown": content,
                    "published": True,
                }
            },
            timeout=20,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #411d7d1830ebfd2b — Environment-variable access.

repo/examples/tools/stagehand/1_stagehand_wrapper_agent.py:74

            or os.getenv("BROWSERBASE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #30ad3b28bfdf1a9a — Environment-variable access.

repo/examples/tools/stagehand/1_stagehand_wrapper_agent.py:76

            or os.getenv("BROWSERBASE_PROJECT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f4b8ee3fc2b38667 — Environment-variable access.

repo/examples/tools/stagehand/1_stagehand_wrapper_agent.py:79

            or os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #022b02876d6a4c5c — Environment-variable access.

repo/examples/tools/stagehand/2_stagehand_tools_agent.py:51

                api_key=api_key or os.getenv("BROWSERBASE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #34781e443d49a44c — Environment-variable access.

repo/examples/tools/stagehand/2_stagehand_tools_agent.py:53

                or os.getenv("BROWSERBASE_PROJECT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ff74512bd429e14e — Environment-variable access.

repo/examples/tools/stagehand/2_stagehand_tools_agent.py:56

                or os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9e89eef09ca30262 — Environment-variable access.

repo/examples/utils/swarms_api/agent_overview.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #329b569e82b55f6b — Environment-variable access.

repo/examples/utils/swarms_api/batch_example.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ad2cbaa28cd729c3 — Environment-variable access.

repo/examples/utils/swarms_api/client_example.py:8

client = SwarmsClient(api_key=os.getenv("SWARMS_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b3ca8fdc00df150d — Environment-variable access.

repo/examples/utils/swarms_api/hospital_team.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a0c718fa326582dd — Environment-variable access.

repo/examples/utils/swarms_api/icd_ten_analysis.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e81a364f011a1cd6 — Environment-variable access.

repo/examples/utils/swarms_api/legal_team.py:10

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #d1760b358cee30bb — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/utils/swarms_api/legal_team.py:24

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=HEADERS,
        json=swarm_config,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #22fb9960de5219eb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/utils/swarms_api/legal_team.py:24 · flow /tmp/closeopen-9z5u4wk7/repo/examples/utils/swarms_api/legal_team.py:10 → /tmp/closeopen-9z5u4wk7/repo/examples/utils/swarms_api/legal_team.py:24

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=HEADERS,
        json=swarm_config,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #501d07e981242c2c — Environment-variable access.

repo/examples/utils/swarms_api/rate_limits.py:7

client = SwarmsClient(api_key=os.getenv("SWARMS_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #452de22d8e057646 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/scripts/examples.py:15

    response = requests.get(api_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #bbc4b5fbcdee823c — Filesystem access.

repo/scripts/llm_txt.py:39

        with open(output_path, "w", encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bbab4a29ff08d28 — Filesystem access.

repo/scripts/llm_txt.py:44

                    with open(
                        md_file, "r", encoding="utf-8"
                    ) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61f812eae8ec21b2 — Filesystem access.

repo/swarms/agents/auto_generate_swarm_config.py:372

    with open(output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bea7e5467242f83b — Filesystem access.

repo/swarms/agents/create_agents_from_yaml.py:101

            with open(yaml_file, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea9f8a293bbfebcc — Filesystem access.

repo/swarms/artifacts/main_artifact.py:154

        with open(self.file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1138c32e5adc84ee — Filesystem access.

repo/swarms/artifacts/main_artifact.py:161

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22e8fcd711fabf21 — Filesystem access.

repo/swarms/artifacts/main_artifact.py:197

        with open(file_path, "w") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf376fd12c0253ad — Filesystem access.

repo/swarms/artifacts/main_artifact.py:211

        with open(file_path, "r") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e81dc5e19de8dc81 — Environment-variable access.

repo/swarms/cli/main.py:1878

        existing = os.environ.get(env_var, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06603f64e93cf32b — Filesystem access.

repo/swarms/cli/main.py:1966

    env_path.write_text("\n".join(env_lines) + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b203fbf288705109 — Environment-variable access.

repo/swarms/cli/main.py:1989

        if collected_keys.get(v) or os.environ.get(v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2a8f3ae37e07ceb — Environment-variable access.

repo/swarms/cli/utils.py:51

    if os.getenv("OPENAI_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17853a6ca0b7b4d1 — Environment-variable access.

repo/swarms/cli/utils.py:53

    if os.getenv("ANTHROPIC_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2fd8b6a568a67fb — Environment-variable access.

repo/swarms/cli/utils.py:55

    if os.getenv("GROQ_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7bcc3a9c965147c — Environment-variable access.

repo/swarms/cli/utils.py:57

    if os.getenv("GOOGLE_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd8f19a0bc7393cf — Environment-variable access.

repo/swarms/cli/utils.py:59

    if os.getenv("COHERE_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8bde329c04f1a51 — Environment-variable access.

repo/swarms/cli/utils.py:61

    if os.getenv("MISTRAL_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3adee6fa8521c7ff — Environment-variable access.

repo/swarms/cli/utils.py:63

    if os.getenv("TOGETHER_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e064c6304b908587 — Filesystem access.

repo/swarms/cli/utils.py:193

            content = env_path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #798442e11a9db40c — Environment-variable access.

repo/swarms/cli/utils.py:277

        "OPENAI_API_KEY": os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d5145bb790bdcef — Environment-variable access.

repo/swarms/cli/utils.py:278

        "ANTHROPIC_API_KEY": os.getenv("ANTHROPIC_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b005f09f9c617288 — Environment-variable access.

repo/swarms/cli/utils.py:279

        "GOOGLE_API_KEY": os.getenv("GOOGLE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb8ff017beaec2be — Environment-variable access.

repo/swarms/cli/utils.py:280

        "COHERE_API_KEY": os.getenv("COHERE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b634f093cb66614 — Filesystem access.

repo/swarms/cli/utils.py:512

        with open(cache_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef376d911eda997b — Filesystem access.

repo/swarms/cli/utils.py:522

        with open(cache_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4551eadad3d678e4 — Filesystem access.

repo/swarms/prompts/prompt.py:253

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f6a571a9099be95d — Filesystem access.

repo/swarms/structs/agent.py:1996

            with open(temp_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cdb3e6ae6bde5403 — Filesystem access.

repo/swarms/structs/agent.py:3695

            with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74a5f1199f405ce5 — Filesystem access.

repo/swarms/structs/agent.py:4604

                with open(skill_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4027461492dfb28a — Filesystem access.

repo/swarms/structs/agent.py:4698

                    with open(
                        skill["path"], "r", encoding="utf-8"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24a6a861fe38bdb8 — Filesystem access.

repo/swarms/structs/agent_loader.py:331

        with open(self.file_path, "w", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba4383159cc01521 — Filesystem access.

repo/swarms/structs/agent_loader.py:338

        with open(self.file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fac56a4864493ba0 — Filesystem access.

repo/swarms/structs/agent_loader.py:343

        with open(self.file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a03943c5263be0f9 — Filesystem access.

repo/swarms/structs/agent_loader.py:348

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3cba30825e557258 — Filesystem access.

repo/swarms/structs/agent_loader.py:354

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #423c3f6606549a97 — Filesystem access.

repo/swarms/structs/agent_loader.py:359

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88bb0ca6fb25f404 — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:674

        with open(full_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59a9450661e1db0f — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:731

            with open(full_path, "a", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ae34b1c33269cb2 — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:735

            with open(full_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1843e0001b33085a — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:784

        with open(full_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04542219ddec4bde — Filesystem access.

repo/swarms/structs/base_structure.py:100

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd5dc1504949a1b2 — Filesystem access.

repo/swarms/structs/base_structure.py:112

        with open(file_path) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #323365a2a9aaab04 — Filesystem access.

repo/swarms/structs/base_structure.py:147

        with open(file_path, "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acef782375c4ae59 — Filesystem access.

repo/swarms/structs/base_structure.py:200

        with open(file, "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95f3accbfef840dd — Filesystem access.

repo/swarms/structs/base_swarm.py:606

            with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #561346ab104bb6e3 — Filesystem access.

repo/swarms/structs/base_swarm.py:622

            with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d8f47f99266bc20 — Filesystem access.

repo/swarms/structs/base_swarm.py:638

            with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3465d508c5b17293 — Filesystem access.

repo/swarms/structs/base_swarm.py:654

            with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5855deadaca8b459 — Environment-variable access.

repo/swarms/structs/concurrent_workflow.py:646

            if not os.getenv("WORKSPACE_DIR"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6190bbf130c8b006 — Environment-variable access.

repo/swarms/structs/concurrent_workflow.py:650

                os.environ["WORKSPACE_DIR"] = default_workspace

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3be13e14eaad4101 — Filesystem access.

repo/swarms/structs/concurrent_workflow.py:706

                with open(
                    conversation_path, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bec1c1e77aab5fe7 — Filesystem access.

repo/swarms/structs/conversation.py:225

            with open(conversation_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bea8277b69a6af2 — Filesystem access.

repo/swarms/structs/conversation.py:271

                with open(
                    self.memory_md_path, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18e9bf8582839b0e — Filesystem access.

repo/swarms/structs/conversation.py:287

            with open(
                self.memory_md_path, "r", encoding="utf-8"
            ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eabdfa400811fbb3 — Filesystem access.

repo/swarms/structs/conversation.py:386

            with open(
                self.memory_md_path, "r", encoding="utf-8"
            ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eac722286454c14e — Filesystem access.

repo/swarms/structs/conversation.py:409

            with open(archive_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0fdbb92aa9968e93 — Filesystem access.

repo/swarms/structs/conversation.py:439

                with open(
                    self.memory_md_path, "a", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea6f77cd17f29e9b — Filesystem access.

repo/swarms/structs/conversation.py:688

            with open(filename, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb1604e38878f607 — Filesystem access.

repo/swarms/structs/conversation.py:840

            with open(self.save_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa3683da87c1e99d — Filesystem access.

repo/swarms/structs/conversation.py:877

            with open(self.save_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #740165939a1a8e21 — Filesystem access.

repo/swarms/structs/conversation.py:944

                with open(filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fbfc8f8d8eae193 — Filesystem access.

repo/swarms/structs/conversation.py:977

                with open(filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab7b5622608c37d8 — Filesystem access.

repo/swarms/structs/conversation.py:1413

                    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #468a6fa6305b7753 — Filesystem access.

repo/swarms/structs/dynamic_skills_loader.py:61

                with open(skill_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #721a537a2a11ecec — Filesystem access.

repo/swarms/structs/graph_workflow.py:1907

                                    checkpoint_path.read_text(
                                        encoding="utf-8"
                                    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14a52b115f4e8ece — Filesystem access.

repo/swarms/structs/graph_workflow.py:2173

                            checkpoint_path.write_text(
                                json.dumps(
                                    layer_outputs,
                                    indent=2,
                                    default=str,
                                ),
                                encoding="utf-8",
                            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80f67ef132eee954 — Filesystem access.

repo/swarms/structs/graph_workflow.py:2767

        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #296d06339f17de44 — Filesystem access.

repo/swarms/structs/graph_workflow.py:3360

            with open(filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #180b4fd32a596ce2 — Filesystem access.

repo/swarms/structs/graph_workflow.py:3404

            with open(filepath, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d08cc08ecfaff6e — Environment-variable access.

repo/swarms/structs/hiearchical_swarm.py:343

            if not os.getenv("WORKSPACE_DIR"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ccb55a390f8ccbb — Environment-variable access.

repo/swarms/structs/hiearchical_swarm.py:347

                os.environ["WORKSPACE_DIR"] = default_workspace

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c84b63b0cfecda54 — Filesystem access.

repo/swarms/structs/hiearchical_swarm.py:402

                with open(
                    conversation_path, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65a3832036179987 — Filesystem access.

repo/swarms/structs/planner_generator_evaluator.py:335

            with open(self.shared_state_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2aa7628865296803 — Filesystem access.

repo/swarms/structs/planner_generator_evaluator.py:351

        with open(self.shared_state_path, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9470eeb6b45cffb1 — Filesystem access.

repo/swarms/structs/planner_generator_evaluator.py:368

        with open(self.shared_state_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #faaa9b062eee0e3b — Filesystem access.

repo/swarms/structs/safe_loading.py:185

            with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42d136ba28df724c — Filesystem access.

repo/swarms/structs/safe_loading.py:214

            with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fe6b7f54a582045 — Environment-variable access.

repo/swarms/structs/sequential_workflow.py:520

            if not os.getenv("WORKSPACE_DIR"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d21b07c4b7306461 — Environment-variable access.

repo/swarms/structs/sequential_workflow.py:524

                os.environ["WORKSPACE_DIR"] = default_workspace

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43501503cf7eb061 — Filesystem access.

repo/swarms/structs/sequential_workflow.py:593

            with open(conversation_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c70ed63c8d3a1460 — Filesystem access.

repo/swarms/structs/skill_orchestra.py:753

            with open(conv_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4efb3527c266c11 — Filesystem access.

repo/swarms/structs/skill_orchestra.py:765

            with open(handbook_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #611f52a2d0d39238 — Filesystem access.

repo/swarms/structs/spreadsheet_swarm.py:133

            with open(csv_path, mode="r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b28c02f35561042 — Filesystem access.

repo/swarms/structs/spreadsheet_swarm.py:397

        with open(self.save_file_path, mode="a", newline="") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6ba12cb7f30b508 — Environment-variable access.

repo/swarms/structs/test_prompt_caching.py:121

    return any(os.getenv(name) for name in env_names)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72c858196f1a22e2 — Environment-variable access.

repo/swarms/telemetry/bootup.py:12

        verbose = os.getenv("SWARMS_VERBOSE_GLOBAL", "False").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #456564bfb7038879 — Environment-variable access.

repo/swarms/telemetry/bootup.py:22

        os.environ["WANDB_SILENT"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9aa5fa173225eb8 — Environment-variable access.

repo/swarms/telemetry/bootup.py:27

        os.environ["WORKSPACE_DIR"] = str(workspace_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22b6e70f6bc1e500 — Environment-variable access.

repo/swarms/telemetry/main.py:132

    key = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #395f7b5096a0f09c — Hardcoded external endpoint. Review what data is sent to this destination.

repo/swarms/telemetry/main.py:139

    response = requests.post(
        url, json=payload, headers=headers, timeout=10
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #e543535a2e7cdfe9 — Environment-variable access.

repo/swarms/telemetry/main.py:164

    get_telemetry = os.getenv("SWARMS_TELEMETRY_ON")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28f9a049b319fcbb — Filesystem access.

repo/swarms/tools/computer_use.py:400

        data = real.read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d31c6c462dc6dd3b — Filesystem access.

repo/swarms/tools/computer_use.py:648

    with open(tmp, mode, encoding=enc) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17c72ef21e92bb2a — Filesystem access.

repo/swarms/tools/computer_use.py:707

        with open(real, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09583b4d87ff3fb8 — Filesystem access.

repo/swarms/tools/computer_use.py:753

    text = real.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e53d41799f6be025 — Environment-variable access.

repo/swarms/tools/computer_use.py:863

            for k, v in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29656416575b1c1a — Environment-variable access.

repo/swarms/tools/computer_use.py:1040

        workspace_root = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc899cec66d41ff0 — Environment-variable access.

repo/swarms/tools/computer_use.py:1040

        workspace_root = os.environ.get(
            "COMPUTER_USE_WORKSPACE", workspace_root
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac2fcecdaaa1a623 — Filesystem access.

repo/swarms/utils/agent_loader_markdown.py:143

            with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3e478a38ffe31bd — Environment-variable access.

repo/swarms/utils/disable_logging.py:12

    os.environ["WORKSPACE_DIR"] = "agent_workspace"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #084af67c4c2aa77f — Environment-variable access.

repo/swarms/utils/disable_logging.py:17

    os.environ["TF_CPP_MIN_LOG_LEVEL"] = "3"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c446ebb364fc729b — Environment-variable access.

repo/swarms/utils/disable_logging.py:49

    workspace_dir = os.environ["WORKSPACE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bed754cd569dc6c — Filesystem access.

repo/swarms/utils/file_processing.py:97

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4cbbbd41ec12750 — Filesystem access.

repo/swarms/utils/file_processing.py:125

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b524f4f8641e0cfc — Filesystem access.

repo/swarms/utils/image_file_b64.py:135

        with open(image_source, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c08f77b7013f879 — Filesystem access.

repo/swarms/utils/image_file_b64.py:249

        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b1702815b08bfe1 — Filesystem access.

repo/swarms/utils/litellm_wrapper.py:89

        with open(audio_source, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9fcb08eae7424605 — Environment-variable access.

repo/swarms/utils/swarms_marketplace_utils.py:30

    api_key = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3da69c51db4cf164 — Environment-variable access.

repo/swarms/utils/workspace_utils.py:31

    workspace_dir = os.getenv("WORKSPACE_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

litellm

python dependency

high pii_flow dependency Excluded from app score #e92d65d652c76660 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:204 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:193 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:204

        return httpx.AsyncClient(
            transport=transport,
            event_hooks=event_hooks,
            timeout=timeout,
            limits=httpx.Limits(
                max_connections=concurrent_limit,
                max_keepalive_connections=concurrent_limit,
            ),
            verify=ssl_config,
            cert=cert,
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #19ede4d6dd5cf678 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:680 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:674 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:680

            self.client = httpx.Client(
                transport=transport,
                timeout=timeout,
                limits=httpx.Limits(
                    max_connections=concurrent_limit,
                    max_keepalive_connections=concurrent_limit,
                ),
                verify=ssl_config,
                cert=cert,
                headers=headers,
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #5d326ea661c22296 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:83 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:77 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:83

        response = httpx.get(path, headers=headers, params=params)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #346f9f065fdd22e6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:183 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:175 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:183

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #c55b45333f61e47e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:242 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:234 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:242

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #4afd1633f026bae9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:371 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:363 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:371

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #f3901389484f58a5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:438 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:430 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:438

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #47d8d28bdfcc6491 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:111 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:68 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:111

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #941e61ec9b36054c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:103 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:106 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:103

                    response=httpx.Response(
                        status_code=429,
                        content="{} rpm limit={}. current usage={}. id={}, model_group={}. Get the model info by calling 'router.get_model_info(id)".format(
                            RouterErrors.user_defined_ratelimit_error.value,
                            deployment_rpm,
                            local_result,
                            model_id,
                            deployment.get("model_name", ""),
                        ),
                        request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                    ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #4a7c770389276fff — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:128 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:131 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:128

                        response=httpx.Response(
                            status_code=429,
                            content="{} rpm limit={}. current usage={}".format(
                                RouterErrors.user_defined_ratelimit_error.value,
                                deployment_rpm,
                                result,
                            ),
                            request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #3f086838c8b267c0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:188 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:191 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:188

                    response=httpx.Response(
                        status_code=429,
                        content="{} rpm limit={}. current usage={}".format(
                            RouterErrors.user_defined_ratelimit_error.value,
                            deployment_rpm,
                            local_result,
                        ),
                        headers={"retry-after": str(60)},  # type: ignore
                        request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                    ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #c2243945fc544db2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:212 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:215 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:212

                        response=httpx.Response(
                            status_code=429,
                            content="{} rpm limit={}. current usage={}".format(
                                RouterErrors.user_defined_ratelimit_error.value,
                                deployment_rpm,
                                result,
                            ),
                            headers={"retry-after": str(60)},  # type: ignore
                            request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium telemetry dependency Excluded from app score #0788af2c0af37ab7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/hooks/managed_files.py:50

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fbd153e5b30eddc4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/_service_logger.py:15

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #59659dda405474de — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/base_cache.py:15

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6914b5dbc0141950 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/disk_cache.py:7

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #289eea566ccf2ee4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/dual_cache.py:28

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6d50c8cae39791c3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/redis_cache.py:28

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1ddab0a095df15d3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/redis_cluster_cache.py:13

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2bbbfac2b94ab7f4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/arize/_utils.py:9

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #de0cab6c3adca440 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:18

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #be7e1bf9685861f5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:10

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #16bf0dce8462da66 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/custom_logger.py:32

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a3ba7a8f6dcfcd8b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:16

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #98fdd141290697c9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/langtrace.py:7

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #782cd0c487b43a2f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:19

    from opentelemetry.sdk.trace.export import SpanExporter as _SpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #21cd49393cb57f0b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:20

    from opentelemetry.trace import Context as _Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #42d9e73dde57cdc6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:21

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a011d9db3f04e12e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:22

    from opentelemetry.trace import Tracer as _Tracer

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3c912ac7062a14f0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:54

    from opentelemetry.sdk.resources import OTELResourceDetector, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #14fd2df9826f2ea5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:96

        from opentelemetry.sdk.trace.export.in_memory_span_exporter import (
            InMemorySpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3e0bbee87884071f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:124

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #79dc69485dc3591f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:125

        from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #61e2ede2ca3f0bdd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:126

        from opentelemetry.trace import SpanKind

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b58b03b51277245c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:201

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #784499533a4c16c7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:202

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5157afc6dcc96ef1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:261

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #aa8604315f76a272 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:262

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #47d53aec7382ae3b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:323

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b93e62040bb898c0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:324

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #708c7b335d351973 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:390

        from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c5cda40c7b4c5558 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:418

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9ca1faf77e11bc92 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:419

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #569c6e8c18545e38 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:524

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #958ccb0c88bacb2a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:934

        from opentelemetry.trace.propagation.tracecontext import (
            TraceContextTextMapPropagator,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3c3d881a51295d5e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:945

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c780afbbbe055326 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:946

        from opentelemetry.trace.propagation.tracecontext import (
            TraceContextTextMapPropagator,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d1aead2080def29e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:972

        from opentelemetry.exporter.otlp.proto.grpc.trace_exporter import (
            OTLPSpanExporter as OTLPSpanExporterGRPC,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dbe09418eb2e3cac — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:975

        from opentelemetry.exporter.otlp.proto.http.trace_exporter import (
            OTLPSpanExporter as OTLPSpanExporterHTTP,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9f728f16426e6e2a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:978

        from opentelemetry.sdk.trace.export import (
            BatchSpanProcessor,
            ConsoleSpanExporter,
            SimpleSpanProcessor,
            SpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8240836a5044e9c8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1065

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #43f2d47ae89caa78 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1066

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6dae6d88fd5537f3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1118

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #988f6b2b21240ba7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1119

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ee35f96e625aeb57 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/traceloop.py:39

        from opentelemetry.semconv.ai import SpanAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #003721e399ca4c21 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/traceloop.py:40

        from opentelemetry.trace import SpanKind, Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7a697c6068551739 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/core_helpers.py:11

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c1ee2e1272f89aac — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3049

                    import sentry_sdk

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d7d9bac43766f2f3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3055

                    import sentry_sdk

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5e8167dfed97cff4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3056

                from sentry_sdk.scrubber import EventScrubber

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3902618f45597f30 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3084

                    from posthog import Posthog

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8b3e51fc7cfdcfd2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3090

                    from posthog import Posthog

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a7fa13f84ef86b0f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/logging_utils.py:15

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0f1977dd6b3cd012 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/_types.py:54

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #165851fc987cebbe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/auth/auth_checks.py:60

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c7c86acab6d8feac — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/auth/auth_exception_handler.py:18

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #98bd6afef8ae1d3e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/hooks/parallel_request_limiter.py:21

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #40b7a3d2ad7b21c7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/hooks/parallel_request_limiter_v3.py:29

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #352c752d540d3ba4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:46

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8f7a1194521bb95c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/utils.py:99

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f93c6c1b4c2879c5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router.py:164

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b80e8c0a2fab74e0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_strategy/lowest_latency.py:16

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fe4ee5dba041301a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:21

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6794dcb49b9aaa1c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/cooldown_cache.py:14

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7ebfa6e4fe96a3fa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/cooldown_handlers.py:28

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #368dadc677008102 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/handle_error.py:12

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a2b5b20bb9761ab7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/prompt_caching_cache.py:14

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 859 low-confidence finding(s)

low env_fs dependency Excluded from app score #e0dbe693c48c50f1 — Environment-variable access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/aporia_ai.py:44

        self.aporia_api_key = api_key or os.environ["APORIO_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79ef4216bdb40562 — Environment-variable access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/aporia_ai.py:45

        self.aporia_api_base = api_base or os.environ["APORIO_API_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a080587ba21e6252 — Filesystem access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/banned_keywords.py:34

                with open(banned_keywords_list, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #996e625ea8ee9599 — Filesystem access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/blocked_user_list.py:35

                with open(blocked_user_list, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaad4d4fd4658ae1 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/generic_api_callback.py:46

        endpoint = endpoint or os.getenv("GENERIC_LOGGER_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bc5a7bb1413b387 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/generic_api_callback.py:82

        env_headers = os.getenv("GENERIC_LOGGER_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bbbb61d2da66eaf — Filesystem access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/llama_guard.py:41

                with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ddb1559a8cd4992 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/pagerduty/pagerduty.py:54

        _api_key = os.getenv("PAGERDUTY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17b3f061d3c62cc3 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:124

        custom_logo = os.getenv("EMAIL_LOGO_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6218fc9d02be5d74 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:125

        custom_support = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bce1afdca22332e1 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:126

        custom_signature = os.getenv("EMAIL_SIGNATURE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d06657468fda1030 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:127

        custom_subject_invitation = os.getenv("EMAIL_SUBJECT_INVITATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17480da713a03d80 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:128

        custom_subject_key_created = os.getenv("EMAIL_SUBJECT_KEY_CREATED", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3cb1bded2073a7c — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:146

        base_url = os.getenv("PROXY_BASE_URL", "http://0.0.0.0:4000")  # Not a premium feature

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e08e3e06079563ad — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/resend_email.py:26

        self.resend_api_key = os.getenv("RESEND_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #146cf1f28c299e4f — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/auth/route_checks.py:17

        if "DISABLE_LLM_API_ENDPOINTS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01ce89f700388b12 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/auth/route_checks.py:35

        if "DISABLE_ADMIN_ENDPOINTS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fc4e3075dc03770 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/proxy_server.py:32

            docs_description = os.getenv("DOCS_DESCRIPTION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1acba43038384ab6 — Environment-variable access.

pkgs/python/[email protected]/litellm/__init__.py:95

litellm_mode = os.getenv("LITELLM_MODE", "DEV")  # "PRODUCTION", "DEV"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0dfd0349dae1202 — Environment-variable access.

pkgs/python/[email protected]/litellm/__init__.py:201

drop_params = bool(os.getenv("LITELLM_DROP_PARAMS", False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce0353f59801f928 — Environment-variable access.

pkgs/python/[email protected]/litellm/__init__.py:202

modify_params = bool(os.getenv("LITELLM_MODIFY_PARAMS", False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #369b5e09ccd1ddec — Environment-variable access.

pkgs/python/[email protected]/litellm/_logging.py:14

json_logs = bool(os.getenv("JSON_LOGS", False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ede476ef3f3b80e1 — Environment-variable access.

pkgs/python/[email protected]/litellm/_logging.py:16

log_level = os.getenv("LITELLM_LOG", "DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12d5cdebebc3366e — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:170

    if "REDIS_URL" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7be729ba8dc47f8 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:171

        return os.environ["REDIS_URL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9fc0ea74f4b0eef — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:173

    if "REDIS_HOST" not in os.environ or "REDIS_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf35269a3f0e3d1c — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:178

    if "REDIS_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66bb876465c458d8 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:179

        redis_password = f":{os.environ['REDIS_PASSWORD']}@"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21316a81d55e1d32 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:184

        f"redis://{redis_password}{os.environ['REDIS_HOST']}:{os.environ['REDIS_PORT']}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76af1e2f551c1a21 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:113

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #960c7d42cadd5948 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:114

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e1b3502feb08348 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:120

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33174212dc63a477 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:128

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59c04bc1e7d0d536 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:318

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b40337d9ed5fbf96 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:319

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca614d8504b6542b — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:325

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #649b061af317e4d1 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:333

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b65fb878821006b — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:495

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3f4f1f76c47f54c — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:496

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a5cfdf34364978a — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:502

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc49d8fbc9edf443 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:510

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cf0166fcb306bf4 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:684

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67f575f26aafdfd1 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:685

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b66b2ee664e25495 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:691

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d645b568cf6c3c8 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:699

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c950cf853a607e62 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:840

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9da3ac6f6d7371a8 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:841

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f87c3a513b8ad24 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:847

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c01de931544c8af8 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:855

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1ebbc79b34185fc — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1029

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e484ff18ae811f34 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1030

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e623265d0d484ca — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1036

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca324073b3d2b865 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1044

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e586f88733f03f08 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1191

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b06edc48157029b5 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1192

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #add79c8772addcdb — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1198

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e96663a1ca82613 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1206

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b146d8bcd5b89285 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1390

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #664ff7e0d1a50d6b — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1391

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb4f5965cddfd419 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1397

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27f1f68b9bdb6c39 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1405

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #626870f6a2fe6418 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:160

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #886192c47a623a0f — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:161

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3cf9439897d1b1e — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:167

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #412e4a2d6c27a446 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:175

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e389f79b18f8d512 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:365

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31715284533aec99 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:366

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf61fcfc8a8c8034 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:372

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b20f93d64b343066 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:380

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b415ecb0a4197aa9 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:540

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6874cdee0c71b723 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:564

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d47cef01cfbf64fe — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:565

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ebf4a3c3d38edea — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:571

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe5e247eb424bbc1 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:722

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #226bbd5631a2d1fc — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:723

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e22d7457e3f7f964 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:729

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #931afde808a64b19 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:736

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d196eb425840d73 — Filesystem access.

pkgs/python/[email protected]/litellm/budget_manager.py:55

                with open("user_cost.json", "r") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c395b2d8378e052d — Filesystem access.

pkgs/python/[email protected]/litellm/budget_manager.py:218

            with open("user_cost.json", "w") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8201a9c5536dd84f — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/qdrant_semantic_cache.py:71

            qdrant_api_base or os.getenv("QDRANT_URL") or os.getenv("QDRANT_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d93c6ecd7347c78 — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/qdrant_semantic_cache.py:73

        qdrant_api_key = qdrant_api_key or os.getenv("QDRANT_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc256f7215ddfd5a — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/redis_semantic_cache.py:94

                host = host or os.environ["REDIS_HOST"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #790a013ead95412e — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/redis_semantic_cache.py:95

                port = port or os.environ["REDIS_PORT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43a4b1f451b46d32 — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/redis_semantic_cache.py:96

                password = password or os.environ["REDIS_PASSWORD"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd4ea48d9321e086 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:5

    os.getenv("AZURE_DEFAULT_RESPONSES_API_VERSION", "preview")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f9f1a958446bce9 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:7

ROUTER_MAX_FALLBACKS = int(os.getenv("ROUTER_MAX_FALLBACKS", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9e2e21bdf01a835 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:8

DEFAULT_BATCH_SIZE = int(os.getenv("DEFAULT_BATCH_SIZE", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c60cd2d8b706c674 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:9

DEFAULT_FLUSH_INTERVAL_SECONDS = int(os.getenv("DEFAULT_FLUSH_INTERVAL_SECONDS", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #892707e245879288 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:11

    os.getenv("DEFAULT_S3_FLUSH_INTERVAL_SECONDS", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #099b4e02ba18db34 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:13

DEFAULT_S3_BATCH_SIZE = int(os.getenv("DEFAULT_S3_BATCH_SIZE", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63e4a7079c4f9a7b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:15

    os.getenv("DEFAULT_SQS_FLUSH_INTERVAL_SECONDS", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0698415956604b2b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:17

DEFAULT_SQS_BATCH_SIZE = int(os.getenv("DEFAULT_SQS_BATCH_SIZE", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c7267030ab81666 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:20

DEFAULT_MAX_RETRIES = int(os.getenv("DEFAULT_MAX_RETRIES", 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10d184c485d580fc — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:21

DEFAULT_MAX_RECURSE_DEPTH = int(os.getenv("DEFAULT_MAX_RECURSE_DEPTH", 100))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68bcdc3db1b1f2a6 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:23

    os.getenv("DEFAULT_MAX_RECURSE_DEPTH_SENSITIVE_DATA_MASKER", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ece8884dddd1378 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:26

    os.getenv("DEFAULT_FAILURE_THRESHOLD_PERCENT", 0.5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db8427c6a879f395 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:28

DEFAULT_MAX_TOKENS = int(os.getenv("DEFAULT_MAX_TOKENS", 4096))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5624f3182eac7d00 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:29

DEFAULT_ALLOWED_FAILS = int(os.getenv("DEFAULT_ALLOWED_FAILS", 3))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bccd310edcfb99de — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:30

DEFAULT_REDIS_SYNC_INTERVAL = int(os.getenv("DEFAULT_REDIS_SYNC_INTERVAL", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acba8785aa48c6e6 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:31

DEFAULT_COOLDOWN_TIME_SECONDS = int(os.getenv("DEFAULT_COOLDOWN_TIME_SECONDS", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b5a3bf765cda075 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:33

    os.getenv("DEFAULT_REPLICATE_POLLING_RETRIES", 5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b9324c520b18576 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:36

    os.getenv("DEFAULT_REPLICATE_POLLING_DELAY_SECONDS", 1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6f3fd723f9cc941 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:38

DEFAULT_IMAGE_TOKEN_COUNT = int(os.getenv("DEFAULT_IMAGE_TOKEN_COUNT", 250))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f116e07ea4febbb — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:39

DEFAULT_IMAGE_WIDTH = int(os.getenv("DEFAULT_IMAGE_WIDTH", 300))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92acbe9235d3dfad — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:40

DEFAULT_IMAGE_HEIGHT = int(os.getenv("DEFAULT_IMAGE_HEIGHT", 300))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #612e1d53fc665b90 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:42

    os.getenv("MAX_SIZE_PER_ITEM_IN_MEMORY_CACHE_IN_KB", 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bad2711c7d2760be — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:45

    os.getenv("SINGLE_DEPLOYMENT_TRAFFIC_FAILURE_THRESHOLD", 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03781b489aaa94c3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:49

    os.getenv("DEFAULT_REASONING_EFFORT_DISABLE_THINKING_BUDGET", 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8f2ef5b424cd651 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:52

    os.getenv("DEFAULT_REASONING_EFFORT_LOW_THINKING_BUDGET", 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7116a61d5b766a0d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:55

    os.getenv("DEFAULT_REASONING_EFFORT_MEDIUM_THINKING_BUDGET", 2048)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #346a2576ba81ddbb — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:58

    os.getenv("DEFAULT_REASONING_EFFORT_HIGH_THINKING_BUDGET", 4096)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e595f0a3648b462f — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:61

    os.getenv("MAX_TOKEN_TRIMMING_ATTEMPTS", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e48044bf32c5dc0d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:73

MAX_REDIS_BUFFER_DEQUEUE_COUNT = int(os.getenv("MAX_REDIS_BUFFER_DEQUEUE_COUNT", 100))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d67fc7b3ec3815f9 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:74

MAX_SIZE_IN_MEMORY_QUEUE = int(os.getenv("MAX_SIZE_IN_MEMORY_QUEUE", 10000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b9ffc18d0655825 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:76

    os.getenv("MAX_IN_MEMORY_QUEUE_FLUSH_COUNT", 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e3a6644fb80ea25 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:80

    os.getenv("MINIMUM_PROMPT_CACHE_TOKEN_COUNT", 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae33ebf2640eac83 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:83

    os.getenv("DEFAULT_TRIM_RATIO", 0.75)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41a6655121ff2239 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:85

HOURS_IN_A_DAY = int(os.getenv("HOURS_IN_A_DAY", 24))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a878590bdffbc5c8 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:86

DAYS_IN_A_WEEK = int(os.getenv("DAYS_IN_A_WEEK", 7))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d6cf251b49c6730 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:87

DAYS_IN_A_MONTH = int(os.getenv("DAYS_IN_A_MONTH", 28))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0527a717bebd4f20 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:88

DAYS_IN_A_YEAR = int(os.getenv("DAYS_IN_A_YEAR", 365))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3fc55b77051bd53 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:90

    os.getenv("REPLICATE_MODEL_NAME_WITH_ID_LENGTH", 64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccc6e1dd7faad867 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:93

FUNCTION_DEFINITION_TOKEN_COUNT = int(os.getenv("FUNCTION_DEFINITION_TOKEN_COUNT", 9))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #deba73311e8dabf1 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:94

SYSTEM_MESSAGE_TOKEN_COUNT = int(os.getenv("SYSTEM_MESSAGE_TOKEN_COUNT", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b258aa98df1e689c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:95

TOOL_CHOICE_OBJECT_TOKEN_COUNT = int(os.getenv("TOOL_CHOICE_OBJECT_TOKEN_COUNT", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0b3f2d4e281f0d2 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:97

    os.getenv("DEFAULT_MOCK_RESPONSE_PROMPT_TOKEN_COUNT", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e06abff32c603ce — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:100

    os.getenv("DEFAULT_MOCK_RESPONSE_COMPLETION_TOKEN_COUNT", 20)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #103aee4117bd8115 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:103

    os.getenv("MAX_SHORT_SIDE_FOR_IMAGE_HIGH_RES", 768)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #160ec3a8de75a27d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:106

    os.getenv("MAX_LONG_SIDE_FOR_IMAGE_HIGH_RES", 2000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d19aac5116561692 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:108

MAX_TILE_WIDTH = int(os.getenv("MAX_TILE_WIDTH", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3270cd09d4953a77 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:109

MAX_TILE_HEIGHT = int(os.getenv("MAX_TILE_HEIGHT", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #476f3f557132121b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:111

    os.getenv("OPENAI_FILE_SEARCH_COST_PER_1K_CALLS", 2.5 / 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5d6a401fe14af88 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:116

    os.getenv("AZURE_FILE_SEARCH_COST_PER_GB_PER_DAY", 0.1)  # $0.1 USD per 1 GB/Day

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edff709c270f087a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:119

    os.getenv(
        "AZURE_CODE_INTERPRETER_COST_PER_SESSION", 0.03
    )  # $0.03 USD per 1 Session

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e0ee16210d5365a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:124

    os.getenv(
        "AZURE_COMPUTER_USE_INPUT_COST_PER_1K_TOKENS", 3.0
    )  # $0.003 USD per 1K Tokens

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82e03b6752a5cdab — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:129

    os.getenv(
        "AZURE_COMPUTER_USE_OUTPUT_COST_PER_1K_TOKENS", 12.0
    )  # $0.012 USD per 1K Tokens

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #724d969164cb1dc1 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:134

    os.getenv(
        "AZURE_VECTOR_STORE_COST_PER_GB_PER_DAY", 0.1
    )  # $0.1 USD per 1 GB/Day (same as file search)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7b1297f8d3e8dc7 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:138

MIN_NON_ZERO_TEMPERATURE = float(os.getenv("MIN_NON_ZERO_TEMPERATURE", 0.0001))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d1317e8b6d41967 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:141

    os.getenv("REPEATED_STREAMING_CHUNK_LIMIT", 100)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bab4cf5970574c43 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:143

DEFAULT_MAX_LRU_CACHE_SIZE = int(os.getenv("DEFAULT_MAX_LRU_CACHE_SIZE", 16))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2fd7d23d9e55449 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:144

INITIAL_RETRY_DELAY = float(os.getenv("INITIAL_RETRY_DELAY", 0.5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5530a7bad497ee2b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:145

MAX_RETRY_DELAY = float(os.getenv("MAX_RETRY_DELAY", 8.0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70ab895ba628ee9d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:146

JITTER = float(os.getenv("JITTER", 0.75))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96bfad3604500f33 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:148

    os.getenv("DEFAULT_IN_MEMORY_TTL", 5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb3c8d7b0b15147b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:151

    os.getenv("DEFAULT_POLLING_INTERVAL", 0.03)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f1865b419abcfab — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:153

AZURE_OPERATION_POLLING_TIMEOUT = int(os.getenv("AZURE_OPERATION_POLLING_TIMEOUT", 120))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf22f61c8d8cda00 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:154

REDIS_SOCKET_TIMEOUT = float(os.getenv("REDIS_SOCKET_TIMEOUT", 0.1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77b8ba5dda2383ab — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:155

REDIS_CONNECTION_POOL_TIMEOUT = int(os.getenv("REDIS_CONNECTION_POOL_TIMEOUT", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #361e3a567038d021 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:157

    os.getenv("NON_LLM_CONNECTION_TIMEOUT", 15)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dfd6e89b7b889d2 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:159

MAX_EXCEPTION_MESSAGE_LENGTH = int(os.getenv("MAX_EXCEPTION_MESSAGE_LENGTH", 2000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9a5e37fca039905 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:160

MAX_STRING_LENGTH_PROMPT_IN_DB = int(os.getenv("MAX_STRING_LENGTH_PROMPT_IN_DB", 1000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e54b41f3a589dde — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:161

BEDROCK_MAX_POLICY_SIZE = int(os.getenv("BEDROCK_MAX_POLICY_SIZE", 75))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3fe95d7cba1481b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:163

    os.getenv("REPLICATE_POLLING_DELAY_SECONDS", 0.5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7079ba0ba17a3b91 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:166

    os.getenv("DEFAULT_ANTHROPIC_CHAT_MAX_TOKENS", 4096)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62fc6e09ef677ee3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:168

TOGETHER_AI_4_B = int(os.getenv("TOGETHER_AI_4_B", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d0c4cfce4bdbae0 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:169

TOGETHER_AI_8_B = int(os.getenv("TOGETHER_AI_8_B", 8))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #748d97749e6c6550 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:170

TOGETHER_AI_21_B = int(os.getenv("TOGETHER_AI_21_B", 21))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdce82ad8ce61cb7 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:171

TOGETHER_AI_41_B = int(os.getenv("TOGETHER_AI_41_B", 41))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58772c91ee33a54c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:172

TOGETHER_AI_80_B = int(os.getenv("TOGETHER_AI_80_B", 80))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7d4b29205229cb8 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:173

TOGETHER_AI_110_B = int(os.getenv("TOGETHER_AI_110_B", 110))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be149386e74c721a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:174

TOGETHER_AI_EMBEDDING_150_M = int(os.getenv("TOGETHER_AI_EMBEDDING_150_M", 150))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcb91ea0be16bff8 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:175

TOGETHER_AI_EMBEDDING_350_M = int(os.getenv("TOGETHER_AI_EMBEDDING_350_M", 350))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #603973120f461d94 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:176

QDRANT_SCALAR_QUANTILE = float(os.getenv("QDRANT_SCALAR_QUANTILE", 0.99))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b61245167ee35509 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:177

QDRANT_VECTOR_SIZE = int(os.getenv("QDRANT_VECTOR_SIZE", 1536))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2f788d20a8213ea — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:178

CACHED_STREAMING_CHUNK_DELAY = float(os.getenv("CACHED_STREAMING_CHUNK_DELAY", 0.02))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c8bd4cd4dbf029d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:180

    os.getenv("MAX_SIZE_PER_ITEM_IN_MEMORY_CACHE_IN_KB", 512)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4360b73069f190d1 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:182

DEFAULT_MAX_TOKENS_FOR_TRITON = int(os.getenv("DEFAULT_MAX_TOKENS_FOR_TRITON", 2000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3be183337a742c88 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:184

request_timeout: float = float(os.getenv("REQUEST_TIMEOUT", 6000))  # time in seconds

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6b5d2171647c84d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:189

    os.getenv("DEFAULT_REPLICATE_GPU_PRICE_PER_SECOND", 0.001400)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1aa42ca654882a04 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:191

FIREWORKS_AI_56_B_MOE = int(os.getenv("FIREWORKS_AI_56_B_MOE", 56))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17631712c3c7fe4e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:192

FIREWORKS_AI_176_B_MOE = int(os.getenv("FIREWORKS_AI_176_B_MOE", 176))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13401e744bad63ed — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:193

FIREWORKS_AI_4_B = int(os.getenv("FIREWORKS_AI_4_B", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #777285e4c45aefd2 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:194

FIREWORKS_AI_16_B = int(os.getenv("FIREWORKS_AI_16_B", 16))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #123de4ef6285db40 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:195

FIREWORKS_AI_80_B = int(os.getenv("FIREWORKS_AI_80_B", 80))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e53ec711453f4ade — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:199

    os.getenv("MAX_LANGFUSE_INITIALIZED_CLIENTS", 50)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23277223281f95a1 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:201

DD_TRACER_STREAMING_CHUNK_YIELD_RESOURCE = os.getenv(
    "DD_TRACER_STREAMING_CHUNK_YIELD_RESOURCE", "streaming.chunk.yield"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #633a6bfc3072c88a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:827

    os.getenv("HUMANLOOP_PROMPT_CACHE_TTL_SECONDS", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e63b279e94476520 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:834

    os.getenv("PROMETHEUS_BUDGET_METRICS_REFRESH_INTERVAL_MINUTES", 5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aeefa058bb6644f7 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:837

MAXIMUM_TRACEBACK_LINES_TO_LOG = int(os.getenv("MAXIMUM_TRACEBACK_LINES_TO_LOG", 100))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d73859b33530271 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:848

    os.getenv("MAX_SPENDLOG_ROWS_TO_QUERY", 1_000_000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #752334419f7286dc — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:851

    os.getenv("DEFAULT_SOFT_BUDGET", 50.0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48f7dd65722e53ca — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:869

    os.getenv("BATCH_STATUS_POLL_INTERVAL_SECONDS", 3600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0cd6e43302a1a6c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:872

    os.getenv("BATCH_STATUS_POLL_MAX_ATTEMPTS", 24)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58ee811b6d100f06 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:876

    os.getenv("HEALTH_CHECK_TIMEOUT_SECONDS", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #509e75923ffc75f9 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:891

SPEND_LOG_RUN_LOOPS = int(os.getenv("SPEND_LOG_RUN_LOOPS", 500))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9844495e8e428579 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:892

SPEND_LOG_CLEANUP_BATCH_SIZE = int(os.getenv("SPEND_LOG_CLEANUP_BATCH_SIZE", 1000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #347ca5010edc337b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:894

    os.getenv("DEFAULT_CRON_JOB_LOCK_TTL_SECONDS", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #040c267824734d99 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:897

    os.getenv("PROXY_BUDGET_RESCHEDULER_MIN_TIME", 597)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbc4bf842d9bd37e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:899

PROXY_BATCH_POLLING_INTERVAL = int(os.getenv("PROXY_BATCH_POLLING_INTERVAL", 3600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56ff5cb8da2a5432 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:901

    os.getenv("PROXY_BUDGET_RESCHEDULER_MAX_TIME", 605)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba732065ed74ef2a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:903

PROXY_BATCH_WRITE_AT = int(os.getenv("PROXY_BATCH_WRITE_AT", 10))  # in seconds

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b78f1e9e098aef70 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:905

    os.getenv("DEFAULT_HEALTH_CHECK_INTERVAL", 300)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1681caff05aa988 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:908

    os.getenv("PROMETHEUS_FALLBACK_STATS_SEND_TIME_HOURS", 9)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3e1b217c3c78377 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:911

    os.getenv("DEFAULT_MODEL_CREATED_AT_TIME", 1677610602)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #244637f6207583e4 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:914

    os.getenv("DEFAULT_SLACK_ALERTING_THRESHOLD", 300)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c446c180bdfb36be — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:916

MAX_TEAM_LIST_LIMIT = int(os.getenv("MAX_TEAM_LIST_LIMIT", 20))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d03df09d47fd99e8 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:918

    os.getenv("DEFAULT_PROMPT_INJECTION_SIMILARITY_THRESHOLD", 0.7)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e005f608fbd24331 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:920

LENGTH_OF_LITELLM_GENERATED_KEY = int(os.getenv("LENGTH_OF_LITELLM_GENERATED_KEY", 16))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a2e39ea6b8160af — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:922

    os.getenv("SECRET_MANAGER_REFRESH_INTERVAL", 86400)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cac5ef7695be4fd — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:931

    os.getenv("DEFAULT_MANAGEMENT_OBJECT_IN_MEMORY_CACHE_TTL", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b0a08af905d4548 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:168

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #325e5f810c265d93 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:169

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f6aac4756530a26 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:175

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b967017d80712a1b — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:183

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25295f291958c3cc — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:348

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc0aeb8bc5a875f0 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:349

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be4211277db2dee2 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:355

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e35d42d229bc97 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:363

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa2fe372e8058ec8 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:502

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb11ddb8720619bf — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:503

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b52599819a31d590 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:509

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee2bd06d41ac3703 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:517

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35ae2f2f3ec49525 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:656

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c1762ae9f84cdd3 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:657

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cef726bf6b185f7c — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:663

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84e3301cb29cdb53 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:671

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68a9135c49c5afff — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:830

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6957066cb7b2d4d0 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:831

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70fa7b3a31f30a3d — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:837

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8df4876ebcad543d — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:845

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec3ab7ad689ce3c1 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:142

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25d41ebe5bac8d63 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:143

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d96e95529fc99a4d — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:149

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2aade5b92265f4b — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:157

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7ffa5afb089f050 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:366

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc4e76f198f8220e — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:367

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16753f8b86c751ff — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:373

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2aefdd15c5b5c739 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:381

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2334a60fdbc50ef9 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:528

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afda5c558a0de0b7 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:529

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ff6a5a5206b801a — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:535

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e03ecb99f1ad873c — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:543

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a48742b01dcdbd5b — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:685

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b159ff7c11a6719 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:686

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ad1845d60089947 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:692

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de3272f5545c2676 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:699

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6824224d9bc04318 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1063

    base_url={os.getenv("PROXY_BASE_URL", "http://0.0.0.0:4000")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5fa53c3ef823097 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1108

        webhook_url = os.getenv("WEBHOOK_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3fd5992c9baca00 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1157

            email_logo_url = os.getenv(
                "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f74678771a884f6d — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1158

                "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74f08a31b40fb871 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1160

            email_support_contact = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0563c2b04f9f0273 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1186

            base_url = os.getenv("PROXY_BASE_URL", "http://0.0.0.0:4000")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66a7e68eb550ed9f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1259

        email_logo_url = os.getenv(
            "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a35152775fa06119 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1260

            "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #945264cea2e24cd5 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1262

        email_support_contact = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f87fcb94770153ba — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1369

        _proxy_base_url = os.getenv("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd25d3d07932817b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1397

            slack_webhook_url = os.getenv("SLACK_WEBHOOK_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6565ce32f7670ed2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/agentops/agentops.py:22

            api_key=os.getenv("AGENTOPS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab03d3e1b5f7d086 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/agentops/agentops.py:23

            service_name=os.getenv("AGENTOPS_SERVICE_NAME", "agentops"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ff5e98b0b673cbd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/agentops/agentops.py:24

            deployment_environment=os.getenv("AGENTOPS_ENVIRONMENT", "production"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b270c4032a7c189f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:63

            float(os.getenv("ARGILLA_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #397029ee4c24f4a3 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:64

            if os.getenv("ARGILLA_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e298ac80c5bcece0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:65

            and os.getenv("ARGILLA_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76aac3b0454b5f1b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:73

            os.getenv("ARGILLA_BATCH_SIZE", None) or litellm.argilla_batch_size

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0165a94e3a31b768 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:101

        _credentials_api_key = argilla_api_key or os.getenv("ARGILLA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a6ef20d5c63119c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:107

            or os.getenv("ARGILLA_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #925ceb4ce450dd65 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:117

            or os.getenv("ARGILLA_DATASET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6220de83d8422f2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:238

                float(os.getenv("LANGSMITH_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #caf64c4d5184b480 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:239

                if os.getenv("LANGSMITH_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2b1f169eff91e23 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:240

                and os.getenv("LANGSMITH_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c8c41ec094e0ee4 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:50

        space_key = os.environ.get("ARIZE_SPACE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13bc510ae22d0b5a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:51

        api_key = os.environ.get("ARIZE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf3e1ef9231c48cb — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:53

        grpc_endpoint = os.environ.get("ARIZE_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c286c4d002d296d2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:54

        http_endpoint = os.environ.get("ARIZE_HTTP_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57904c1e682cf29d — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:42

        api_key = os.environ.get("PHOENIX_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e852881df62fa45 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:43

        grpc_endpoint = os.environ.get("PHOENIX_COLLECTOR_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5778bcd634e187b7 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:44

        http_endpoint = os.environ.get("PHOENIX_COLLECTOR_HTTP_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b61d2e11c7364d43 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/athina.py:10

        self.athina_api_key = os.getenv("ATHINA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f694c02231ae8833 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/athina.py:16

            os.getenv("ATHINA_BASE_URL", "https://log.athina.ai")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b9396526b140cb8 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:32

            self.tenant_id = os.getenv("AZURE_STORAGE_TENANT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b19ab8548b7ef785 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:33

            self.client_id = os.getenv("AZURE_STORAGE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0ebd7397060904e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:34

            self.client_secret = os.getenv("AZURE_STORAGE_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #119701695dfd3efa — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:35

            self.azure_storage_account_key: Optional[str] = os.getenv(
                "AZURE_STORAGE_ACCOUNT_KEY"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d7e7ce6cace87fa — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:40

            _azure_storage_account_name = os.getenv("AZURE_STORAGE_ACCOUNT_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec853b68ed2a2120 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:46

            _azure_storage_file_system = os.getenv("AZURE_STORAGE_FILE_SYSTEM")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0d02fc9f0368e98 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/braintrust_logging.py:41

        self.api_base = api_base or os.getenv("BRAINTRUST_API_BASE") or API_BASE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d9c889e1acaf9cc — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/braintrust_logging.py:43

        self.api_key: str = api_key or os.getenv("BRAINTRUST_API_KEY")  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c03da774bef9c4f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/braintrust_logging.py:64

        if api_key is None and os.getenv("BRAINTRUST_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90128218826d2174 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/cloudzero/cloudzero.py:29

        self.api_key = api_key or os.getenv("CLOUDZERO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b04e28e4ba96241c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/cloudzero/cloudzero.py:30

        self.connection_id = connection_id or os.getenv("CLOUDZERO_CONNECTION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb718111ab867c4e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/cloudzero/cloudzero.py:31

        self.timezone = timezone or os.getenv("CLOUDZERO_TIMEZONE", "UTC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e94888d8909c8917 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:70

            if os.getenv("DD_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7288b624701fa8b3 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:72

            if os.getenv("DD_SITE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a61379adbfccd80b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:77

            self.DD_API_KEY = os.getenv("DD_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f60287f92dd92409 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:79

                f"https://http-intake.logs.{os.getenv('DD_SITE')}/api/v2/logs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8aa63acbed2614c0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:85

                os.getenv("_DATADOG_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38f4954080625df6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:86

                or os.getenv("DATADOG_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d23e5111fa57f0d2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:87

                or os.getenv("DD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56b0c5b836e8cc5b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:505

            "env": os.getenv("DD_ENV", "unknown"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fce72f5fb7d5edc9 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:506

            "service": os.getenv("DD_SERVICE", "litellm"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #929c66721630a204 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:507

            "version": os.getenv("DD_VERSION", "unknown"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5ccda90c174ad78 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:509

            "POD_NAME": os.getenv("POD_NAME", "unknown"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d807a1ad63cef611 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:525

        return os.getenv("DD_SOURCE", "litellm")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdebeb8eebc042cc — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:529

        return os.getenv("DD_SERVICE", "litellm-server")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a53e61aaf9d32b12 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:533

        return os.getenv("HOSTNAME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c27f8a219773b6e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:537

        return os.getenv("DD_ENV", "unknown")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d241aec5738b5a70 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:541

        return os.getenv("POD_NAME", "unknown")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a20003b82f90ec2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:42

            if os.getenv("DD_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd23a1da3b527fc0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:44

            if os.getenv("DD_SITE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3498a2c25bef4986 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:52

            self.DD_API_KEY = os.getenv("DD_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0517e2cf624c8cd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:53

            self.DD_SITE = os.getenv("DD_SITE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09c7ca908d319bba — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:59

            dd_base_url = os.getenv("DD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c36f9e13978b76a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/deepeval/deepeval.py:24

        api_key = os.getenv("CONFIDENT_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d28ee1db638a9888 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/deepeval/deepeval.py:25

        self.litellm_environment = os.getenv("LITELM_ENVIRONMENT", "development")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a62b3a9bc8f75fa — Filesystem access.

pkgs/python/[email protected]/litellm/integrations/dotprompt/prompt_manager.py:153

        content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3cbfc3de03bcb04 — Filesystem access.

pkgs/python/[email protected]/litellm/integrations/dotprompt/prompt_manager.py:295

        content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c360e8cca45a7d16 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/dynamodb.py:20

            "dynamodb", region_name=os.environ["AWS_REGION_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12714043efb09637 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/email_alerting.py:82

    email_logo_url = os.getenv("SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #353736b830b7d379 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/email_alerting.py:83

    email_support_contact = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d508fd3d6f886d75 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:40

        self.base_url = os.getenv("GALILEO_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73b73b259cd0d3d6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:41

        self.project_id = os.getenv("GALILEO_PROJECT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9b3022218a2a334 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:59

                "username": os.getenv("GALILEO_USERNAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #831165a1156cc53e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:60

                "password": os.getenv("GALILEO_PASSWORD"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8856ae45047eb820 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket.py:31

        self.batch_size = int(os.getenv("GCS_BATCH_SIZE", GCS_DEFAULT_BATCH_SIZE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b538fd1df765078c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket.py:33

            os.getenv("GCS_FLUSH_INTERVAL", GCS_DEFAULT_FLUSH_INTERVAL_SECONDS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ee5683674d0d78a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket_base.py:26

        _path_service_account = os.getenv("GCS_PATH_SERVICE_ACCOUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71023c02a51c17b9 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket_base.py:27

        _bucket_name = bucket_name or os.getenv("GCS_BUCKET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2f8b81ef3ece9ec — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket_base.py:77

        project_id = os.getenv("GOOGLE_SECRET_MANAGER_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcced943af4cc52b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_pubsub/pub_sub.py:55

        self.project_id = project_id or os.getenv("GCS_PUBSUB_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #423d7c30b357cbfd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_pubsub/pub_sub.py:56

        self.topic_id = topic_id or os.getenv("GCS_PUBSUB_TOPIC_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0cc11c90ada129bf — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_pubsub/pub_sub.py:57

        self.path_service_account_json = credentials_path or os.getenv(
            "GCS_PATH_SERVICE_ACCOUNT"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8799ae6234a2372 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/greenscale.py:12

        self.greenscale_api_key = os.getenv("GREENSCALE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb5e106690679430 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/greenscale.py:17

        self.greenscale_logging_url = os.getenv("GREENSCALE_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bf92d19f2b32c92 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/helicone.py:26

        self.key = os.getenv("HELICONE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a2e9b1733d4e1d7 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/helicone.py:27

        self.api_base = os.getenv("HELICONE_API_BASE") or "https://api.hconeai.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4acda7b2f2e4aca3 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:53

        if os.getenv("LAGO_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #535c0b6c1a632373 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:56

        if os.getenv("LAGO_API_BASE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5006cfba9976ef34 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:59

        if os.getenv("LAGO_API_EVENT_CODE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #045b4d6f28692910 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:92

        if os.getenv("LAGO_API_CHARGE_BY", None) is not None and isinstance(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #254717ba055bd5b0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:93

            os.environ["LAGO_API_CHARGE_BY"], str

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cb94c1a721f5c7b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:95

            if os.environ["LAGO_API_CHARGE_BY"] in [

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5aaa21e7a58994a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:100

                charge_by = os.environ["LAGO_API_CHARGE_BY"]  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f767437b3749b7e0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:122

                "code": os.getenv("LAGO_API_EVENT_CODE"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65f286a38ba235c6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:133

        _url = os.getenv("LAGO_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #039f4c252ffc315d — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:142

        api_key = os.getenv("LAGO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95388c8401b80725 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:167

            _url = os.getenv("LAGO_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08d7e17f9e6f9ca0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:178

            api_key = os.getenv("LAGO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ade14740f4c0d290 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:57

        self.secret_key = langfuse_secret or os.getenv("LANGFUSE_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #398f7c66171ee0ea — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:58

        self.public_key = langfuse_public_key or os.getenv("LANGFUSE_PUBLIC_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75da2a549dcc4487 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:59

        self.langfuse_host = langfuse_host or os.getenv(
            "LANGFUSE_HOST", "https://cloud.langfuse.com"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a189a150eb6d186f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:68

        self.langfuse_release = os.getenv("LANGFUSE_RELEASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83670cefe79113e3 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:69

        self.langfuse_debug = os.getenv("LANGFUSE_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4c44251b8f265c4 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:95

            os.environ["LANGFUSE_PROJECT_ID"] = project_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #227cd282275a252b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:99

        if os.getenv("UPSTREAM_LANGFUSE_SECRET_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1119647c37062b68 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:105

            self.upstream_langfuse_secret_key = os.getenv(
                "UPSTREAM_LANGFUSE_SECRET_KEY"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #561714f41df74a4e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:108

            self.upstream_langfuse_public_key = os.getenv(
                "UPSTREAM_LANGFUSE_PUBLIC_KEY"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91da8c1c7c6a95ae — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:111

            self.upstream_langfuse_host = os.getenv("UPSTREAM_LANGFUSE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93f023f5ca67b738 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:112

            self.upstream_langfuse_release = os.getenv("UPSTREAM_LANGFUSE_RELEASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a205e0daf650116 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:113

            self.upstream_langfuse_debug = os.getenv("UPSTREAM_LANGFUSE_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #376515d6b3242252 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:618

                proxy_base_url = os.environ.get("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #846c53c2821d1c48 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:836

        return int(os.getenv("LANGFUSE_FLUSH_INTERVAL") or flush_interval)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0efc8096f8ee2372 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:101

        langfuse_environment = os.environ.get("LANGFUSE_TRACING_ENVIRONMENT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5c14adfa20d6240 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:153

        return os.environ.get("LANGFUSE_OTEL_HOST") or os.environ.get("LANGFUSE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a161ca64ebe22249 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:171

        public_key = os.environ.get("LANGFUSE_PUBLIC_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6388605a35251e9 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:172

        secret_key = os.environ.get("LANGFUSE_SECRET_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9339c24e163eddf — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:200

        os.environ["OTEL_EXPORTER_OTLP_ENDPOINT"] = endpoint

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9907ba16c5e4c001 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:201

        os.environ["OTEL_EXPORTER_OTLP_HEADERS"] = otlp_auth_headers

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e91c7a844aaefd42 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:75

        langfuse_secret or langfuse_secret_key or os.getenv("LANGFUSE_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #352334fcf8640f9f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:77

    public_key = langfuse_public_key or os.getenv("LANGFUSE_PUBLIC_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #814fe7475f160f7c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:78

    langfuse_host = langfuse_host or os.getenv(
        "LANGFUSE_HOST", "https://cloud.langfuse.com"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f9ebe31ad98c57b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:88

    langfuse_release = os.getenv("LANGFUSE_RELEASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #982b2a4b2d158d6e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:89

    langfuse_debug = os.getenv("LANGFUSE_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67c357bf87d1b0f1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:52

            float(os.getenv("LANGSMITH_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c36fe505df146a76 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:53

            if os.getenv("LANGSMITH_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #061557157e79991f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:54

            and os.getenv("LANGSMITH_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96b1f40b79f209dd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:57

        self.langsmith_default_run_name = os.getenv(
            "LANGSMITH_DEFAULT_RUN_NAME", "LLMRun"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efbb1580c5e72ffc — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:64

            os.getenv("LANGSMITH_BATCH_SIZE", None) or litellm.langsmith_batch_size

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e27203a02b0de383 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:78

        _credentials_api_key = langsmith_api_key or os.getenv("LANGSMITH_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca6565e431348b5c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:84

            langsmith_project or os.getenv("LANGSMITH_PROJECT") or "litellm-completion"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8f02a9991f55153 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:92

            or os.getenv("LANGSMITH_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dcbfc8afb125fc0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:204

                float(os.getenv("LANGSMITH_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da198cae3ca9e1ab — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:205

                if os.getenv("LANGSMITH_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cde56888b0e5da1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:206

                and os.getenv("LANGSMITH_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d940a8ed9dddff0a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/literal_ai.py:28

        self.literalai_api_url = os.getenv("LITERAL_API_URL") or literalai_api_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f2982f41669d831 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/literal_ai.py:31

            "x-api-key": literalai_api_key or os.getenv("LITERAL_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efc6487816584a0e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/literal_ai.py:40

        batch_size = os.getenv("LITERAL_BATCH_SIZE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3538e74b6dbbdd3f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/logfire_logger.py:36

                logfire.configure(token=os.getenv("LOGFIRE_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #706bfb716bcd3216 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:46

        if os.getenv("OPENMETER_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02a1bf6deb4b404b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:87

            "type": os.getenv("OPENMETER_EVENT_TYPE", "litellm_tokens"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce056f9dea784744 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:96

        _url = os.getenv("OPENMETER_API_ENDPOINT", "https://openmeter.cloud")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ef53dec4e1c356e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:102

        api_key = os.getenv("OPENMETER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #269e8473f8be2a9a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:122

        _url = os.getenv("OPENMETER_API_ENDPOINT", "https://openmeter.cloud")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f22894fc37f686e6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:128

        api_key = os.getenv("OPENMETER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec4173996c812a53 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:43

LITELLM_TRACER_NAME = os.getenv("OTEL_TRACER_NAME", "litellm")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cea4534c0d7e7296 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:59

        "service.name": os.getenv("OTEL_SERVICE_NAME", "litellm"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #635f08e9af65dad2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:60

        "deployment.environment": os.getenv("OTEL_ENVIRONMENT_NAME", "production"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30bcfe03bc959a0e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:62

        "model_id": os.getenv(
            "OTEL_MODEL_ID", os.getenv("OTEL_SERVICE_NAME", "litellm")
        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8494ff9548331d5d — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:63

            "OTEL_MODEL_ID", os.getenv("OTEL_SERVICE_NAME", "litellm")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c03f839cb03627f0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:100

        exporter = os.getenv(
            "OTEL_EXPORTER_OTLP_PROTOCOL", os.getenv("OTEL_EXPORTER", "console")
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36bd3503bb63bf3d — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:101

            "OTEL_EXPORTER_OTLP_PROTOCOL", os.getenv("OTEL_EXPORTER", "console")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #701cc4a9f897b31e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:103

        endpoint = os.getenv("OTEL_EXPORTER_OTLP_ENDPOINT", os.getenv("OTEL_ENDPOINT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6031c60f11b72c01 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:104

        headers = os.getenv(
            "OTEL_EXPORTER_OTLP_HEADERS", os.getenv("OTEL_HEADERS")
        )  # example: OTEL_HEADERS=x-honeycomb-team=B85YgLm96***"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36d6247ac3bb82d1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:105

            "OTEL_EXPORTER_OTLP_HEADERS", os.getenv("OTEL_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50cdce035292999e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:144

        _debug_otel = str(os.getenv("DEBUG_OTEL", "False")).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ba6d31ac6ffc6a1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opik/utils.py:58

    return os.getenv((env_prefix + key).upper(), None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f79fcd473522d127 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/prompt_layer.py:15

        self.key = os.getenv("PROMPTLAYER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #811f5ae2a2156fd4 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/supabase.py:18

        self.supabase_url = os.getenv("SUPABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5c85e8dc4936b42 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/supabase.py:19

        self.supabase_key = os.getenv("SUPABASE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57ee49d5cfb0a4a2 — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/audio_utils/utils.py:56

        with open(file_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f662955ccecd8bb4 — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/audio_utils/utils.py:68

                with open(str(content), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3c4dfb8ce78bc8a — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/audio_utils/utils.py:136

    return open(file_path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f99ad8c1ea20919c — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/default_encoding.py:18

os.environ["TIKTOKEN_CACHE_DIR"] = os.getenv(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #758bf49816084d28 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/default_encoding.py:18

os.environ["TIKTOKEN_CACHE_DIR"] = os.getenv(
    "CUSTOM_TIKTOKEN_CACHE_DIR", filename
)  # use local copy of tiktoken b/c of - https://github.com/BerriAI/litellm/issues/1071

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74f12bac6e2f66b9 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/get_model_cost_map.py:18

        os.getenv("LITELLM_LOCAL_MODEL_COST_MAP", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9627669cb634e258 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/get_model_cost_map.py:19

        or os.getenv("LITELLM_LOCAL_MODEL_COST_MAP", False) == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fec2895e81f77f91 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3060

                    os.environ.get("SENTRY_API_TRACE_RATE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #679903905b3f9b1e — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3061

                    if "SENTRY_API_TRACE_RATE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #935146434e0345c0 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3065

                    os.environ.get("SENTRY_API_SAMPLE_RATE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad49bdb6d7dd76cb — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3066

                    if "SENTRY_API_SAMPLE_RATE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bfaade2d528c396 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3070

                    dsn=os.environ.get("SENTRY_DSN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d21b336f123c9071 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3092

                    project_api_key=os.environ.get("POSTHOG_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cfb9ae5eeb380fe — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3093

                    host=os.environ.get("POSTHOG_API_URL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02011048cea1965c — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3105

                    token=os.environ.get("SLACK_API_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e9a39cf3d8d8f08 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3106

                    signing_secret=os.environ.get("SLACK_API_SECRET"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7fc611090367826 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3108

                alerts_channel = os.environ["SLACK_API_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d1f4b1868c0fc3d — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3301

            os.environ["OTEL_EXPORTER_OTLP_TRACES_HEADERS"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #181f5caadf222cd0 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3327

                os.environ["OTEL_EXPORTER_OTLP_TRACES_HEADERS"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acc22954ab25a481 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3374

            if "LOGFIRE_TOKEN" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f701b801e55963cb — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3384

                headers=f"Authorization={os.getenv('LOGFIRE_TOKEN')}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #deb001663a65f7c2 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3417

            if "LANGTRACE_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #044bfb293b36a861 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3429

            os.environ["OTEL_EXPORTER_OTLP_TRACES_HEADERS"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57db4a9a021c5e27 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3430

                f"api_key={os.getenv('LANGTRACE_API_KEY')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f14c7e08fe235a36 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3646

            if "ARIZE_SPACE_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9483ddee9aa6e683 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3648

            if "ARIZE_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c69cb241cf24b80e — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3657

            if "LOGFIRE_TOKEN" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c617ccd005cd1ac8 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3677

            if "LANGTRACE_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8c9fbd0bcc03a1f — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:4490

    if os.getenv("LITELLM_PRINT_STANDARD_LOGGING_PAYLOAD"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87bbf4c11eec4eea — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/prompt_templates/common_utils.py:466

        with open(file_content, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f71dfa0e11e6440 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/anthropic/experimental_pass_through/messages/transformation.py:66

            api_key = os.getenv("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0aabcb616fc4530 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:183

    azure_authority_host = os.getenv(
        "AZURE_AUTHORITY_HOST", "https://login.microsoftonline.com"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdf3a9653b33adaf — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:186

    azure_client_id = azure_client_id or os.getenv("AZURE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b41f717dc67c24e3 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:187

    azure_tenant_id = azure_tenant_id or os.getenv("AZURE_TENANT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b58c70d3d3fd7a8 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:301

    tenant_id = litellm_params.get("tenant_id", os.getenv("AZURE_TENANT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8eae21609eefa91 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:302

    client_id = litellm_params.get("client_id", os.getenv("AZURE_CLIENT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3d2db11629ed5a3 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:304

        "client_secret", os.getenv("AZURE_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2100e54adbc5b011 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:306

    azure_username = litellm_params.get("azure_username", os.getenv("AZURE_USERNAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f813308e11ba66f2 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:307

    azure_password = litellm_params.get("azure_password", os.getenv("AZURE_PASSWORD"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46875add9f4f08a4 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:310

        os.getenv("AZURE_SCOPE", "https://cognitiveservices.azure.com/.default"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34b5af921c5bf266 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:498

        tenant_id = litellm_params.get("tenant_id", os.getenv("AZURE_TENANT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #453c8974356c028f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:499

        client_id = litellm_params.get("client_id", os.getenv("AZURE_CLIENT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8776da85d4cdb98 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:501

            "client_secret", os.getenv("AZURE_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43ace33d123b1293 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:504

            "azure_username", os.getenv("AZURE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3874001f0f627038 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:507

            "azure_password", os.getenv("AZURE_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69b40284bc51bf30 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:511

            os.getenv("AZURE_SCOPE", "https://cognitiveservices.azure.com/.default"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49f97b3964e2618c — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:568

            api_version = os.getenv(
                "AZURE_API_VERSION", litellm.AZURE_DEFAULT_API_VERSION
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7dd4e6375b9e6fa — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:623

        tenant_id = litellm_params.get("tenant_id", os.getenv("AZURE_TENANT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #941470f0d18ae69a — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:624

        client_id = litellm_params.get("client_id", os.getenv("AZURE_CLIENT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06a0472aad2b5a5a — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:627

            os.getenv("AZURE_SCOPE", "https://cognitiveservices.azure.com/.default"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e52a16be4a904837 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:116

                if key.upper() in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef7faf9e85c42fd7 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:117

                    params_to_check[i] = os.getenv(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ef6998ad6d9a1ae — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:183

            current_role_arn = os.getenv("AWS_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56b5ae1c2ef48a44 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:184

            web_identity_token_file = os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #579bc88f25688181 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:475

        with open(web_identity_token_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7ddbd4d788cab2b — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:569

        web_identity_token_file = os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #130f4e8d795c38ae — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:570

        irsa_role_arn = os.getenv("AWS_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f45ac147f5501d1f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:582

                region = os.getenv("AWS_REGION") or os.getenv("AWS_DEFAULT_REGION") or "us-east-1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d12814f8a6ff54a — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/common_utils.py:159

    ssl_verify = os.getenv("SSL_VERIFY", litellm.ssl_verify)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94d66f3f88eb8d83 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/aiohttp_transport.py:247

            or str_to_bool(os.getenv("DISABLE_AIOHTTP_TRUST_ENV", "False"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd7b1e0fe381f5bd — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:76

        ssl_verify = os.getenv("SSL_VERIFY", litellm.ssl_verify)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cf3669715e399d3 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:83

    ssl_security_level = os.getenv("SSL_SECURITY_LEVEL", litellm.ssl_security_level)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc6bd8e8ae736a6c — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:89

        ssl_cert_file = os.getenv("SSL_CERT_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19d9394f7e40e57f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:193

        cert = os.getenv("SSL_CERTIFICATE", litellm.ssl_certificate)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c8b631d04db43bb — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:572

            or str_to_bool(os.getenv("DISABLE_AIOHTTP_TRANSPORT", "False")) is True

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9b9d6a15c6ff698 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:633

        if str_to_bool(os.getenv("AIOHTTP_TRUST_ENV", "False")) is True:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4233f380c6282e8 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:674

        cert = os.getenv("SSL_CERTIFICATE", litellm.ssl_certificate)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7bb196fca0b6cc1 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:31

        self.token_dir = os.getenv(
            "GITHUB_COPILOT_TOKEN_DIR",
            os.path.expanduser("~/.config/litellm/github_copilot"),
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cabbd5f40f9856d — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:37

            os.getenv("GITHUB_COPILOT_ACCESS_TOKEN_FILE", "access-token"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c3d3df34a0d0325 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:40

            self.token_dir, os.getenv("GITHUB_COPILOT_API_KEY_FILE", "api-key.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #144e1342ab726319 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:55

            with open(self.access_token_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f268c73c1584baf — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:69

                    with open(self.access_token_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95a9414a4a5c7160 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:94

            with open(self.api_key_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13488cba15d8fa77 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:113

            with open(self.api_key_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49e34f033121e989 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:143

            with open(self.api_key_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2be9eaf990311b55 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:82

            base_url = os.getenv("HF_API_BASE") or os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9818b675de03b3fe — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:102

        elif os.getenv("HF_API_BASE") or os.getenv("HUGGINGFACE_API_BASE"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeb4132b89ca1060 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:103

            complete_url = str(os.getenv("HF_API_BASE")) or str(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f57da49ae7b32f16 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:104

                os.getenv("HUGGINGFACE_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f0d21ea1a3e1cae — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:76

    if os.getenv("HUGGINGFACE_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7361f32e0b0c800 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:77

        headers["Authorization"] = f"Bearer {os.getenv('HUGGINGFACE_API_KEY')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #876a1dbd992229df — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:355

        elif "HF_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a64e5cede30d0b1 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:356

            embed_url = os.getenv("HF_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b60ee067f583f5f4 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:357

        elif "HUGGINGFACE_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #746bf7cca92ca028 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:358

            embed_url = os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef50f8ce2a62e4d2 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:164

            with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #925b1628b7537a39 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:178

            with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b2e286423765c79 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:343

        elif "HF_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c2eac7a884e543f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:344

            completion_url = os.getenv("HF_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #759de8a865f6449b — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:345

        elif "HUGGINGFACE_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2daafb942dafaa4b — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:346

            completion_url = os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #590f37dd2af0dcb6 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:55

        elif os.getenv("HF_API_BASE") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #497c4b2d07afc4e9 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:56

            return os.getenv("HF_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64e51ffc8b9588cc — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:57

        elif os.getenv("HUGGINGFACE_API_BASE") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c55527132ac9c12 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:58

            return os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a8352edaa34b80d — Filesystem access.

pkgs/python/[email protected]/litellm/llms/oci/chat/transformation.py:98

        with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfc7b6b07129b844 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/predibase/chat/handler.py:254

        elif "PREDIBASE_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #376c489bc67a617e — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/predibase/chat/handler.py:255

            base_url = os.getenv("PREDIBASE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #018a48abb7559083 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/files/transformation.py:95

            with open(str(file_content), "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9079237b0c1237dd — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/files/transformation.py:165

        bucket_name = litellm_params.get("bucket_name") or os.getenv("GCS_BUCKET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c283f0a5107f28e — Filesystem access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/files/transformation.py:449

            with open(str(file_content), "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a21f882b0d1cb8a — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/vertex_ai_non_gemini.py:157

                f"VERTEX AI: creds={creds}; google application credentials: {os.getenv('GOOGLE_APPLICATION_CREDENTIALS')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e2ff36553b992f2 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/vertex_llm_base.py:66

                        json_obj = json.load(open(credentials))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb623f9aa5c703d9 — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2165

                or os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f999d9989271cf4c — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2210

                or os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f466fc06c88d6bc — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2466

                or os.environ.get("HF_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed3aa2ade01d7601 — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2467

                or os.environ.get("HUGGINGFACE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0068f436fd7f8619 — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2535

                or os.getenv("DATABRICKS_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c43a2bdee484ff4 — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:3283

                or os.environ.get("OLLAMA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01b215eadb9cb57e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/_experimental/mcp_server/utils.py:13

MCP_TOOL_PREFIX_SEPARATOR = os.environ.get("MCP_TOOL_PREFIX_SEPARATOR", "-")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88b4492e9407d73b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/_logging.py:11

log_level = os.getenv("LITELLM_LOG", "INFO")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e46ec06d29e24ca7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/auth_utils.py:464

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #560e1709cf837668 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/auth_utils.py:465

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #736c94dc63960e8f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/auth_utils.py:466

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37412b4381a3822e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/handle_jwt.py:402

        keys_url = os.getenv("JWT_PUBLIC_KEY_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0667092d8ac1634 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/handle_jwt.py:489

        audience = os.getenv("JWT_AUDIENCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcf7c4264aedf0bd — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/litellm_license.py:28

        self.license_str = os.getenv("LITELLM_LICENSE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93a5cc3b5e9116ac — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/auth/litellm_license.py:45

                with open(_path_to_public_key, "rb") as key_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca58dd52ef51d5f5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/litellm_license.py:109

                self.license_str = os.getenv("LITELLM_LICENSE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b10c53fba67ab09 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:37

    token_info_endpoint = os.getenv("OAUTH_TOKEN_INFO_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #854d89ec1f788f7e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:38

    user_id_field_name = os.environ.get("OAUTH_USER_ID_FIELD_NAME", "sub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41376581ef73f718 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:39

    user_role_field_name = os.environ.get("OAUTH_USER_ROLE_FIELD_NAME", "role")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4335e0e3481ced58 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:40

    user_team_id_field_name = os.environ.get("OAUTH_USER_TEAM_ID_FIELD_NAME", "team_id")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cec4b53ae1b6f09 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:80

            oidc_token = open(aws_web_identity_token).read()  # check if filepath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c3ea29c60b11ade — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:169

            aws_region_name=os.getenv("AWS_REGION_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58510c94a0652dc9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:170

            aws_access_key_id=os.getenv("AWS_ACCESS_KEY_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7a184da66538010 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:171

            aws_secret_access_key=os.getenv("AWS_SECRET_ACCESS_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3ad6a610571d6dd — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:172

            aws_session_name=os.getenv("AWS_SESSION_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18d113bed5870e8a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:173

            aws_profile_name=os.getenv("AWS_PROFILE_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b4d73dd9f597ece — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:174

            aws_role_name=os.getenv("AWS_ROLE_NAME", os.getenv("AWS_ROLE_ARN")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99fe603088d2ae33 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:175

            aws_web_identity_token=os.getenv(
                "AWS_WEB_IDENTITY_TOKEN", os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")
            ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4aebf80f8b96745 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:176

                "AWS_WEB_IDENTITY_TOKEN", os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c88f4548b063593e — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/client/cli/commands/auth.py:22

    with open(token_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50cdc3e00ed23e01 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/client/cli/commands/auth.py:34

        with open(token_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d404583b5dbe6a22 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/client/cli/commands/models.py:364

    with open(yaml_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf99648a25521e54 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/debug_utils.py:52

if os.environ.get("LITELLM_PROFILE", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b74acd18f82f2e3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/debug_utils.py:246

            litellm_log_setting = os.environ.get("LITELLM_LOG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6473dbd3df49f9d4 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/encrypt_decrypt_utils.py:11

    salt_key = os.getenv("LITELLM_SALT_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d995bf146de2026c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/html_forms/ui_login.py:3

url_to_redirect_to = os.getenv("PROXY_BASE_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d25179682c24ac3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/html_forms/ui_login.py:4

server_root_path = os.getenv("SERVER_ROOT_PATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32565cac99e736ef — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/common_utils/load_config_utils.py:111

        with open(local_file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1614fda205dd5e0 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/common_utils/load_config_utils.py:158

        with open(local_file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c90d34e939bc1ab5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/check_migration.py:95

        db_url = os.getenv("DATABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87bbc2bb903eef19 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/db_spend_update_writer.py:332

        spend_logs_url: Optional[str] = os.getenv("SPEND_LOGS_URL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4d5588ef3089466 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/dynamo_db.py:69

        os.environ["AWS_ACCESS_KEY_ID"] = aws_access_key_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a98718d43f2ad20 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/dynamo_db.py:70

        os.environ["AWS_SECRET_ACCESS_KEY"] = aws_secret_access_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #975d89c9e4e59af1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/dynamo_db.py:71

        os.environ["AWS_SESSION_TOKEN"] = aws_session_token

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9d388d01c00995a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:67

            db_host = os.getenv("DATABASE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6dca74aee1842d8 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:68

            db_port = os.getenv("DATABASE_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4dcc094e07374aa0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:69

            db_user = os.getenv("DATABASE_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7804fe9059e7ff1e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:70

            db_name = os.getenv("DATABASE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67a22ae455b44fb3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:71

            db_schema = os.getenv("DATABASE_SCHEMA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69812edc6b95459a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:82

            os.environ["DATABASE_URL"] = _db_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #159e3b2d07c28d87 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:106

            db_url = os.getenv("DATABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bbacb0593118a64 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:204

        disable_updates = os.getenv("DISABLE_SCHEMA_UPDATE", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1e1f0bf7f522727 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/example_config_yaml/custom_auth.py:10

        modified_master_key = f"{os.getenv('LITELLM_MASTER_KEY')}-1234"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37f7d0700ce79361 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aim/aim.py:48

        self.api_key = api_key or os.environ.get("AIM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50e95cc02e605062 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aim/aim.py:56

            api_base or os.environ.get("AIM_API_BASE") or "https://api.aim.security"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb531104f5612dc9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aporia_ai/aporia_ai.py:48

        self.aporia_api_key = api_key or os.environ["APORIO_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd089610e16881b3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aporia_ai/aporia_ai.py:49

        self.aporia_api_base = api_base or os.environ["APORIO_API_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ea12b3fab771c50 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/guardrails_ai/guardrails_ai.py:74

            api_base or os.getenv("GUARDRAILS_AI_API_BASE") or "http://0.0.0.0:8000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcc02e530355a338 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lakera_ai.py:62

        self.lakera_api_key = api_key or os.environ["LAKERA_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c2320f240f038da — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lakera_ai_v2.py:53

        self.lakera_api_key = api_key or os.environ["LAKERA_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49e4001963d1a2f0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:52

        self.lasso_api_key = lasso_api_key or api_key or os.environ.get("LASSO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #089e204dab4ebfe7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:53

        self.user_id = user_id or os.environ.get("LASSO_USER_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a122bb0a69283e6b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:54

        self.conversation_id = conversation_id or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af12729ac0e5415a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:54

        self.conversation_id = conversation_id or os.environ.get(
            "LASSO_CONVERSATION_ID"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff7bdebe9701003d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:66

            api_base or os.getenv("LASSO_API_BASE") or "https://server.lasso.security"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #657ed4a9432804b3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:143

        self.api_key = api_key or os.environ.get("NOMA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad15e9f7ca3d0c37 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:144

        self.api_base = api_base or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e32a069e25ca49d0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:144

        self.api_base = api_base or os.environ.get(
            "NOMA_API_BASE", NomaGuardrail._DEFAULT_API_BASE
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1af377c914cf7a9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:147

        self.application_id = application_id or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26a78cce1c35ae03 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:147

        self.application_id = application_id or os.environ.get(
            "NOMA_APPLICATION_ID", "litellm"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5611255df3d55f5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:153

                os.environ.get("NOMA_MONITOR_MODE", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a4372281574e01f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:160

                os.environ.get("NOMA_BLOCK_FAILURES", "true").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a7b4fe64870e2a0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/openai/moderations.py:101

            os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c50de249377cd2f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pangea/pangea.py:78

        self.api_key = api_key or os.environ.get("PANGEA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5f6c0eb667ff608 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pangea/pangea.py:87

            or os.environ.get("PANGEA_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8361eaf875e33e1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/panw_prisma_airs/panw_prisma_airs.py:59

        self.api_key = api_key or os.getenv("PANW_PRISMA_AIRS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a6dfdd2560af4e3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/panw_prisma_airs/panw_prisma_airs.py:62

            or os.getenv("PANW_PRISMA_AIRS_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d408851ea8d0f316 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pillar/pillar.py:87

        self.api_key = api_key or os.environ.get("PILLAR_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b46c15f0336125d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pillar/pillar.py:96

        self.api_base = api_base or os.getenv("PILLAR_API_BASE") or self.BASE_API_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0543df1e647a3769 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pillar/pillar.py:99

        action = on_flagged_action or os.environ.get("PILLAR_ON_FLAGGED_ACTION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bde3eaae62a1be4 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/presidio.py:94

                with open(ad_hoc_recognizers, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42766aa162858a30 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/health_endpoints/_health_endpoints.py:268

                user_email=os.getenv("TEST_EMAIL_ADDRESS"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c694f3540584901 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/hooks/__init__.py:25

if os.getenv("EXPERIMENTAL_MULTI_INSTANCE_RATE_LIMITING", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ea97b05c88da5c1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/hooks/dynamic_rate_limiter.py:113

                if os.getenv("LITELLM_LICENSE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba26f72192ae2db9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/hooks/parallel_request_limiter_v3.py:115

        self.window_size = int(os.getenv("LITELLM_RATE_LIMIT_WINDOW_SIZE", 60))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d788be05b5e7cf8 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:94

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72ed31a0f03ee165 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:95

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #143136489d1d1775 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:96

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2491d7944e03e02f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:99

    _disable_ui_flag = os.getenv("DISABLE_ADMIN_UI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9381c3e8834d698a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:134

    ui_username = os.getenv("UI_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9414bf35beb61ae — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:197

    generic_user_id_attribute_name = os.getenv(
        "GENERIC_USER_ID_ATTRIBUTE", "preferred_username"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2745755aadffc8ef — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:200

    generic_user_display_name_attribute_name = os.getenv(
        "GENERIC_USER_DISPLAY_NAME_ATTRIBUTE", "sub"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb8524e4e38b711e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:203

    generic_user_email_attribute_name = os.getenv(
        "GENERIC_USER_EMAIL_ATTRIBUTE", "email"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e5d5aa8c1bff55d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:207

    generic_user_first_name_attribute_name = os.getenv(
        "GENERIC_USER_FIRST_NAME_ATTRIBUTE", "first_name"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #511e9cd6c7aa7f88 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:210

    generic_user_last_name_attribute_name = os.getenv(
        "GENERIC_USER_LAST_NAME_ATTRIBUTE", "last_name"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5405b3b1bffa790 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:214

    generic_provider_attribute_name = os.getenv(
        "GENERIC_USER_PROVIDER_ATTRIBUTE", "provider"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ecea245c4a617e0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:254

    generic_client_secret = os.getenv("GENERIC_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5748568d3632fa6b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:255

    generic_scope = os.getenv("GENERIC_SCOPE", "openid email profile").split(" ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9afe4df6ac30a8e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:256

    generic_authorization_endpoint = os.getenv("GENERIC_AUTHORIZATION_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a27586abd33cf31 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:257

    generic_token_endpoint = os.getenv("GENERIC_TOKEN_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0841ad63adef83d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:258

    generic_userinfo_endpoint = os.getenv("GENERIC_USERINFO_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1046aecc59a665b3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:260

        os.getenv("GENERIC_INCLUDE_CLIENT_ID", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5d2cc5d2bf92521 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:325

    additional_generic_sso_headers = os.getenv(
        "GENERIC_SSO_HEADERS", None
    )  # Comma-separated list of headers to add to the request - e.g. Authorization=Bearer <token>, Content-Type=application/json, etc.

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f396226b717944a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:525

    proxy_admin_id = os.getenv("PROXY_ADMIN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb46a556e28373ff — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:585

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d33070cfee0ebcf — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:586

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef9ca4302ae3c050 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:587

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee5b9ebc8a447275 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:796

    _proxy_base_url = os.getenv("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6da6639ce842cb4b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:797

    _logout_url = os.getenv("PROXY_LOGOUT_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2259ae385a5f6172 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:804

    if "PROXY_DEFAULT_TEAM_DISABLED" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #baf8e267d5fce471 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:805

        if os.environ["PROXY_DEFAULT_TEAM_DISABLED"].lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d1d2ea72ed7d7d6 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:849

            google_client_secret = os.getenv("GOOGLE_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7b55add7456328a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:871

            microsoft_client_secret = os.getenv("MICROSOFT_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b27821babfc26f4 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:872

            microsoft_tenant = os.getenv("MICROSOFT_TENANT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c51edf8c5ebba6c2 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:893

            generic_client_secret = os.getenv("GENERIC_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d26ec6e911b5f6d5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:894

            generic_scope = os.getenv("GENERIC_SCOPE", "openid email profile").split(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #591b95f8bd6586d3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:897

            generic_authorization_endpoint = os.getenv(
                "GENERIC_AUTHORIZATION_ENDPOINT", None
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8f9e31b8dd63612 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:900

            generic_token_endpoint = os.getenv("GENERIC_TOKEN_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6dceae49eac27fd2 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:901

            generic_userinfo_endpoint = os.getenv("GENERIC_USERINFO_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1acd340a3181263 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:955

                state = os.getenv("GENERIC_CLIENT_STATE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbc1b2e0cef12021 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1230

        if user_email is not None and os.getenv("ALLOWED_EMAIL_DOMAINS") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4151009db2618b2f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1232

            allowed_domains = os.getenv("ALLOWED_EMAIL_DOMAINS").split(",")  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7027c66940287217 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1245

            generic_user_role_attribute_name = os.getenv(
                "GENERIC_USER_ROLE_ATTRIBUTE", "role"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70ce7381d9ca8b9a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1446

        microsoft_client_secret = os.getenv("MICROSOFT_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c352fab997bedbc1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1447

        microsoft_tenant = os.getenv("MICROSOFT_TENANT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffa95ccd86ed4879 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1531

            service_principal_id = os.getenv("MICROSOFT_SERVICE_PRINCIPAL_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #986628cf13783f1d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1735

        google_client_secret = os.getenv("GOOGLE_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37fc43195c157fcd — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1772

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d0be45fa35afd10 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1773

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73b87a4215a927fc — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1774

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #076a820344114b2a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1846

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ab3cb7aa64dcc40 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1847

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec45ba379e5d8430 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1848

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0179dd7b802311d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1850

    redirect_url = os.getenv("PROXY_BASE_URL", str(request.base_url))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35a18f99e9c31898 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:175

    base_target_url = os.getenv("GEMINI_API_BASE") or "https://generativelanguage.googleapis.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae0137e062ab65d6 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:234

    base_target_url = os.getenv("COHERE_API_BASE") or "https://api.cohere.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7eb7cf57131946d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:363

    base_target_url = os.getenv("MISTRAL_API_BASE") or "https://api.mistral.ai"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9dd589f84ab8ad1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:430

    base_target_url = os.getenv("ANTHROPIC_API_BASE") or "https://api.anthropic.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c41b9306b8c875a8 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:1026

    base_target_url = os.getenv("OPENAI_API_BASE") or "https://api.openai.com/"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67d654dbdebbe1cb — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:24

litellm_mode = os.getenv("LITELLM_MODE", "DEV")  # "PRODUCTION", "DEV"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91f30ad58e7c8d3f — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:280

            with open(os.devnull, "w") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #310676445ab3c50a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:606

            db_host = os.getenv("DATABASE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4af76e461df28939 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:607

            db_port = os.getenv("DATABASE_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62fcc32bdf3ccdcb — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:608

            db_user = os.getenv("DATABASE_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0f28d17a46df554 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:609

            db_name = os.getenv("DATABASE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6efab615ec9ecdbc — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:610

            db_schema = os.getenv("DATABASE_SCHEMA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3a3b71af033cf93 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:621

            os.environ["DATABASE_URL"] = _db_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c29d859b74efe67 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:622

            os.environ["IAM_TOKEN_DB_AUTH"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c27d4c5f9a521d8a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:629

            os.getenv("USE_AWS_KMS", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #911652cb687a06e5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:630

            and os.getenv("USE_AWS_KMS") == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bd5603f006956e8 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:636

                os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc842f650af94ad0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:687

            if database_url is None and os.getenv("DATABASE_URL") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45e58cbc57f1c9b0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:693

                    os.environ["DATABASE_URL"] = database_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcd279a81c39e3f6 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:714

                os.environ["DATABASE_URL"] = database_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5609fb8e1a703490 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:717

        if config is None and os.getenv("DATABASE_URL") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8747c2d51c6d6889 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:723

                os.environ["DATABASE_URL"] = database_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fca1afe8dea5f96 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:735

            os.getenv("DATABASE_URL", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1ac443fc16a3e0a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:736

            or os.getenv("DIRECT_URL", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2a96500dafc37c7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:741

                if os.getenv("DATABASE_URL", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e95829af5a0642a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:749

                    os.environ["DATABASE_URL"] = modified_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #342fdc25746e6cbe — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:750

                if os.getenv("DIRECT_URL", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c98e7960cc754367 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:756

                    database_url = os.getenv("DIRECT_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8b3be7a44f7e3e9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:758

                    os.environ["DIRECT_URL"] = modified_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd73e68247a40ee0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:453

server_root_path = os.getenv("SERVER_ROOT_PATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad223ce7800ac808 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:459

global_max_parallel_request_retries_env: Optional[str] = os.getenv(
    "LITELLM_GLOBAL_MAX_PARALLEL_REQUEST_RETRIES"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #482c6b9075442a16 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:469

global_max_parallel_request_retry_timeout_env: Optional[str] = os.getenv(
    "LITELLM_GLOBAL_MAX_PARALLEL_REQUEST_RETRY_TIMEOUT"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47f0f29110ac4ff4 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:491

_title = os.getenv("DOCS_TITLE", "LiteLLM API") if premium_user else "LiteLLM API"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0cd6ddf1d93a63fa — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:493

    os.getenv(
        "DOCS_DESCRIPTION",
        f"Enterprise Edition \n\nProxy Server to call 100+ LLMs in the OpenAI format. {custom_swagger_message}\n\n{ui_message}",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3b522cb137168a9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:596

        elif os.environ.get("LITELLM_CONFIG_BUCKET_NAME") is not None and isinstance(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9d7cfaec7783081 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:767

if os.getenv("DOCS_FILTERED", "False") == "True" and premium_user:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29b70b5e900d0934 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:830

                    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b632efb1aca0157 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:845

                    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e427449b3c1f2622 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1064

        KVUri = os.getenv("AZURE_KEY_VAULT_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fb588d468f9689e — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1344

        with open(os.devnull, "w") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42e4b340c1a01f57 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1417

            with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5120090be51b4224 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1440

            with open(f"{file_path}", "r") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e14052cc50d16587 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1521

            with open(f"{user_config_file_path}", "w") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c55fcb9196f4ae95 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1634

        if os.environ.get("LITELLM_CONFIG_BUCKET_NAME") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8204fcf7eddd70ae — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1635

            bucket_name = os.environ.get("LITELLM_CONFIG_BUCKET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45a6bd22466f9ed8 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1636

            object_key = os.environ.get("LITELLM_CONFIG_BUCKET_OBJECT_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d73de9aa416deb77 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1637

            bucket_type = os.environ.get("LITELLM_CONFIG_BUCKET_TYPE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc65e0cf9a67f2c3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1719

                        os.environ[key] = resolved_secret_string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f25f6643564b1721 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1728

                    os.environ[key] = str(value)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eed34cc52c5e2e3b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1732

                _license_check.license_str = os.getenv("LITELLM_LICENSE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03a4954f5e753581 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:2169

                    v = os.getenv(_v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d7196a46ed32321 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:2652

                    os.environ[k] = decrypted_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fef6cb4d1be72ed4 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3236

    os.environ["WORKER_CONFIG"] = json.dumps(data)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5d14d254615816d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3262

    if os.getenv("LITELLM_DONT_SHOW_FEEDBACK_BOX", "").lower() != "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6534d54a5c1d039f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3293

        litellm_log_setting = os.environ.get("LITELLM_LOG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b08b6296777fcc7d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3333

        os.environ["AZURE_API_VERSION"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30950f4cd4aaf185 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3736

            if os.getenv("PROMETHEUS_URL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e06e6215b2eb88c5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7505

    ui_username = os.getenv("UI_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09f21f3b472af79c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7540

    ui_username = os.getenv("UI_USERNAME", "admin")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b734aeabbbf5b682 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7541

    ui_password = os.getenv("UI_PASSWORD", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39f421674514b7ea — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7587

            os.getenv("PROXY_ADMIN_ID", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be485d516342becf — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7588

            and os.environ["PROXY_ADMIN_ID"] == user_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7eea09e653368945 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7591

            key_user_id = os.getenv("PROXY_ADMIN_ID", litellm_proxy_admin_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76805cf78e4b02af — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7602

        if os.getenv("DATABASE_URL") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8c76691db59ea4f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7706

            if os.getenv("DATABASE_URL") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #097dfd9a4c7d7f9a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7977

    logo_path = os.getenv("UI_LOGO_PATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05e69240091dcf28 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7989

    logo_path = os.getenv("UI_LOGO_PATH", default_logo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bc57c72467c7d18 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:8000

            with open(cache_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b46a723ab7fc3bdc — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:8942

                    _value = os.getenv("SLACK_WEBHOOK_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38856a712b6e2377 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/spend_tracking/spend_management_endpoints.py:2159

            db_url = os.getenv("DATABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2417089c5aad4dc6 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:410

        return environment_variables.get(env_var_name) or os.getenv(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5ab7b5fcad4fbdd — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:510

            os.environ[env_var_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a68d2778db9857b1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:597

        os.environ["UI_LOGO_PATH"] = logo_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #909afdaf3ba3d6ba — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:604

        if "UI_LOGO_PATH" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fe27d8dbe0b8d75 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:605

            del os.environ["UI_LOGO_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b08b85f5ece1b988 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:668

    with open(file_path, "wb") as buffer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b220b2e178ff20b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:1095

        _proxy_base_url = os.getenv("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0219af07371d9654 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:1593

            os.getenv("IAM_TOKEN_DB_AUTH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5972d068bbda433a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:1716

            pg_schema = os.getenv("DATABASE_SCHEMA", "public")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60d310a3aa5bc08e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3043

    smtp_host = os.getenv("SMTP_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70bde19d005ae7ca — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3044

    smtp_port = int(os.getenv("SMTP_PORT", "587"))  # default to port 587

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fee0a046e9f4c7d7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3045

    smtp_username = os.getenv("SMTP_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #560ebbfe9f37c1b0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3046

    smtp_password = os.getenv("SMTP_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #362bea54e5897e3c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3047

    sender_email = os.getenv("SMTP_SENDER_EMAIL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f220f10c9cf31fc — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3078

            if os.getenv("SMTP_TLS", "True") != "False":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd16ea919d4ad378 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3185

                    base_url = os.getenv("SPEND_LOGS_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0307cc24d8c3b923 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3495

    if redoc_url := os.getenv("REDOC_URL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac960c6bb85c242b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3498

    if str_to_bool(os.getenv("NO_REDOC")) is True:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f27a140d7fb8619d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3512

    if docs_url := os.getenv("DOCS_URL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0338b4204316631e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3515

    if str_to_bool(os.getenv("NO_DOCS")) is True:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3861131c0068bbde — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3617

    return os.getenv("PROXY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0f0c7d37ffcf2b9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3627

    return os.getenv("SERVER_ROOT_PATH", "/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #818f5d06f951b90a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3669

    database_host = os.getenv("DATABASE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21c1614cb300b86f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3670

    database_username = os.getenv("DATABASE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43582d8348478a89 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3671

    database_password = os.getenv("DATABASE_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28935f0d3b05bb33 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3672

    database_name = os.getenv("DATABASE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd2e0d2d29c2e3c9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3724

            anthropic_api_key = os.getenv("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ac864a30ff16fd0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:95

        or os.getenv("LANGFUSE_HOST", "https://cloud.langfuse.com")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ceb8b0b69c558f67 — Environment-variable access.

pkgs/python/[email protected]/litellm/router.py:5181

                    params[param_key] = os.environ.get(env_name, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #108fabac0024c9b4 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:22

    if "AWS_REGION_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ab765d52f475f6e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:35

        kms_client = boto3.client("kms", region_name=os.getenv("AWS_REGION_NAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff769b7b41cbc065 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:56

        if "AWS_REGION_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cd11af54502d65c — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:62

        if os.getenv("LITELLM_LICENSE", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7842450188a4f0f — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:64

        elif os.getenv("LITELLM_SECRET_AWS_KMS_LITELLM_LICENSE", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da1ff159ff7ec6c3 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:80

            kms_client = boto3.client("kms", region_name=os.getenv("AWS_REGION_NAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7639f2d996af8b2e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:89

        encrypted_value = os.getenv(secret_name, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83f6a3e6bc2fbd11 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:132

    for k, v in os.environ.items():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #706c7a11cd5473da — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager_v2.py:42

        if "AWS_REGION_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04eee95e21ebe7b9 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager_v2.py:127

            return os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a34b95e5a5d0ef2f — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:40

            os.environ.get("AZURE_SCOPE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a8fef243ba43520 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:46

        or os.environ.get("AZURE_CREDENTIAL", AzureCredentialType.ClientSecretCredential)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29a5b8b622db5912 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:60

            client_id=os.environ["AZURE_CLIENT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29ac6bf36f34a7f2 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:61

            client_secret=os.environ["AZURE_CLIENT_SECRET"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b561f8c4b18cb2a — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:62

            tenant_id=os.environ["AZURE_TENANT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b4f9a4d0a085064 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:65

        credential = ManagedIdentityCredential(client_id=os.environ["AZURE_CLIENT_ID"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea00fba581d3fd5e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:67

        if os.getenv("AZURE_CERTIFICATE_PASSWORD"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79a0d8e21e93d1c6 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:69

                client_id=os.environ["AZURE_CLIENT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ac89cf5462cf90e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:70

                tenant_id=os.environ["AZURE_TENANT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef5c5c57a6b38f0d — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:71

                certificate_path=os.environ["AZURE_CERTIFICATE_PATH"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fc4ee7fd6be75eb — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:72

                password=os.environ["AZURE_CERTIFICATE_PASSWORD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #150fb456a52ab41b — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:76

                client_id=os.environ["AZURE_CLIENT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49a89337ac991985 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:77

                tenant_id=os.environ["AZURE_TENANT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a668bcf971d2405 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:78

                certificate_path=os.environ["AZURE_CERTIFICATE_PATH"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3aa2f8be7e11c2b — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_kms.py:19

    if "GOOGLE_APPLICATION_CREDENTIALS" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d65713837a749fb — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_kms.py:23

    if "GOOGLE_KMS_RESOURCE_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4618f07219c281c3 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_kms.py:41

        litellm._google_kms_resource_name = os.getenv("GOOGLE_KMS_RESOURCE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff1fcd314c897d12 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:32

        self.PROJECT_ID = os.environ.get("GOOGLE_SECRET_MANAGER_PROJECT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9efc6e37864da1ed — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:40

        _refresh_interval = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aac83c7d00850c6c — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:40

        _refresh_interval = os.environ.get(
            "GOOGLE_SECRET_MANAGER_REFRESH_INTERVAL", refresh_interval
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be6f502566251687 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:50

        _always_read_secret_manager = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6b64c9b3170095d — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:50

        _always_read_secret_manager = os.environ.get(
            "GOOGLE_SECRET_MANAGER_ALWAYS_READ_SECRET_MANAGER",
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3331a8a93fb48bb4 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:25

        self.vault_addr = os.getenv("HCP_VAULT_ADDR", "http://127.0.0.1:8200")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66514e5a35a4b0ac — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:26

        self.vault_token = os.getenv("HCP_VAULT_TOKEN", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2c378025c62d12f — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:28

        self.vault_namespace = os.getenv("HCP_VAULT_NAMESPACE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d864fef897b5cb0 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:31

        self.tls_cert_path = os.getenv("HCP_VAULT_CLIENT_CERT", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dde381b20f6dcbe — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:32

        self.tls_key_path = os.getenv("HCP_VAULT_CLIENT_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5cb774c9dfe1f9f — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:33

        self.vault_cert_role = os.getenv("HCP_VAULT_CERT_ROLE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82dc0f4425c7f864 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:43

        _refresh_interval = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c7b3ca5f22a7c89 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:43

        _refresh_interval = os.environ.get(
            "HCP_VAULT_REFRESH_INTERVAL", SECRET_MANAGER_REFRESH_INTERVAL
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27d9afaa68cbb023 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:130

            env_secret = os.getenv("CIRCLE_OIDC_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #232c6737eb9b0636 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:136

            env_secret = os.getenv("CIRCLE_OIDC_TOKEN_V2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #060cabea28a8587f — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:142

            actions_id_token_request_url = os.getenv("ACTIONS_ID_TOKEN_REQUEST_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afdb52e3e333d48e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:143

            actions_id_token_request_token = os.getenv("ACTIONS_ID_TOKEN_REQUEST_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fabffe0173643008 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:170

            azure_federated_token_file = os.getenv("AZURE_FEDERATED_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c8ca3dc032b95d8 — Filesystem access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:185

            with open(azure_federated_token_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5683a4e9224f9d72 — Filesystem access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:190

            with open(oidc_aud, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2115b25c4fe311e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:195

            oidc_token = os.getenv(oidc_aud)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f19c5af1aac0956 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:201

            token_file_path = os.getenv(oidc_aud)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f3b9ad1fd45beb7 — Filesystem access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:204

            with open(token_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #252fb129a752819b — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:235

                    encrypted_secret: Any = os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97e012c40bf47583 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:257

                    encrypted_value = os.getenv(secret_name, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da59455e89ec02df — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:302

                    secret = os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ee14e15d1487a2e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:309

                secret = os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e9719b61d2733c2 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:320

            secret = os.environ.get(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6f777f08eeaf68d — Environment-variable access.

pkgs/python/[email protected]/litellm/types/integrations/slack_alerting.py:51

            os.getenv(
                "SLACK_DAILY_REPORT_FREQUENCY",
                int(SlackAlertingArgsEnum.daily_report_frequency.value),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d4c7f0ec54b0494 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5216

    no_proxy = os.getenv("NO_PROXY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f631ad70127b540 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5268

            if "OPENAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed4ee095f397c2c8 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5274

                "AZURE_API_BASE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cc2e6509cc6a9a1 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5275

                and "AZURE_API_VERSION" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2af62fb8daa2bc8f — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5276

                and "AZURE_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeaf0997f398940e — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5284

            if "ANTHROPIC_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffc4472fcc3c1bb0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5289

            if "COHERE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffddf0b71d4b997b — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5294

            if "REPLICATE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd3d3488b3ff0015 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5299

            if "OPENROUTER_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6af96251897bbcfb — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5304

            if "VERCEL_AI_GATEWAY_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22fbd15dc94562bf — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5309

            if "DATAROBOT_API_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ae8c1191280c4ec — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5314

            if "VERTEXAI_PROJECT" in os.environ and "VERTEXAI_LOCATION" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f9a920235712281 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5319

            if "HUGGINGFACE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7673004905c7a756 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5324

            if "AI21_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6c8491739c35741 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5329

            if "TOGETHERAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b52ae418cd50cec — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5334

            if "ALEPH_ALPHA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d90801c83af81ee0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5339

            if "BASETEN_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a5c96b432f24da7 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5344

            if "NLP_CLOUD_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f99a7bc9b7b4d12 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5350

                "AWS_ACCESS_KEY_ID" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a59b1fdc5ec98ee4 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5351

                and "AWS_SECRET_ACCESS_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a80bfcb63cee1981 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5358

            if "OLLAMA_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #620370c9484bbbfb — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5363

            if "ANYSCALE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #099fded311ed08f6 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5368

            if "DEEPINFRA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0de4333e9a823b21 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5373

            if "FEATHERLESS_AI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b54dd971b65e16b — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5378

            if ("GOOGLE_API_KEY" in os.environ) or ("GEMINI_API_KEY" in os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36324d9d598b0229 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5384

            if "GROQ_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #170d5936dab08016 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5389

            if "NVIDIA_NIM_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38c89c03eb14a395 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5394

            if "CEREBRAS_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78a5b26e6f49dc74 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5399

            if "BASETEN_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7611c2f91a0e5010 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5404

            if "XAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22f0d276c5c9fb19 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5409

            if "AI21_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #540a3ccba990906e — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5414

            if "VOLCENGINE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #027473fff65dd5fd — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5422

            if "CODESTRAL_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7508178b09a815f4 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5427

            if "DEEPSEEK_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0792b3169812fd7a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5432

            if "MISTRAL_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d02929a88f6301d — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5437

            if "PALM_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67f8dc909028cb7e — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5442

            if "PERPLEXITYAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b4b5c131a2794a3 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5447

            if "VOYAGE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40a17d878f98073f — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5452

            if "INFINITY_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21fe245d1631cb15 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5458

                "FIREWORKS_AI_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b212a09cd54ac3ea — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5459

                or "FIREWORKS_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9810e98cd771d214 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5460

                or "FIREWORKSAI_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f85d702d68664bd7 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5461

                or "FIREWORKS_AI_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eba2210f0dd68b37 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5467

            if "CLOUDFLARE_API_KEY" in os.environ and (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6ee12f925a88f2f — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5468

                "CLOUDFLARE_ACCOUNT_ID" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #857f83bdc4ffeef0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5469

                or "CLOUDFLARE_API_BASE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #266a50072beb28e8 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5476

            if "NOVITA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e46a53fcef2a296 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5481

            if "NEBIUS_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ff63320672aadc9 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5486

            if "DASHSCOPE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #399bcc86168952e9 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5491

            if "MOONSHOT_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e6e47866c07abe1 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5503

            if "OPENAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3db211ed4ce947c — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5509

            if "ANTHROPIC_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeac3f35711704b2 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5515

            if "COHERE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #662f0b952e148fc4 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5521

            if "REPLICATE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58eb6bb4bb42ab01 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5527

            if "OPENROUTER_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e21d7fb81daf4e7 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5533

            if "VERCEL_AI_GATEWAY_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9be64a499a22ee44 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5539

            if "DATAROBOT_API_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #843675480dfc1fe9 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5549

            if "VERTEXAI_PROJECT" in os.environ and "VERTEXAI_LOCATION" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #055ce2aba1da5fe3 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5555

            if "HUGGINGFACE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60ea2ef40d539ded — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5561

            if "AI21_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c87937f6d59d0d2e — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5567

            if "TOGETHERAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #600fdd3943a116f5 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5573

            if "ALEPH_ALPHA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de6c8633978683e0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5579

            if "BASETEN_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #633b552b4b5dbb18 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5585

            if "NLP_CLOUD_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c70cba928102b775 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5590

            if "NOVITA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #baacb2305407aebb — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5595

            if "NEBIUS_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #431eff0d5e3dfe9f — Filesystem access.

pkgs/python/[email protected]/litellm/utils.py:5971

        with open(config_path, "r") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32af61e32a96aa01 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:6248

            for k, v in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c28cc531c02ca969 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:6312

    environ_keys = os.environ.keys()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mcp

python dependency

high pii_flow dependency Excluded from app score #81e5586dcb35e93d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:452 · flow /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:433 → /tmp/closeopen-9z5u4wk7/pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:452

        return httpx.Request("POST", token_url, data=refresh_data, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

expand_more 31 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #4c6ad652c9a48562 — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:72

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c7d339b85a4030da — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:281

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f69f52186ad87a81 — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:349

    scenario = os.environ.get("MCP_CONFORMANCE_SCENARIO")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a35f1e469d833f28 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/conformance-auth-client/mcp_conformance_auth_client/__init__.py:50

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #34a92ea0f679b1f1 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:343

    server_url = os.getenv("MCP_SERVER_PORT", 8000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #381e580af1ca353b — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:344

    transport_type = os.getenv("MCP_TRANSPORT_TYPE", "streamable-http")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6227b6b35581e51a — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:345

    client_metadata_url = os.getenv("MCP_CLIENT_METADATA_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d322654fdef17f7d — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:24

        self.api_key = os.getenv("LLM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ad478b99316a7de8 — Filesystem access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:45

        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #eb859327c4f68fc8 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:83

            env={**os.environ, **self.config["env"]} if self.config.get("env") else None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fdc2c7aab479e9e9 — Filesystem access.

pkgs/python/[email protected]/examples/fastmcp/icons_demo.py:14

icon_data = base64.standard_b64encode(icon_path.read_bytes()).decode()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b3af22a648321b02 — Environment-variable access.

pkgs/python/[email protected]/examples/fastmcp/memory.py:52

PROFILE_DIR = (Path.home() / ".fastmcp" / os.environ.get("USER", "anon") / "memory").resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #84735e01b2d13c40 — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/completion_client.py:17

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7a8b477677d174c2 — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/display_utilities.py:17

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #719f3ce232b6d3a8 — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/stdio_client.py:19

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4cf46d55c83e236f — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/binary_resources.py:9

    with open("logo.png", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d5cca032793b4568 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/embedded_resource_results.py:10

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #699095d65b003ce2 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/embedded_resource_results_binary.py:12

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #be86dc26337a9ceb — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/prompt_embedded_resources.py:11

    file_content = open(filename).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2f213e13735a87a7 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/tool_errors.py:27

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #50f27420e742db23 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:53

        code = file.read_text().rstrip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #725c8eb17560a9b7 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:109

    content = doc_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0b3999d441c87ce5 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:134

            doc_path.write_text(updated_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a93974e01fb1c190 — Environment-variable access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:24

        path = Path(os.environ.get("XDG_CONFIG_HOME", Path.home() / ".config"), "Claude")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8e1d72bcb13aca9 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:77

            config_file.write_text("{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b011abc8086167e7 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:88

        config = json.loads(config_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82f5352232e284a5 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:135

        config_file.write_text(json.dumps(config, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1be5101ab175396e — Environment-variable access.

pkgs/python/[email protected]/src/mcp/cli/cli.py:282

            env=dict(os.environ.items()),  # Convert to list of tuples for env update

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26c07997421a6c6b — Environment-variable access.

pkgs/python/[email protected]/src/mcp/client/stdio/__init__.py:59

        value = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cd5d2b017d1949b — Filesystem access.

pkgs/python/[email protected]/src/mcp/server/fastmcp/utilities/types.py:47

            with open(self.path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89cd1920f801f74f — Filesystem access.

pkgs/python/[email protected]/src/mcp/server/fastmcp/utilities/types.py:94

            with open(self.path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

rich

python dependency

medium telemetry dependency Excluded from app score #b5cbf366596b8e5d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/rich/progress.py:173

        yield from progress.track(
            sequence,
            total=total,
            completed=completed,
            description=description,
            update_period=update_period,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 22 low-confidence finding(s)

low env_fs dependency Excluded from app score #f630a3382a146d0a — Environment-variable access.

pkgs/python/[email protected]/rich/_unicode_data/__init__.py:67

        unicode_version = os.environ.get("UNICODE_VERSION", "latest")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be76682b8c60c68d — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:441

        self.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51a5101edce3cee2 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:612

    term.write_text("went back and wrapped to prev line")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #291338a86abe88f6 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:615

    term.write_text("we go up")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34c87dabe50bc1fd — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:618

    term.write_text("and down")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41ad7da5d221644c — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:623

    term.write_text("we went up and back 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b69f2e1449a2e77 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:628

    term.write_text("we went down and back 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa20d00a4e9d88ae — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:636

    term.write_text("The red arrow shows the cursor location, and direction of erase")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01e38f7a248c2652 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:646

    term.write_text("The red arrow shows the cursor location, and direction of erase")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efd2210a814b53bb — Filesystem access.

pkgs/python/[email protected]/rich/_windows_renderer.py:19

                term.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3726fa0103371e4a — Filesystem access.

pkgs/python/[email protected]/rich/_windows_renderer.py:28

                    term.write_text("\r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a7590739defce5e — Environment-variable access.

pkgs/python/[email protected]/rich/console.py:515

        or os.getenv("DATABRICKS_RUNTIME_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3fe5979c904c085 — Environment-variable access.

pkgs/python/[email protected]/rich/console.py:617

    _environ: Mapping[str, str] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d85ab43e25352f71 — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2241

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ade0b6e6a1d7acc4 — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2349

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffd4b0e7c26ecd91 — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2641

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a73873d12f0434bc — Environment-variable access.

pkgs/python/[email protected]/rich/diagnose.py:32

    env = {name: os.getenv(name) for name in env_names}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce20355c93c8121a — Filesystem access.

pkgs/python/[email protected]/rich/json.py:134

            json_data = Path(args.path).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac67d598c048d3b2 — Filesystem access.

pkgs/python/[email protected]/rich/markdown.py:777

        with open(args.path, encoding="utf-8") as markdown_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24dfa419eb6cbdb9 — Filesystem access.

pkgs/python/[email protected]/rich/progress.py:1373

        handle = io.open(file, "rb", buffering=buffering)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b15390a194ebb14 — Filesystem access.

pkgs/python/[email protected]/rich/syntax.py:360

        code = Path(path).read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7158024b0636bcf7 — Filesystem access.

pkgs/python/[email protected]/rich/theme.py:73

        with open(path, encoding=encoding) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

PyYAML

python dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #d1f923b4c3199532 — Environment-variable access.

pkgs/python/[email protected]/setup.py:72

os.environ['SETUPTOOLS_USE_DISTUTILS'] = 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdb2147141c7b9c6 — Environment-variable access.

pkgs/python/[email protected]/setup.py:81

if 'sdist' in sys.argv or os.environ.get('PYYAML_FORCE_CYTHON') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f993bf0c9aaa6f2 — Environment-variable access.

pkgs/python/[email protected]/setup.py:160

            with_ext = getattr(self, ext.attr_name) or os.environ.get('PYYAML_FORCE_{0}'.format(ext.feature_name.upper()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

httpx

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #7058550d535909a0 — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:34

        if trust_env and os.environ.get("SSL_CERT_FILE"):  # pragma: nocover

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1acf7fea83b4292f — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:35

            ctx = ssl.create_default_context(cafile=os.environ["SSL_CERT_FILE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87700a77f343126c — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:36

        elif trust_env and os.environ.get("SSL_CERT_DIR"):  # pragma: nocover

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #385d34600926c4ea — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:37

            ctx = ssl.create_default_context(capath=os.environ["SSL_CERT_DIR"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

loguru

python dependency

expand_more 9 low-confidence finding(s)

low env_fs dependency Excluded from app score #5b8ca6436f661e8c — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:25

        if "CI" in os.environ and any(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27fe2d0868fcc90d — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:26

            ci in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1035874b617a39b0 — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:30

        if "PYCHARM_HOSTED" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2ed40f7e7f9ca35 — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:32

        if os.name == "nt" and "TERM" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41a7642830610232 — Environment-variable access.

pkgs/python/[email protected]/loguru/_defaults.py:5

    if key not in environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da109408f6bcbaf3 — Environment-variable access.

pkgs/python/[email protected]/loguru/_defaults.py:8

    val = environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fb715fff3c87d9b — Filesystem access.

pkgs/python/[email protected]/loguru/_file_sink.py:53

        with open(path_in, "rb") as f_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #147c702d4347f5d5 — Filesystem access.

pkgs/python/[email protected]/loguru/_file_sink.py:226

        self._file = open(path, **self._kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c157665fbe09e66 — Filesystem access.

pkgs/python/[email protected]/loguru/_logger.py:1868

                with open(str(file)) as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

networkx

python dependency

expand_more 16 low-confidence finding(s)

low env_fs dependency Excluded from app score #68aabbe8d6e612b4 — Environment-variable access.

pkgs/python/[email protected]/doc/conf.py:96

os.environ["_NETWORKX_BUILDING_DOCS_"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c69743f3bb07d543 — Filesystem access.

pkgs/python/[email protected]/examples/external/javascript_force.py:27

json.dump(d, open("force/force.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #afcc0734bd1d287f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/graph/plot_football.py:24

sock = urllib.request.urlopen(url)  # open URL

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #32d94cba689b2f7e — Filesystem access.

pkgs/python/[email protected]/examples/graphviz_layout/plot_lanl_routes.py:22

        fh = open("lanl_routes.edgelist")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2d0bfd8de3f44f4f — Filesystem access.

pkgs/python/[email protected]/examples/subclass/plot_printgraph.py:28

            self.fh = open(file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e647883bcf62e252 — Environment-variable access.

pkgs/python/[email protected]/networkx/conftest.py:47

        backend = os.environ.get("NETWORKX_TEST_BACKEND")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee415d09e2655ed8 — Environment-variable access.

pkgs/python/[email protected]/networkx/conftest.py:71

            fallback_to_nx = os.environ.get("NETWORKX_FALLBACK_TO_NX")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3c9cbb00d2ff48b — Environment-variable access.

pkgs/python/[email protected]/networkx/lazy_imports.py:75

    if os.environ.get("EAGER_IMPORT", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5103db0ed16314f2 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:153

            os.environ.get("NETWORKX_CACHE_CONVERTED_GRAPHS", True)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60db5e990ae5d46d — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:155

        fallback_to_nx=bool(os.environ.get("NETWORKX_FALLBACK_TO_NX", False)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #087f9baf0de123af — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:157

            _comma_sep_to_list(os.environ.get("NETWORKX_WARNINGS_TO_IGNORE", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29df3affe0937b33 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:167

        for key, val in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43e4cd121b98235a — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:175

            os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #988bf0c647ca87ea — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:175

            os.environ.get(
                "NETWORKX_BACKEND_PRIORITY",
                os.environ.get("NETWORKX_AUTOMATIC_BACKENDS", ""),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6a231dc5d618e6c — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:177

                os.environ.get("NETWORKX_AUTOMATIC_BACKENDS", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #704dcb490ce5ae89 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:2152

if os.environ.get("_NETWORKX_BUILDING_DOCS_"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

psutil

python dependency

expand_more 27 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #555efe6e9a25a92d — Filesystem access.

pkgs/python/[email protected]/docs/conf.py:39

    with open(INIT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d028f44d3d6f979 — Environment-variable access.

pkgs/python/[email protected]/psutil/_common.py:34

PSUTIL_DEBUG = bool(os.getenv('PSUTIL_DEBUG'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b51f77d3058a81ee — Filesystem access.

pkgs/python/[email protected]/psutil/_common.py:682

    return open(fname, "rb", buffering=FILE_READ_BUFFER_SIZE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c5a18c36546b21c — Filesystem access.

pkgs/python/[email protected]/psutil/_common.py:692

    fobj = open(  # noqa: SIM115
        fname,
        buffering=FILE_READ_BUFFER_SIZE,
        encoding=ENCODING,
        errors=ENCODING_ERRS,
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03b8fd89afc2fdc5 — Environment-variable access.

pkgs/python/[email protected]/psutil/_psaix.py:375

        for path in os.environ["PATH"].split(":"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c34ca06d9383fad — Filesystem access.

pkgs/python/[email protected]/psutil/_psbsd.py:142

        with open('/proc/meminfo', 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0097e5d7a3c20bc — Filesystem access.

pkgs/python/[email protected]/psutil/_psbsd.py:276

        with open('/proc/stat', 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3854ac5033fbb26d — Environment-variable access.

pkgs/python/[email protected]/psutil/_pssunos.py:119

            f"PATH=/usr/sbin:/sbin:{os.environ['PATH']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5a89c4e1ffebc0c1 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/convert_readme.py:33

    with open(args.file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4283630026d8eefc — Filesystem access.

pkgs/python/[email protected]/scripts/internal/download_wheels.py:64

    with open(OUTFILE, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #232ad8d0197c26bf — Filesystem access.

pkgs/python/[email protected]/scripts/internal/download_wheels.py:87

        with open(os.path.expanduser(args.tokenfile)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6bde4cfa290491ad — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:98

    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #439af0bca5f16b81 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:113

    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #aa46abf98931cc46 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:134

    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #901cd0a438f789d7 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:164

    with open(fname, errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f2b7c13c097ee050 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:178

        with open(fname, errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2a8d7b1aa8b79d8e — Filesystem access.

pkgs/python/[email protected]/scripts/internal/git_pre_commit.py:156

    with open("MANIFEST.in", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #6117652e16c8e9be — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/scripts/internal/install_pip.py:34

        req = urlopen(URL, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #1ce139726a4cfdd5 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/print_announce.py:81

    with open(HISTORY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a784b84c5248733d — Environment-variable access.

pkgs/python/[email protected]/scripts/internal/print_downloads.py:42

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #d501232e0ead2e38 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/print_hashes.py:18

    with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f814b5f61c0d340f — Filesystem access.

pkgs/python/[email protected]/scripts/internal/purge_installation.py:56

                with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #efde5b5a79960759 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/purge_installation.py:64

                    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00540b1a72c7b5b0 — Environment-variable access.

pkgs/python/[email protected]/setup.py:46

        if "CIBUILDWHEEL" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b67fd340f4cbac1d — Filesystem access.

pkgs/python/[email protected]/setup.py:142

    with open(INIT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #011feaab9b3dcf9f — Environment-variable access.

pkgs/python/[email protected]/setup.py:258

        if os.getenv('CC'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bef468970ed3b90 — Environment-variable access.

pkgs/python/[email protected]/setup.py:259

            compiler.set_executable('compiler_so', os.getenv('CC'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydantic

python dependency

expand_more 9 low-confidence finding(s)

low env_fs dependency Excluded from app score #ed08399f5b7bac07 — Filesystem access.

pkgs/python/[email protected]/pydantic/deprecated/parse.py:71

    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf984e1c9571e64a — Environment-variable access.

pkgs/python/[email protected]/pydantic/json_schema.py:337

                if os.getenv('PYDANTIC_PRIVATE_ALLOW_UNHANDLED_SCHEMA_TYPES'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f93e04ec6c6e7b9 — Filesystem access.

pkgs/python/[email protected]/pydantic/mypy.py:1373

    with open(config_file, 'rb') as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e87768f7d9566407 — Environment-variable access.

pkgs/python/[email protected]/pydantic/plugin/_loader.py:27

    disabled_plugins = os.getenv('PYDANTIC_DISABLE_PLUGINS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7ad25d2cfc82f92 — Environment-variable access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:173

            env_vars: Mapping[str, Optional[str]] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0644764e87f2a99c — Environment-variable access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:175

            env_vars = {k.lower(): v for k, v in os.environ.items()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17a6adcd1b457b80 — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:307

                    secret_value = path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34485f315136f278 — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/mypy.py:948

    with open(config_file, read_mode) as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfb3489f55bffef6 — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/parse.py:57

    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

python-dotenv

python dependency

expand_more 11 low-confidence finding(s)

low env_fs dependency Excluded from app score #e8ba8a4ce1ab7151 — Filesystem access.

pkgs/python/[email protected]/src/dotenv/cli.py:76

        with open(path) as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84534fd1a1e2dde0 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/cli.py:194

        if v is not None and (override or k not in os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d886caa7b92cab50 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/cli.py:225

    cmd_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab5fc851cd18b05c — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:26

    if "PYTHON_DOTENV_DISABLED" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bae4a49ba831df47 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:28

    value = os.environ["PYTHON_DOTENV_DISABLED"].casefold()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c0460df4d8d762f — Filesystem access.

pkgs/python/[email protected]/src/dotenv/main.py:63

            with open(self.dotenv_path, encoding=self.encoding) as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b982727feb071095 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:105

            if k in os.environ and not self.override:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec551649b3eb29e2 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:108

                os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82314ed5712a5295 — Filesystem access.

pkgs/python/[email protected]/src/dotenv/main.py:148

        source: IO[str] = open(path, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90b3e7dd92d006ec — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:302

                env.update(os.environ)  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45812fcda3c58499 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:306

                env.update(os.environ)  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

requests

python dependency

expand_more 8 low-confidence finding(s)

low env_fs dependency Excluded from app score #ae571386e4a8477c — Environment-variable access.

pkgs/python/[email protected]/src/requests/sessions.py:857

                    os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #316f0bd5ebf0c276 — Environment-variable access.

pkgs/python/[email protected]/src/requests/sessions.py:858

                    or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a02007ac7d67880 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:239

    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e671f297fe5f45a5 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:798

        old_value = os.environ.get(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bea049232b8f7b2e — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:799

        os.environ[env_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bce969b039ebee29 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:805

                del os.environ[env_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ad26a34924ddc72 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:807

                os.environ[env_name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #912db362495f7427 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:820

        return os.environ.get(key) or os.environ.get(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

schedule

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #72cc2d036c1117e4 — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:29

os.environ["TZ"] = TZ_BERLIN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d45fb871f737d96a — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:80

        self.original_zone = os.environ.get("TZ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fae94d6a5fc4460 — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:82

            os.environ["TZ"] = self.zone

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #daf4312b2390ff5b — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:92

            os.environ["TZ"] = self.original_zone

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

setuptools

python dependency

expand_more 162 low-confidence finding(s)

low env_fs dependency Excluded from app score #01f51bde65ecb194 — Environment-variable access.

pkgs/python/[email protected]/_distutils_hack/__init__.py:49

    which = os.environ.get('SETUPTOOLS_USE_DISTUTILS', 'local')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c743c47f7568372 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/command/_framework_compat.py:22

    ensurepip = os.environ.get("ENSUREPIP_OPTIONS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65a8d08a3ee47209 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/bdist_rpm.py:555

                    with open(val) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93a6800c112392df — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/command/build_ext.py:800

                elif '_PYTHON_HOST_PLATFORM' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20f677611f57f4ab — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/build_scripts.py:105

            with open(outfile, "w", encoding=f.encoding) as outf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57cd3c2abc50eee6 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/config.py:104

        with open(filename, "w", encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #738dfb3cf6537110 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/config.py:191

        with open(out, encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c595f999aafe850c — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/config.py:348

    log.info(pathlib.Path(filename).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed87dc082773af26 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/install_egg_info.py:55

        with open(target, 'w', encoding='UTF-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37d95f8735738024 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/sdist.py:424

        with open(self.manifest, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da620b8d458ad9f6 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/sdist.py:434

        with open(self.manifest, encoding='utf-8') as lines:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #155b7eda54294ddb — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/cygwin.py:73

        self.cc = os.environ.get('CC', self.cc or 'gcc')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09fe4e73ffab23c0 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/cygwin.py:74

        self.cxx = os.environ.get('CXX', self.cxx or 'g++')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9ac07bea1ce6b55 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/cygwin.py:318

        config_h = pathlib.Path(fn).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b52d05a35c813743 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:82

    root = os.environ.get("ProgramFiles(x86)") or os.environ.get("ProgramFiles")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #287ea754f9bae296 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:151

    if os.getenv("DISTUTILS_USE_SDK"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57a2a1691e76f6e1 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:152

        return {key.lower(): value for key, value in os.environ.items()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3308722299958e8b — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:190

        paths = os.getenv('path').split(os.pathsep)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71667391c969f486 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:562

        env = dict(os.environ, PATH=self._paths)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90b341abc16e2a52 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/zos.py:114

            if (binary := os.environ.get(envvar, None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a39c05b577875616 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/debug.py:5

DEBUG = os.environ.get('DISTUTILS_DEBUG')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #835d94f4f0902026 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/dist.py:387

            yield pathlib.Path(os.getenv("DIST_EXTRA_CONFIG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd54023a88ace995 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/dist.py:1141

            self.read_pkg_file(open(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b823c0b90cf49bd3 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/dist.py:1216

        with open(
            os.path.join(base_dir, 'PKG-INFO'), 'w', encoding='UTF-8'
        ) as pkg_info:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f42f7f0848dc0a4f — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/file_util.py:28

            fsrc = open(src, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2ee543c4da68b00 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/file_util.py:39

            fdst = open(dst, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6808a84a0f46ac9b — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/file_util.py:227

    with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a94b5522c5f49f44 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/spawn.py:52

    return os.environ if env is None else env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #325e7fc3918b0ce4 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/spawn.py:111

        path = os.environ.get('PATH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ded1ea59db406bfb — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:48

if "_PYTHON_PROJECT_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e4a406a4dc6086b — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:49

    project_base = os.path.abspath(os.environ["_PYTHON_PROJECT_BASE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a62e6c702edcbdbb — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:330

        if 'CC' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0add75c15f0bf682 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:331

            newcc = os.environ['CC']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #094c75858ff92522 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:332

            if 'LDSHARED' not in os.environ and ldshared.startswith(cc):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4806d87964d7188 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:337

        cxx = os.environ.get('CXX', cxx)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b05853e513514a61 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:338

        ldshared = os.environ.get('LDSHARED', ldshared)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53c658e9042a48e7 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:339

        ldcxxshared = os.environ.get('LDCXXSHARED', ldcxxshared)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79251c9bb9837aa9 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:340

        cpp = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d27d7c793186e394 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:340

        cpp = os.environ.get(
            'CPP',
            cc + " -E",  # not always
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #485a5849ca63f627 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:347

        cflags = os.environ.get('CFLAGS', cflags)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17e79933e9797003 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:349

        cxxflags = os.environ.get('CXXFLAGS', cxxflags)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc9499cf31c9ca35 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:357

        ar = os.environ.get('AR', ar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49f5484458608bcc — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:359

        archiver = ar + ' ' + os.environ.get('ARFLAGS', ar_flags)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d6d82fc3b015661 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:376

        if 'RANLIB' in os.environ and compiler.executables.get('ranlib', None):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06623536e376c90a — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:377

            compiler.set_executables(ranlib=os.environ['RANLIB'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e2fe51578e18437 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:472

                elif n in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10a2ce61d196da36 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:474

                    item = os.environ[n]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0856877d9cc1177 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:597

    flags = os.environ.get(f'{type}FLAGS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a9be46a9102e213 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/text_file.py:118

        self.file = open(self.filename, errors=self.errors, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98ad7427acab11fb — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:57

        target = os.environ.get('VSCMD_ARG_TGT_ARCH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f98e32eaa728916 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:94

    env_ver = os.environ.get(MACOSX_VERSION_VAR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fd42e1689ee3de2 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:174

    if os.name == 'posix' and 'HOME' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a0ad272737ec257 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:178

            os.environ['HOME'] = pwd.getpwuid(os.getuid())[5]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2040f27660641909 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:184

    if 'PLAT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25d540b3cf5c0c2e — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:185

        os.environ['PLAT'] = get_platform()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc22db6c1cac90a5 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:199

    lookup = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1a5259408275de5 — Filesystem access.

pkgs/python/[email protected]/setuptools/_imp.py:65

            file = open(path, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f664f71aeed2257 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:80

    orig_pythonpath = os.environ.get('PYTHONPATH', nothing)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcc5eb5dcd477593 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:81

    current_pythonpath = os.environ.get('PYTHONPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28de6cf8c981d5d3 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:87

            os.environ['PYTHONPATH'] = new_path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4c1c06e381f0f97 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:91

            os.environ.pop('PYTHONPATH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02c956511b64173d — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:93

            os.environ['PYTHONPATH'] = orig_pythonpath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d62ab63081658020 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_scripts.py:49

        return os.environ.get('__PYVENV_LAUNCHER__', _default)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47dbff771dc68575 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_scripts.py:238

        launcher = os.environ.get('SETUPTOOLS_LAUNCHER', 'executable')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66a979ad337af704 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_scripts.py:245

        if ext not in os.environ['PATHEXT'].lower().split(';'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff5e405578ddd0f2 — Filesystem access.

pkgs/python/[email protected]/setuptools/_scripts.py:332

    return resources.files('setuptools').joinpath(launcher_fn).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7531598afcf3acf — Filesystem access.

pkgs/python/[email protected]/setuptools/_scripts.py:337

    return res.read_text(encoding='utf-8') % vars()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b12378b4e3f5cfba — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/autocommand/autoparse.py:330

        with open(filename_or_file, *args, **kwargs) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c0a71081900e187 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/backports/tarfile/__init__.py:2829

            t = open(fileobj=name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66d579c204a65427 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/backports/tarfile/__init__.py:2832

            t = open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b26562f3c7644593 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/backports/tarfile/__init__.py:2872

            with open(src, 'r') as tar:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45322ad3f04ce779 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:379

        return self.locate().read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aacf61df29f1fd6f — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:382

        return self.locate().read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c165306f4a3cdd29 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:527

            self.read_text('METADATA')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae2b241363c8d35e — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:528

            or self.read_text('PKG-INFO')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac3523bec62895e0 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:532

            or self.read_text('')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bacf2d189203478 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:567

        return EntryPoints._from_text_for(self.read_text('entry_points.txt'), self)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd42a7a021721c7c — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:616

        text = self.read_text('RECORD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fb29d73b539c6aa — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:630

        text = self.read_text('installed-files.txt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a99e10e7c0a88b35 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:659

        text = self.read_text('SOURCES.txt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #677d849e5ea51dd4 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:672

        source = self.read_text('requires.txt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c42c8fcb5cf2909e — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:723

            self.read_text(filename),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79aadc984a9818d1 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:1014

            return self._path.joinpath(filename).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8daf3b1e7514c534 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:1150

    return (dist.read_text('top_level.txt') or '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78e39c8ff2f3af65 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/jaraco/text/__init__.py:232

lorem_ipsum: str = (
    files(__name__).joinpath('Lorem ipsum.txt').read_text(encoding='utf-8')
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a09f57d32bac5a5b — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/jaraco/text/__init__.py:631

    with open(filename, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b682fec020e93e5 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/packaging/_manylinux.py:34

        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6567cc4246c12d6b — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/packaging/_musllinux.py:46

        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #508bec815f050cb0 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/__init__.py:31

    if os.getenv("ANDROID_DATA") == "/data" and os.getenv("ANDROID_ROOT") == "/system":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bfe246059a2a76d — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/__init__.py:32

        if os.getenv("SHELL") or os.getenv("PREFIX"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b37dcd0cc90c212 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:45

        path = os.environ.get("XDG_DATA_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e562306c013d864e — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:52

        path = os.environ.get("XDG_DATA_DIRS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d0cc7df7645a7bb — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:76

        path = os.environ.get("XDG_CONFIG_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1f865fb0c904aea — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:83

        path = os.environ.get("XDG_CONFIG_DIRS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d24756ce1833987a — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:107

        path = os.environ.get("XDG_CACHE_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eb2e23e5a5e3361 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:123

        path = os.environ.get("XDG_STATE_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea8561369787f800 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:177

        path = os.environ.get("XDG_RUNTIME_DIR", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a94ad0a58d4bb089 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:201

        path = os.environ.get("XDG_RUNTIME_DIR", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bec487278d7d21b6 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:238

        media_dir = os.environ.get(env_var, "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27eeca73c7597cef — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:157

    result = os.environ.get(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e01074358487089f — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:167

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Documents")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8dfb9e088bcb914d — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:170

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Downloads")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #453b7ec376ccefb9 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:173

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Pictures")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #671f36007ba81a26 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:176

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Videos")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #811482bd3153b786 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:179

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Music")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ae9483735cfcbe0 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_bdist_wheel.py:492

        with open(wheelfile_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #360ca00f3480c372 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_bdist_wheel.py:598

            with open(dependency_links_path, encoding="utf-8") as dependency_links_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e61a44ddf25462d — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_bdist_wheel.py:609

        with open(pkg_info_path, "w", encoding="utf-8") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ece546b523d858e — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:171

                        requires = path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7db70eedaf444e49 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:174

                        pkginfo = path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca08e9c043debb8e — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:184

                            path.read_bytes(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e2537489d52f2ed — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:190

                yield str(path.relative_to(self.path)), path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #109f7a04c1502534 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/pack.py:40

    with open(wheel_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #facf218510862bee — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/pack.py:60

            with open(wheel_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4d7a4201c325033 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_metadata.py:151

    with open(pkginfo_path, encoding="utf-8") as headers:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d83f7aa81016e67 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_metadata.py:160

        with open(requires_path, encoding="utf-8") as requires_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e2d274de032501f — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:293

    with open(path_to_lib, "rb") as lib_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb56d5c3635576fe — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:419

    if "MACOSX_DEPLOYMENT_TARGET" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cb06cfb437e425f — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:421

            int(x) for x in os.environ["MACOSX_DEPLOYMENT_TARGET"].split(".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a21ebfbfed3f44b8 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:474

        if "MACOSX_DEPLOYMENT_TARGET" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86dbc406c808b28a — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/wheelfile.py:53

    timestamp = int(os.environ.get("SOURCE_DATE_EPOCH", timestamp or time.time()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb20ccc155763a20 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/wheelfile.py:185

        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9e5392a40e1e03f — Filesystem access.

pkgs/python/[email protected]/setuptools/archive_util.py:133

            with open(target, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a6d17d2820110c7 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:71

    with open(pyfile, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b56bc84ad7ac192 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:212

            with open(native_libs, 'wt', encoding="utf-8") as libs_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17e2162947961558 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:363

            with open(fn, 'wt', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e489584def07b650 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:382

    f = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5574e6efcd9c273 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_wheel.py:475

        with open(wheelfile_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a243e6c3da37013 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_wheel.py:575

        with open(dependency_links_path, encoding="utf-8") as dependency_links_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6cefe4773977f04 — Environment-variable access.

pkgs/python/[email protected]/setuptools/command/build_ext.py:160

        so_ext = os.getenv('SETUPTOOLS_EXT_SUFFIX')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0915af26e5a7055 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/build_ext.py:354

        with open(stub_file, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e67ba1c9d5dc8672 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/build_py.py:192

            files = manifest.read_text(encoding="utf-8").splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #943a6b06d92b5b14 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/build_py.py:261

        with open(init_py, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #769c8981d00cfd2b — Environment-variable access.

pkgs/python/[email protected]/setuptools/command/easy_install.py:18

            sys_executable=os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ecf8da498607f8b — Environment-variable access.

pkgs/python/[email protected]/setuptools/command/easy_install.py:18

            sys_executable=os.environ.get(
                "__PYVENV_LAUNCHER__", os.path.normpath(sys.executable)
            ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45c1b0143c51601b — Filesystem access.

pkgs/python/[email protected]/setuptools/command/editable_wheel.py:601

        path1.write_text("file1", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed64e48edb3ac735 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/editable_wheel.py:604

            if path2.is_symlink() and path2.read_text(encoding="utf-8") == "file1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e780344f2fd28f6 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/egg_info.py:309

        f = open(filename, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f582d795ecdecdb — Filesystem access.

pkgs/python/[email protected]/setuptools/command/egg_info.py:671

    with open(filename, "wb") as f:  # always write POSIX-style manifest

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #676d3ef0ad903dda — Filesystem access.

pkgs/python/[email protected]/setuptools/command/install_scripts.py:64

        with open(target, "w" + mode, encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f551c250ed6d0606 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/sdist.py:195

        with open(self.manifest, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac22d8f5458a793d — Filesystem access.

pkgs/python/[email protected]/setuptools/command/sdist.py:205

        manifest = open(self.manifest, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b991459ca7fe3e6a — Filesystem access.

pkgs/python/[email protected]/setuptools/command/setopt.py:67

    with open(filename, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8c0214985af1709 — Environment-variable access.

pkgs/python/[email protected]/setuptools/config/_validate_pyproject/error_reporting.py:81

        debug_code = os.getenv("JSONSCHEMA_DEBUG_CODE_GENERATION", "false").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1e5e95f2b37d23e1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/setuptools/config/_validate_pyproject/formats.py:158

    with urlopen(url, context=context) as response:  # noqa: S310 (audit URLs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #0e291fa80d55eafb — Environment-variable access.

pkgs/python/[email protected]/setuptools/config/_validate_pyproject/formats.py:192

        if os.getenv("NO_NETWORK") or os.getenv("VALIDATE_PYPROJECT_NO_NETWORK"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c50333dc4407190 — Filesystem access.

pkgs/python/[email protected]/setuptools/config/expand.py:57

        module = ast.parse(pathlib.Path(spec.origin).read_bytes())  # type: ignore[arg-type] # Let it raise an error on None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4b0617e7aa9b805 — Filesystem access.

pkgs/python/[email protected]/setuptools/config/expand.py:142

    with open(filepath, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd6d3097730151c7 — Filesystem access.

pkgs/python/[email protected]/setuptools/config/pyprojecttoml.py:39

    with open(filepath, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02c684c4a31ec602 — Filesystem access.

pkgs/python/[email protected]/setuptools/dist.py:586

            with open(filename, encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b45aaada78013568 — Filesystem access.

pkgs/python/[email protected]/setuptools/dist.py:820

            with open(readme_txt_filename, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b0e5f3aed5c069b — Environment-variable access.

pkgs/python/[email protected]/setuptools/installer.py:82

    quiet = 'PIP_QUIET' not in os.environ and 'PIP_VERBOSE' not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaef9b8f5d49433a — Environment-variable access.

pkgs/python/[email protected]/setuptools/installer.py:83

    if 'PIP_INDEX_URL' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #540a4c1edeed63c5 — Filesystem access.

pkgs/python/[email protected]/setuptools/msvc.py:462

                with open(state_path, 'rt', encoding='utf-8') as state_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef31d8f23a995a03 — Filesystem access.

pkgs/python/[email protected]/setuptools/namespaces.py:23

        with open(filename, 'wt', encoding=py312.PTH_ENCODING) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c859ff365c08c79 — Filesystem access.

pkgs/python/[email protected]/setuptools/unicode_utils.py:73

        with open(file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a82a78f7002f0391 — Filesystem access.

pkgs/python/[email protected]/setuptools/unicode_utils.py:77

        with open(file, "r", encoding=fallback_encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4c7f3075b761654 — Environment-variable access.

pkgs/python/[email protected]/setuptools/warnings.py:109

    enforce = os.getenv("SETUPTOOLS_ENFORCE_DEPRECATION", "false").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8afbdc510c2f6d63 — Filesystem access.

pkgs/python/[email protected]/setuptools/wheel.py:261

                    with open(mod_init, 'w', encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #2e4893d985756fd9 — Environment-variable access.

pkgs/python/[email protected]/tools/build_launchers.py:102

        os.environ['ProgramFiles(x86)'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #1b863695775da7e5 — Filesystem access.

pkgs/python/[email protected]/tools/finalize.py:39

    changelog = changelog_fn.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #49002971e08efc61 — Filesystem access.

pkgs/python/[email protected]/tools/finalize.py:41

    changelog_fn.write_text(fixed, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

toml

python dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #706300cc9556710e — Filesystem access.

pkgs/python/[email protected]/setup.py:8

with open("README.rst") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f314c275ef69187 — Filesystem access.

pkgs/python/[email protected]/toml/decoder.py:133

        with io.open(_getpath(f), encoding='utf-8') as ffile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

asyncio prod — no python source in sdist

verified_user Application data leak confirmed

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Confirmed data exfiltration in application code

</> First-Party Code

first-party (python)

</> Dependencies

litellm

mcp

rich

PyYAML

httpx

loguru

networkx

psutil

pydantic

python-dotenv

requests

schedule

setuptools

toml

Skipped dependencies