Close Open Privacy Scan

link https://github.com/google-gemini/gemini-cli

bolt Snapshot: commit 9681621

science engine v1.22

schedule 2026-07-23T04:17:17.786397+00:00

App Privacy Score

67 /100

Medium privacy risk — possible application leak

Medium risk · 5611 finding(s)

Dependency score: 22 (High risk)

bar_chart Score Breakdown

egress −15

pii_flow −15

env_fs −3

list Scan Summary

1 high 79 medium 5531 low

First-party packages: 8

Dependency packages: 26

Ecosystem: npm

swap_horiz Potential data exfiltration in application code

External domains: accounts.google.comai.google.devaiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comaistudio.google.comantigravity.googleapi.github.comapi.themoviedb.orgautopush-generativelanguage.sandbox.googleapis.comcloud.google.comcloudcode-pa.googleapis.comcode.visualstudio.comcodeassist.google.comdevelopers.google.comdotenvx.comelinux.orgemscripten.orggeminicli.comgenerativelanguage.googleapis.comgithub.comgoo.glegoogle.comhuggingface.coiamcredentials.googleapis.comimage.tmdb.orgjson-schema.orglearn.microsoft.commarketplace.visualstudio.comnews.google.comone.google.complay.googleapis.compolicies.google.compositron.posit.copptr.devraw.githubusercontent.comtermux.comwww.googleapis.comwww.raspberrypi.orgwww.w3.orgwww.youtube.com

medium first-party (npm): packages/core PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

repo/packages/core/src/code_assist/oauth2.ts:714 → repo/packages/core/src/code_assist/oauth2.ts:730

hub Dependency data flows (79)

high @a2a-js/sdk dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:82 → pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:85

medium winston dependency Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/winston/transports/http.js:249 → pkgs/npm/[email protected]/lib/winston/transports/http.js:242

medium @a2a-js/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:75

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:95

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:117

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:130

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:25

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:147

medium @google/gemini-cli-core dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:676 → pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:691

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:83

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:87

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:91

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:104

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:136

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:139

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:170

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:196

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:208

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:241

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:254

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:265

medium @google/gemini-cli-core tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:324

</> First-Party Code

first-party (npm): packages/core

npm first-party

medium pii_flow production #197e4fa66e21b037 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

repo/packages/core/src/code_assist/oauth2.ts:730 · flow /tmp/closeopen-i7n3rxzg/repo/packages/core/src/code_assist/oauth2.ts:714 → /tmp/closeopen-i7n3rxzg/repo/packages/core/src/code_assist/oauth2.ts:730

      debugLogger.debug(
        `Failed to load credentials from ${keyFile}:`,
        getErrorMessage(error),
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 1123 low-confidence finding(s)

low env_fs test-only Excluded from app score #bc47a981dac72477 — Filesystem access.

repo/packages/core/scripts/bundle-browser-mcp.mjs:12

const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b07176c7eed9739 — Environment-variable access.

repo/packages/core/scripts/compile-windows-sandbox.js:54

  const systemRoot = process.env['SystemRoot'] || 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #5d97271bc75494c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/agents/a2a-client-manager.ts:77

      fetch(input, { ...init, dispatcher: this.a2aDispatcher } as RequestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #a88f5422a3d71a48 — Environment-variable access.

repo/packages/core/src/agents/acknowledgedAgents.test.ts:23

    originalGeminiCliHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #62fb155af37e58f8 — Environment-variable access.

repo/packages/core/src/agents/acknowledgedAgents.test.ts:24

    process.env['GEMINI_CLI_HOME'] = tempDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4558e9635a6d970d — Environment-variable access.

repo/packages/core/src/agents/acknowledgedAgents.test.ts:30

      process.env['GEMINI_CLI_HOME'] = originalGeminiCliHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fcd9f0c0607279aa — Environment-variable access.

repo/packages/core/src/agents/acknowledgedAgents.test.ts:32

      delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #744d8be43a4011c3 — Filesystem access.

repo/packages/core/src/agents/acknowledgedAgents.test.ts:46

    const content = await fs.readFile(ackPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #df3ced67567d4681 — Filesystem access.

repo/packages/core/src/agents/acknowledgedAgents.test.ts:76

    await fs.writeFile(ackPath, JSON.stringify(data), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed0448027a1b38fb — Filesystem access.

repo/packages/core/src/agents/acknowledgedAgents.ts:29

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8aa8102ae5431085 — Filesystem access.

repo/packages/core/src/agents/acknowledgedAgents.ts:50

      await fs.writeFile(
        filePath,
        JSON.stringify(this.acknowledgedAgents, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #da2c4677fdaf55fb — Filesystem access.

repo/packages/core/src/agents/agentLoader.test.ts:42

    await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be9dad867f593e90 — Filesystem access.

repo/packages/core/src/agents/agentLoader.test.ts:677

      await fs.writeFile(path.join(tempDir, 'other.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9cdde06636269e14 — Filesystem access.

repo/packages/core/src/agents/agentLoader.ts:338

      fileContent = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57cbc4d57e854a84 — Filesystem access.

repo/packages/core/src/agents/agentLoader.ts:675

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #68d1dd9117b990bb — Environment-variable access.

repo/packages/core/src/agents/auth-provider/http-provider.test.ts:30

      process.env['TEST_TOKEN'] = 'env-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c168a8e4045c6ff8 — Environment-variable access.

repo/packages/core/src/agents/auth-provider/http-provider.test.ts:41

      delete process.env['TEST_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #74b0bb75aba00c28 — Environment-variable access.

repo/packages/core/src/agents/auth-provider/http-provider.test.ts:99

      process.env['DYNAMIC_TOKEN'] = 'first';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8ae20db0610c18c8 — Environment-variable access.

repo/packages/core/src/agents/auth-provider/http-provider.test.ts:103

      process.env['DYNAMIC_TOKEN'] = 'second';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cd0734cde8e7d46f — Environment-variable access.

repo/packages/core/src/agents/auth-provider/http-provider.test.ts:111

      delete process.env['DYNAMIC_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3e9e3585bf41a34 — Environment-variable access.

repo/packages/core/src/agents/auth-provider/value-resolver.ts:36

    const resolved = process.env[envVar];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7df0de12fc0e6e6 — Environment-variable access.

repo/packages/core/src/agents/browser/browserManager.ts:586

    const sandboxType = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e32aaad2743598d — Environment-variable access.

repo/packages/core/src/agents/registry.ts:296

      const sandboxType = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab368394f45ee711 — Environment-variable access.

repo/packages/core/src/agents/registry_acknowledgement.test.ts:53

    originalGeminiCliHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c914ac9ce81af3c3 — Environment-variable access.

repo/packages/core/src/agents/registry_acknowledgement.test.ts:54

    process.env['GEMINI_CLI_HOME'] = tempDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cdca214469fd9b4d — Environment-variable access.

repo/packages/core/src/agents/registry_acknowledgement.test.ts:97

      process.env['GEMINI_CLI_HOME'] = originalGeminiCliHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1785b0480ea2f68e — Environment-variable access.

repo/packages/core/src/agents/registry_acknowledgement.test.ts:99

      delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f2bd3f136d61cac2 — Environment-variable access.

repo/packages/core/src/code_assist/experiments/client_metadata.test.ts:27

  const originalCliVersion = process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e864b0c1a5a121db — Environment-variable access.

repo/packages/core/src/code_assist/experiments/client_metadata.test.ts:44

    process.env['CLI_VERSION'] = originalCliVersion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f598c9d67fa994a — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments.test.ts:22

    delete process.env['GEMINI_EXP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5e9dafe4a693dfd — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments.ts:33

    if (process.env['GEMINI_EXP']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbbb08279e29ea45 — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments.ts:35

        const expPath = process.env['GEMINI_EXP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c5add9b4bdefb71 — Filesystem access.

repo/packages/core/src/code_assist/experiments/experiments.ts:37

        const content = await fs.promises.readFile(expPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4422a2e1f3f18aa3 — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments_local.test.ts:38

    process.env['GEMINI_EXP'] = ''; // Clear env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3903360aea2de915 — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments_local.test.ts:48

    delete process.env['GEMINI_EXP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1d4856934e97bc22 — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments_local.test.ts:52

    process.env['GEMINI_EXP'] = '/tmp/experiments.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e2560de66e5c198 — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments_local.test.ts:75

    process.env['GEMINI_EXP'] = '/tmp/missing.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e10de9dd0e87544c — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments_local.test.ts:101

    process.env['GEMINI_EXP'] = '/tmp/experiments.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab42be9d02175562 — Environment-variable access.

repo/packages/core/src/code_assist/experiments/experiments_local.test.ts:125

    process.env['GEMINI_EXP'] = '/tmp/invalid.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73e2fded1ddd2667 — Filesystem access.

repo/packages/core/src/code_assist/oauth-credential-storage.ts:117

      credsJson = await fs.readFile(oldFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #040b5d1710945f74 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.test.ts:137

      process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dbbf9c06dbd898fc — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:271

      const cachedGoogleAccount = fs.readFileSync(googleAccountPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d3bab15244a24c84 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:289

      await fs.promises.writeFile(credsPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d96c2c4b22dd3081 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:300

      await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #445af9011d307745 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:482

        const cachedGoogleAccount = fs.readFileSync(googleAccountPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #14df624b428f7053 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:515

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8045ea1fc1582415 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:588

        await fs.promises.writeFile(
          defaultCredsPath,
          JSON.stringify(defaultCreds),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4c0e77c2007da175 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:596

        await fs.promises.writeFile(envCredsPath, JSON.stringify(envCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #466f01b5c63ceb0c — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:620

        await fs.promises.writeFile(envCredsPath, JSON.stringify(envCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #686ac7425faafacf — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:646

        await fs.promises.writeFile(
          envCredsPath,
          JSON.stringify(byoidCredentials),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #90432f45af81234d — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:695

        await fs.promises.writeFile(
          defaultCredsPath,
          JSON.stringify(defaultCreds),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #363f2e2ca1911c47 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:703

        await fs.promises.writeFile(envCredsPath, JSON.stringify(envCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b115220a901c290 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:794

        const cachedContent = fs.readFileSync(googleAccountPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1f2b180986e73e2a — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:825

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e5e81e968b5ec21 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:858

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aa48dd1c621bb5ad — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:1596

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #daeb8ea76549d2c8 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:1604

        await fs.promises.writeFile(
          googleAccountPath,
          JSON.stringify(accountData),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dc3ca941abb347a0 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:1620

          fs.readFileSync(googleAccountPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c6e001f7a3eebc84 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:1647

        await fs.promises.writeFile(
          credsPath,
          JSON.stringify({ refresh_token: 'token' }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2039da0f08caec4f — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.test.ts:1672

      process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #637ffd51b7274548 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:1803

      await fs.promises.writeFile(credsPath, JSON.stringify(unencryptedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #df9697f8522dbac2 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.test.ts:1835

      await fs.promises.writeFile(credsPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1d123db4496c604 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:64

      process.env['GOOGLE_CLOUD_QUOTA_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #63a45a35e5641bf5 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:65

      process.env['GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5ca3880c629eea4 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:66

      process.env['GOOGLE_CLOUD_PROJECT_ID'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c0306f25e159dff — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:113

  return process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e76b1fd509520363 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:158

    process.env['GOOGLE_GENAI_USE_GCA'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb0793108a04cb14 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:159

    process.env['GOOGLE_CLOUD_ACCESS_TOKEN']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5abd4ab2c529c38 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:163

      access_token: process.env['GOOGLE_CLOUD_ACCESS_TOKEN'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bbdca20ce428444b — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:538

  const host = process.env['OAUTH_CALLBACK_HOST'] || '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52a444b347869e63 — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:664

      const portStr = process.env['OAUTH_CALLBACK_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d0a9720f36522ba — Environment-variable access.

repo/packages/core/src/code_assist/oauth2.ts:714

    process.env['GOOGLE_APPLICATION_CREDENTIALS'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31980487f4c9e30c — Filesystem access.

repo/packages/core/src/code_assist/oauth2.ts:719

      const keyFileString = await fs.readFile(keyFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #8bf63a914082ef8e — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/code_assist/oauth2.ts:768

    const response = await fetch(
      'https://www.googleapis.com/oauth2/v2/userinfo',
      {
        headers: {
          Authorization: `Bearer ${token}`,
        },
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #01256e3893d44190 — Filesystem access.

repo/packages/core/src/code_assist/oauth2.ts:804

  await fs.writeFile(filePath, credString, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #58293b3a021f6399 — Environment-variable access.

repo/packages/core/src/code_assist/server.test.ts:358

      process.env['CODE_ASSIST_ENDPOINT'] = 'https://custom-endpoint.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f5cd194d5c8dbcb8 — Environment-variable access.

repo/packages/core/src/code_assist/server.test.ts:365

      process.env['CODE_ASSIST_API_VERSION'] = 'v2beta';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6f3b1aa9fc99fcc9 — Environment-variable access.

repo/packages/core/src/code_assist/server.test.ts:372

      process.env['CODE_ASSIST_API_VERSION'] = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79c7659996b18bd1 — Environment-variable access.

repo/packages/core/src/code_assist/server.ts:522

      process.env['CODE_ASSIST_ENDPOINT'] ?? CODE_ASSIST_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ddfc13a1362ce77 — Environment-variable access.

repo/packages/core/src/code_assist/server.ts:524

      process.env['CODE_ASSIST_API_VERSION'] || CODE_ASSIST_API_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f98a06c923500577 — Environment-variable access.

repo/packages/core/src/code_assist/setup.ts:130

    process.env['GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #838e427efc4ba12e — Environment-variable access.

repo/packages/core/src/code_assist/setup.ts:131

    process.env['GOOGLE_CLOUD_PROJECT_ID'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #72175562503d8420 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:185

      await fs.writeFile(
        path.join(dir, 'SKILL.md'),
        `---\nname: ${name}\ndescription: ${description}\n---\nBody content here\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5efb11b04154039d — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:229

      await fs.writeFile(
        path.join(memoryTempDir, '.extraction-state.json'),
        stateContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf2fde35364b37e3 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:362

      await fs.writeFile(target, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e7528060151755a2 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:366

      await fs.writeFile(
        path.join(patchDir, 'a-update.patch'),
        buildUpdatePatch(target, '- old\n', '- new\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e7690ee52c2a245c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:372

      await fs.writeFile(sibling, 'topic A\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6b8fbb61ac00a2ac — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:373

      await fs.writeFile(
        path.join(patchDir, 'b-topic.patch'),
        buildUpdatePatch(sibling, 'topic A\n', 'topic B\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65fd8663ce2fdee7 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:405

      await fs.writeFile(
        path.join(patchDir, 'escape.patch'),
        buildCreationPatch(path.join(projectRoot, 'GEMINI.md'), 'Hi.\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #37dd5d7997df2a06 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:443

        await fs.writeFile(
          path.join(patchDir, fileName),
          buildCreationPatch(targetPath, 'rejected\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #069ca823c2800c8b — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:472

      await fs.writeFile(
        path.join(patchDir, 'wrong-name.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'memory.md'),
          'rejected\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #69db9e1820a87218 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:479

      await fs.writeFile(
        path.join(patchDir, 'sibling.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'notes.md'),
          'rejected\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88cecc4a91274124 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:486

      await fs.writeFile(
        path.join(patchDir, 'settings.patch'),
        buildCreationPatch(path.join(globalMemoryDir, 'settings.json'), '{}\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d01371ae1a105fa — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:490

      await fs.writeFile(
        path.join(patchDir, 'nested.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'GEMINI.md', 'nested.md'),
          'rejected\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3720074afcea61ed — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:504

      await fs.writeFile(target, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #64b8b3eb812f47a3 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:508

      await fs.writeFile(
        path.join(patchDir, 'MEMORY.patch'),
        buildUpdatePatch(target, '- old\n', '- accepted\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b6ec50ead9c06727 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:520

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe('- accepted\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c130e35bb48eb0c3 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:530

        await fs.writeFile(target, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7770f4e6a940cb3b — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:534

        await fs.writeFile(
          path.join(patchDir, 'MEMORY.patch'),
          buildUpdatePatch(
            swapAsciiPathCase(target),
            '- old\n',
            '- accepted\n',
          ),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8350aafff9c3d5a9 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:553

        await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a04eea1d6b2e2c9d — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:564

      await fs.writeFile(memoryMd, '# Project Memory\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #13f2d7f9e397220f — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:578

      await fs.writeFile(path.join(patchDir, 'topic.patch'), multiHunkPatch);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f6ee77411252fd79 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:587

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc7d250db7323d4c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:590

      await expect(fs.readFile(memoryMd, 'utf-8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf4fd2236d575c04 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:603

      await fs.writeFile(memoryMd, '# Project Memory\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #12556d473c215cda — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:608

      await fs.writeFile(
        path.join(patchDir, 'orphan-topic.patch'),
        buildCreationPatch(target, '# Orphan Topic\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c54795e6315d1cc5 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:623

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9aa4fc93b1dbc5bc — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:632

      const memoryAfter = await fs.readFile(memoryMd, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c00f884561d7810 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:654

      await fs.writeFile(
        path.join(patchDir, 'fresh-topic.patch'),
        buildCreationPatch(target, '# Fresh Topic\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d16f59ff5883269d — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:667

      const memoryAfter = await fs.readFile(memoryMd, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #54ab230aff943873 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:677

      await fs.writeFile(
        memoryMd,
        '# Project Memory\n- See later-topic.md for details.\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1629f36b43f13339 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:685

      await fs.writeFile(
        path.join(patchDir, 'later-topic.patch'),
        buildCreationPatch(target, '# Later Topic\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e173b891ae39f50 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:697

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c7f80689a654450 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:709

      await fs.writeFile(
        path.join(patchDir, 'GEMINI.patch'),
        buildCreationPatch(target, '# Personal preferences\n- prefer X\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f56d8fe07a0ef5b8 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:721

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #11a61d843864d108 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:731

      await fs.writeFile(target, '- prefer X\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e66c991e9e10504a — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:735

      await fs.writeFile(
        path.join(patchDir, 'GEMINI.patch'),
        buildUpdatePatch(target, '- prefer X\n', '- prefer Y\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #68e2f7d571d9f8f7 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:747

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe('- prefer Y\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1565261f295a3b30 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:757

        await fs.writeFile(target, '- prefer X\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d23e149b3c1387d — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:761

        await fs.writeFile(
          path.join(patchDir, 'GEMINI.patch'),
          buildUpdatePatch(
            swapAsciiPathCase(target),
            '- prefer X\n',
            '- prefer Y\n',
          ),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #667a869750ca0d8b — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:780

        await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dc128bc543c0ed46 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:789

      await fs.writeFile(
        path.join(patchDir, 'GEMINI.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'GEMINI.md'),
          'Prefer concise.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #07138dcf2f4fae8c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:814

      await fs.writeFile(memoryMd, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ed0da531c0f9f5d9 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:816

      await fs.writeFile(sibling, 'topic A\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c2bb7249b972342b — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:820

      await fs.writeFile(
        path.join(patchDir, 'a-update.patch'),
        buildUpdatePatch(memoryMd, '- old\n', '- new\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #befb6470026bbe95 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:824

      await fs.writeFile(
        path.join(patchDir, 'b-topic.patch'),
        buildUpdatePatch(sibling, 'topic A\n', 'topic B\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0627f8f550833a44 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:839

      await expect(fs.readFile(memoryMd, 'utf-8')).resolves.toBe('- new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aaac32914f11a621 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:840

      await expect(fs.readFile(sibling, 'utf-8')).resolves.toBe('topic B\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #74575ac5190fc44b — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:851

      await fs.writeFile(memoryMd, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c927b107164a2c25 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:856

      await fs.writeFile(
        path.join(patchDir, 'a-good.patch'),
        buildUpdatePatch(memoryMd, '- old\n', '- new\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9ae6de8492cda7da — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:861

      await fs.writeFile(
        path.join(patchDir, 'b-stale.patch'),
        buildUpdatePatch(memoryMd, '- never existed\n', '- attempted\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #90c0abb503b60a42 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:880

      await expect(fs.readFile(memoryMd, 'utf-8')).resolves.toBe('- new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4117878ce413e224 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:892

      await fs.writeFile(
        path.join(patchDir, 'a.patch'),
        buildCreationPatch(path.join(memoryTempDir, 'a.md'), 'a\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d76075688e4e7a44 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:896

      await fs.writeFile(
        path.join(patchDir, 'b.patch'),
        buildCreationPatch(path.join(memoryTempDir, 'b.md'), 'b\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bb9748c24f98bdf5 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:918

      await fs.writeFile(
        path.join(patchDir, 'wrong-name.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'memory.md'),
          'Should be rejected.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5ce7f278a31f7d5 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:927

      await fs.writeFile(
        path.join(patchDir, 'sibling.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'notes.md'),
          'Should be rejected.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eade20bf3215b453 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:936

      await fs.writeFile(
        path.join(patchDir, 'settings.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'settings.json'),
          '{"foo": 1}\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf1e5d30973eb665 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:945

      await fs.writeFile(
        path.join(patchDir, 'nested.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'GEMINI.md', 'nested.md'),
          'Should be rejected.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d37d8dda87658d87 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:992

      await fs.writeFile(target, 'pre-existing\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #12b4444328aebf5f — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:996

      await fs.writeFile(
        path.join(patchDir, 'MEMORY.patch'),
        buildCreationPatch(target, 'replacement\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f3283b6c65a89aac — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1009

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a99e7c10c4d0b7d8 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1032

      await fs.writeFile(
        path.join(dir, 'SKILL.md'),
        `---\nname: ${name}\ndescription: ${description}\n---\nBody content here\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e22bb80ecf6bc13 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1068

      const targetSkill = await fs.readFile(
        path.join(globalSkillsDir, 'my-skill', 'SKILL.md'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6b08fbc2fb60cdef — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1089

      const targetSkill = await fs.readFile(
        path.join(projectSkillsDir, 'my-skill', 'SKILL.md'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c3930d1d5c9efc8a — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1121

      await fs.writeFile(path.join(targetDir, 'SKILL.md'), 'existing content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #592a573c0245dd33 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1141

      await fs.writeFile(
        path.join(
          globalSkillsDir,
          'existing-gke-prs-troubleshooter',
          'SKILL.md',
        ),
        [
          '---',
          'name: gke-prs-troubleshooter',
          'description: Existing skill',
          '---',
          'Existing body content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #830ea2b62eb6492a — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1184

      await fs.writeFile(
        path.join(dir, 'SKILL.md'),
        `---\nname: ${name}\ndescription: ${description}\n---\nBody content here\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #67ceb3cafca62e71 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1290

      await fs.writeFile(
        path.join(skillsDir, 'update-skill.patch'),
        patchContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c932afbf90dcccaf — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1311

      await fs.writeFile(
        path.join(memoryTempDir, '.extraction-state.json'),
        JSON.stringify({
          runs: [
            {
              runAt: '2025-02-01T00:00:00Z',
              sessionIds: ['later-run'],
              skillsCreated: [],
            },
          ],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0a1d566c4bce9e2a — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1324

      await fs.writeFile(
        path.join(skillsDir, 'first.patch'),
        [
          `--- ${firstTarget}`,
          `+++ ${firstTarget}`,
          '@@ -1,1 +1,1 @@',
          '-before',
          '+after',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7233450fb333d107 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1335

      await fs.writeFile(
        path.join(skillsDir, 'second.patch'),
        [
          `--- ${secondTarget}`,
          `+++ ${secondTarget}`,
          '@@ -1,1 +1,1 @@',
          '-before',
          '+after',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c79d944bc0807852 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1371

      await fs.writeFile(
        path.join(skillsDir, 'empty.patch'),
        'not a valid patch',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #787e84c0e692344b — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1418

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f59204bfeca03888 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1431

      await fs.writeFile(patchPath, patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef7698e2f4595156 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1439

      const modified = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0997b5323660f14f — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1449

      await fs.writeFile(file1, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46d9415d0e69097c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1450

      await fs.writeFile(file2, 'xxx\nyyy\nzzz\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #177222473550c402 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1469

      await fs.writeFile(path.join(skillsDir, 'multi.patch'), patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4ebbf94f6a87dc3 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1476

      expect(await fs.readFile(file1, 'utf-8')).toContain('bbb2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7eb2007ea5bebea1 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1477

      expect(await fs.readFile(file2, 'utf-8')).toContain('yyy2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c999b1f8daaf518c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1482

      await fs.writeFile(targetFile, 'alpha\nbeta\ngamma\ndelta\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #42d469e071ff6a6d — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1484

      await fs.writeFile(
        path.join(skillsDir, 'multi-section.patch'),
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,4 +1,5 @@',
          ' alpha',
          ' beta',
          '+beta2',
          ' gamma',
          ' delta',
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -2,4 +2,5 @@',
          ' beta',
          ' beta2',
          ' gamma',
          '+gamma2',
          ' delta',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a3bb9fe3d51b4dc0 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1511

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #780136d128f746d7 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1518

      await fs.writeFile(targetFile, 'original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d6dac778ade4390c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1521

      await fs.writeFile(
        patchPath,
        [
          '--- /dev/null',
          `+++ ${targetFile}`,
          '@@ -0,0 +1 @@',
          '+replacement content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15ed09fe09af2fdd — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1536

      expect(await fs.readFile(targetFile, 'utf-8')).toBe('original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #edb633efc72ff01f — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1549

      await fs.writeFile(outsidePatch, 'outside patch content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d5faa8cd5ee46a6 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1570

      await fs.writeFile(
        path.join(skillsDir, 'bad-target.patch'),
        patchContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60db0d32dfd9d536 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1583

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a5d73cafa9c672f4 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1596

      await fs.writeFile(patchPath, patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #90238fa13e31f0d6 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1604

      expect(await fs.readFile(outsideFile, 'utf-8')).not.toContain('line2.5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c12ed9c01005009a — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1619

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4e88db484a4986a4 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1622

      await fs.writeFile(
        patchPath,
        [
          `--- ${path.join(linkDir, 'escaped.md')}`,
          `+++ ${path.join(linkDir, 'escaped.md')}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #87c16a84ff31e9e4 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1642

      expect(await fs.readFile(outsideFile, 'utf-8')).not.toContain('line2.5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e88bec2d6df93667 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1647

      await fs.writeFile(
        path.join(skillsDir, 'empty.patch'),
        [
          `--- ${path.join(projectSkillsDir, 'target.md')}`,
          `+++ ${path.join(projectSkillsDir, 'target.md')}`,
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f59e28a0462a070b — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1664

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d6363327d3a6a9da — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1667

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bd551a56c20fdf72 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1691

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a21ef2256e983ded — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1712

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a52b9b979f1faa67 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1715

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6fbf7b91defca9fb — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1742

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b20124ad007ec677 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1751

      await fs.writeFile(sourceFile, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15ba998a30a38892 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1752

      await fs.writeFile(targetFile, 'xxx\nyyy\nzzz\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a941d3deba687b26 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1755

      await fs.writeFile(
        patchPath,
        [
          `--- ${sourceFile}`,
          `+++ ${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' xxx',
          ' yyy',
          '+yyy2',
          ' zzz',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #91fbdeb973fc1ff8 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1776

      expect(await fs.readFile(sourceFile, 'utf-8')).toBe('aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73d217473c73ae94 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1777

      expect(await fs.readFile(targetFile, 'utf-8')).toBe('xxx\nyyy\nzzz\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d7d786554572ca9 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1783

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2f77131aea42c5ce — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1786

      await fs.writeFile(
        patchPath,
        [
          `--- a/${targetFile}`,
          `+++ b/${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22feb4515917df4c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1804

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1514cd5b0a49090d — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1812

      await fs.writeFile(file1, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29549c554279e8e3 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1832

      await fs.writeFile(path.join(skillsDir, 'partial.patch'), patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7773d298543a174 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1838

      const content = await fs.readFile(file1, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #47acfe120eb7587c — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1844

      await fs.writeFile(file1, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c98be0754eca80eb — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1850

      await fs.writeFile(
        patchPath,
        [
          `--- ${file1}`,
          `+++ ${file1}`,
          '@@ -1,3 +1,4 @@',
          ' aaa',
          ' bbb',
          '+bbb2',
          ' ccc',
          '--- /dev/null',
          `+++ ${conflictPath}`,
          '@@ -0,0 +1 @@',
          '+new file content',
          '--- /dev/null',
          `+++ ${nestedNewFile}`,
          '@@ -0,0 +1 @@',
          '+nested new file content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5ef9f1e59bc9d5e5 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1876

      expect(await fs.readFile(file1, 'utf-8')).toBe('aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #74eb7a1e50036a48 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1906

      await fs.writeFile(patchPath, 'some patch content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #347cf7c1bdb769e1 — Filesystem access.

repo/packages/core/src/commands/memory.test.ts:1927

      await fs.writeFile(outsidePatch, 'outside patch content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d96c1b3ab120efa6 — Filesystem access.

repo/packages/core/src/commands/memory.ts:156

      content = await fs.readFile(skillPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0530b684d5b39c23 — Filesystem access.

repo/packages/core/src/commands/memory.ts:469

        content = await fs.readFile(sourcePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd6471da7ac4eaad — Filesystem access.

repo/packages/core/src/commands/memory.ts:730

      originalContent = await fs.readFile(memoryMdPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70dfb606fc01069d — Filesystem access.

repo/packages/core/src/commands/memory.ts:790

    content = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #109e75b9255aa05b — Filesystem access.

repo/packages/core/src/commands/memory.ts:1042

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea6cda1918eaecf7 — Filesystem access.

repo/packages/core/src/commands/memory.ts:1162

      const content = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #478945c59f15bac7 — Filesystem access.

repo/packages/core/src/commands/memory.ts:1205

    content = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3bd3c2e0efa88484 — Filesystem access.

repo/packages/core/src/config/config-agents-reload.test.ts:58

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #82c08cfa844a3d62 — Filesystem access.

repo/packages/core/src/config/config-agents-reload.test.ts:118

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ad49080ebaac373 — Filesystem access.

repo/packages/core/src/config/config-agents-reload.test.ts:160

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5ea728efc47a0645 — Filesystem access.

repo/packages/core/src/config/config-agents-reload.test.ts:202

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32c779e361f78918 — Environment-variable access.

repo/packages/core/src/config/config.ts:2165

    const seatbeltProfile = process.env['SEATBELT_PROFILE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41bb90cdd386d26d — Environment-variable access.

repo/packages/core/src/config/config.ts:3847

      process.env['GEMINI_CLI_EXP_AGENT'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ae6ff393c2ba07b — Environment-variable access.

repo/packages/core/src/config/config.ts:3854

      process.env['GEMINI_CLI_EXP_AGENT'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #daa60db02ea0fd49 — Filesystem access.

repo/packages/core/src/config/extensions/integrity.ts:88

      const key = await fs.promises.readFile(this.fallbackKeyPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bafc5113ab12468d — Filesystem access.

repo/packages/core/src/config/extensions/integrity.ts:100

        await fs.promises.writeFile(this.fallbackKeyPath, key, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b656e61464fa8a19 — Filesystem access.

repo/packages/core/src/config/extensions/integrity.ts:127

      content = await fs.promises.readFile(this.integrityStorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #903e471813fb2e4f — Filesystem access.

repo/packages/core/src/config/extensions/integrity.ts:183

    await fs.promises.writeFile(tmpPath, JSON.stringify(finalData, null, 2), {
      mode: 0o600,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d3c67b7105a7d5f3 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:92

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6575e4bc9073254e — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:121

    expect(normalizePath(fs.readFileSync(marker1, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b7f806616b25683c — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:122

    expect(normalizePath(fs.readFileSync(marker2, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d056eee4e2494fb — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:131

    fs.writeFileSync(path.join(slugDir, '.project_root'), projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2afb022ef731bec7 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:143

    expect(normalizePath(fs.readFileSync(marker2, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6432c2d878713f80 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:152

    fs.writeFileSync(path.join(slugDir, '.project_root'), projectY);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #174615608c3c6c7c — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:168

    fs.writeFileSync(
      registryPath,
      JSON.stringify({
        projects: {
          [projectPath]: 'my-project',
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f4b60e244b00944 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:180

    fs.writeFileSync(
      path.join(slugDir, '.project_root'),
      normalizePath(path.join(tempDir, 'project-b')),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b585d89f3aebbbb — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:203

    fs.writeFileSync(path.join(slugDir1, '.project_root'), projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b45e21940a8292f — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:214

    expect(normalizePath(fs.readFileSync(marker2, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2575b16a8e2fc1f8 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:222

    fs.writeFileSync(
      registryPath,
      JSON.stringify({
        projects: {
          [projectPath]: slug,
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d65dbc522a1d462b — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:247

        fs.readFileSync(path.join(baseDir1, slug, '.project_root'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f7b264d8bbd1ea52 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:259

    fs.writeFileSync(
      path.join(slugDir, '.project_root'),
      normalizePath(path.join(tempDir, 'something-else')),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #737adfe0859960ca — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:265

    fs.writeFileSync(
      registryPath,
      JSON.stringify({
        projects: {
          [projectPath]: slug,
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e95649b04644c32 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:331

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e8123b20568a657 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:359

    fs.writeFileSync(
      registryPath,
      JSON.stringify({ projects: { '/foo': 'bar' } }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf56c7bf54fdd935 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:380

    fs.writeFileSync(registryPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4901b23952f42651 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:392

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b325a2da77e8562 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:399

    fs.writeFileSync(registryPath, JSON.stringify({ projects: [] }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #921e2a2b68168c82 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:411

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b5d1b3dcb6c5be90 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:419

    fs.writeFileSync(
      registryPath,
      JSON.stringify({ projects: { '/some/path': '../../etc/passwd' } }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c14d661c5d60df6 — Filesystem access.

repo/packages/core/src/config/projectRegistry.test.ts:434

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #327f606e0f193b21 — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:64

      const content = await fs.promises.readFile(this.registryPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93c74f61b0f14954 — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:117

      await fs.promises.writeFile(tmpPath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d23043a515fbe42 — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:249

        const owner = (await fs.promises.readFile(markerPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a3b964153adc00f — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:287

              await fs.promises.readFile(markerPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #526bade2ae7a68b2 — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:330

              await fs.promises.readFile(markerPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e09316f8774e3f61 — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:384

        const owner = (await fs.promises.readFile(markerPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed43db7df598312b — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:397

        await fs.promises.writeFile(markerPath, normalizedProject, {
          encoding: 'utf8',
          flag: 'wx',
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b48507385f47ca4 — Filesystem access.

repo/packages/core/src/config/projectRegistry.ts:404

          const owner = (await fs.promises.readFile(markerPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2fcb1a0c09a8f807 — Environment-variable access.

repo/packages/core/src/config/storage.test.ts:409

  const originalEnv = process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #64b3c38708188c1b — Environment-variable access.

repo/packages/core/src/config/storage.test.ts:413

      process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00aa49eed2ad159e — Environment-variable access.

repo/packages/core/src/config/storage.test.ts:415

      delete process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #66e25127f798feec — Environment-variable access.

repo/packages/core/src/config/storage.test.ts:420

    delete process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8eb73257448cd460 — Environment-variable access.

repo/packages/core/src/config/storage.test.ts:438

    process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] = customPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7128452e507a497b — Environment-variable access.

repo/packages/core/src/config/storage.test.ts:443

    process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a62ebabc9421fa1 — Environment-variable access.

repo/packages/core/src/config/storage.ts:91

    if (process.env['GEMINI_CLI_TRUSTED_FOLDERS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa0903a0178cd766 — Environment-variable access.

repo/packages/core/src/config/storage.ts:92

      return process.env['GEMINI_CLI_TRUSTED_FOLDERS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6cde6c288b920a22 — Environment-variable access.

repo/packages/core/src/config/storage.ts:144

    if (process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be8fc0bbf3147f54 — Environment-variable access.

repo/packages/core/src/config/storage.ts:145

      return process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ed9b06d7c0f8dfa — Filesystem access.

repo/packages/core/src/config/storage.ts:404

      const content = await fs.promises.readFile(absolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #53b29e6c7199fe4f — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:32

    fs.writeFileSync(path.join(oldPath, 'test.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #63319d6b11c8fd36 — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:38

    expect(fs.readFileSync(path.join(newPath, 'test.txt'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #344fe692145dd427 — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:57

    fs.writeFileSync(path.join(oldPath, 'old.txt'), 'old');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29b47b632cc53c88 — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:58

    fs.writeFileSync(path.join(newPath, 'new.txt'), 'new');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bbd28ddf2aaa7879 — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:72

    fs.writeFileSync(path.join(oldPath, 'history.db'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a0e90614100dfe18 — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:73

    fs.writeFileSync(path.join(newPath, '.project_root'), 'path');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ac8c1eda1c10584c — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:78

    expect(fs.readFileSync(path.join(newPath, 'history.db'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1912b41b9f17e32f — Filesystem access.

repo/packages/core/src/config/storageMigration.test.ts:81

    expect(fs.readFileSync(path.join(newPath, '.project_root'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #5841954e5400d738 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/confirmation-bus/message-bus.test.ts:280

      const requestPromise = subagentBus.request<
        ToolConfirmationRequest,
        ToolConfirmationResponse
      >(request, MessageBusType.TOOL_CONFIRMATION_RESPONSE, 2000);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #89a6586dcea7799e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/confirmation-bus/message-bus.test.ts:323

      const requestPromise = subagentBus2.request<
        ToolConfirmationRequest,
        ToolConfirmationResponse
      >(request, MessageBusType.TOOL_CONFIRMATION_RESPONSE, 2000);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #f8dce443b539b586 — Filesystem access.

repo/packages/core/src/context/config/configLoader.test.ts:45

    await fs.writeFile(sidecarPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78f2b623b33a59a2 — Filesystem access.

repo/packages/core/src/context/config/configLoader.test.ts:60

    await fs.writeFile(sidecarPath, JSON.stringify(validConfig));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c5864475904304a — Filesystem access.

repo/packages/core/src/context/config/configLoader.test.ts:76

    await fs.writeFile(sidecarPath, JSON.stringify(invalidConfig));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7dc96e6b73a6e19 — Filesystem access.

repo/packages/core/src/context/config/configLoader.test.ts:83

    await fs.writeFile(sidecarPath, '   \n  ');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3e8c6d4a672e2b3 — Filesystem access.

repo/packages/core/src/context/config/configLoader.ts:29

  const fileContent = await fs.readFile(sidecarPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75a8f3102e8199bf — Filesystem access.

repo/packages/core/src/context/contextCompressionService.ts:64

        const data = await fs.readFile(this.stateFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ebc639d6d3a1d73 — Filesystem access.

repo/packages/core/src/context/contextCompressionService.ts:98

      await fs.writeFile(
        this.stateFilePath,
        JSON.stringify(obj, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6461f8af9493b04 — Environment-variable access.

repo/packages/core/src/context/initializer.ts:84

    enabled: !!process.env['GEMINI_CONTEXT_TRACE_DIR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #66af565826d58921 — Environment-variable access.

repo/packages/core/src/context/initializer.ts:130

        !!process.env['GEMINI_CONTEXT_CALIBRATE_TOKEN_CALCULATIONS'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0493cc9de4636594 — Filesystem access.

repo/packages/core/src/context/processors/blobDegradationProcessor.ts:70

          await fs.writeFile(filePath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c27a2e1d8961df2 — Filesystem access.

repo/packages/core/src/context/processors/toolMaskingProcessor.ts:126

        await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a35f00d52ce39eff — Filesystem access.

repo/packages/core/src/context/toolOutputMaskingService.ts:190

      await fsPromises.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef15bf5993e591e7 — Filesystem access.

repo/packages/core/src/context/tracer.test.ts:54

    const initTraceLog = readFileSync(traceLogPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bed2fb540c1fc9b9 — Filesystem access.

repo/packages/core/src/context/tracer.test.ts:61

    const smallTraceLog = readFileSync(traceLogPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #badaa3d01ab2a487 — Filesystem access.

repo/packages/core/src/context/tracer.test.ts:79

    const largeTraceLog = readFileSync(traceLogPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1905952e14beb95 — Environment-variable access.

repo/packages/core/src/context/tracer.ts:29

      process.env['GEMINI_CONTEXT_TRACE_DIR'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a01cca56dd12543d — Filesystem access.

repo/packages/core/src/context/tracer.ts:94

      fsSync.writeFileSync(assetPath, JSON.stringify(data, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c72a9d958900ab7 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:81

  if (process.env['GOOGLE_GENAI_USE_GCA'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a11b9020c572e054 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:84

  if (process.env['GOOGLE_GENAI_USE_VERTEXAI'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fdd558c65697088d — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:87

  if (process.env['GOOGLE_GEMINI_BASE_URL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42f7216b35b9e842 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:90

  if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c802356f2b8410f4 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:94

    process.env['CLOUD_SHELL'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9879c0dbb4f4b340 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:95

    process.env['GEMINI_CLI_USE_COMPUTE_ADC'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ac4d25b1d5fc979 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:161

    return process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #178a130fe0c17a71 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:241

      process.env['GEMINI_CLI_CUSTOM_HEADERS'] || undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9cdcecf17fcea8fb — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:259

      const vscodeVersion = process.env['TERM_PROGRAM_VERSION'] || 'unknown';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08d09102ec226f77 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:263

          process.env['CLOUD_SHELL_VERSION'] || 'unknown';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43be374da1df1330 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:277

      process.env['GEMINI_API_KEY_AUTH_MECHANISM'] || 'x-goog-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3900174f24354152 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:278

    const apiVersionEnv = process.env['GOOGLE_GENAI_API_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd6827115f8b9a86 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:351

            ? process.env['GOOGLE_VERTEX_BASE_URL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0bfb4ea13bbf30b5 — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:352

            : process.env['GOOGLE_GEMINI_BASE_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ecd6d1a5610be5d — Environment-variable access.

repo/packages/core/src/core/contentGenerator.ts:357

          const location = process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c9eaa945bd9a144 — Filesystem access.

repo/packages/core/src/core/fakeContentGenerator.ts:74

    const fileContent = await promises.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #104fe0f3e2125b6b — Filesystem access.

repo/packages/core/src/core/logger.test.ts:60

    const content = await fs.readFile(TEST_LOG_FILE_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5fa4a6b768563a1 — Filesystem access.

repo/packages/core/src/core/logger.test.ts:149

      await fs.writeFile(
        TEST_LOG_FILE_PATH,
        JSON.stringify(existingLogs, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf5055b6c1d349f0 — Filesystem access.

repo/packages/core/src/core/logger.test.ts:173

      await fs.writeFile(
        TEST_LOG_FILE_PATH,
        JSON.stringify(existingLogs, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d3490a7fc6c12fe — Filesystem access.

repo/packages/core/src/core/logger.test.ts:197

      await fs.writeFile(TEST_LOG_FILE_PATH, 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f3fe9a4d59fceeff — Filesystem access.

repo/packages/core/src/core/logger.test.ts:222

      await fs.writeFile(
        TEST_LOG_FILE_PATH,
        JSON.stringify({ not: 'an array' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e0bb1241bf23547c — Filesystem access.

repo/packages/core/src/core/logger.test.ts:447

      const fileContent = await fs.readFile(taggedFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d7335192a029a8e7 — Filesystem access.

repo/packages/core/src/core/logger.test.ts:480

      await fs.writeFile(
        TEST_CHECKPOINT_FILE_PATH,
        JSON.stringify(conversation, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bb03f1e947cdba92 — Filesystem access.

repo/packages/core/src/core/logger.test.ts:516

      await fs.writeFile(
        taggedFilePath,
        JSON.stringify(taggedConversation, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93d9f2bb5c72981d — Filesystem access.

repo/packages/core/src/core/logger.test.ts:534

      await fs.writeFile(taggedFilePath, JSON.stringify(conversation, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #299bad3d35453c1c — Filesystem access.

repo/packages/core/src/core/logger.test.ts:558

      await fs.writeFile(taggedFilePath, 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #85046a0400fda07b — Filesystem access.

repo/packages/core/src/core/logger.test.ts:601

      await fs.writeFile(taggedFilePath, JSON.stringify(conversation));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #72ff248325fa9d99 — Filesystem access.

repo/packages/core/src/core/logger.test.ts:621

      await fs.writeFile(oldStylePath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1c02a4bf248d0bf2 — Filesystem access.

repo/packages/core/src/core/logger.test.ts:622

      await fs.writeFile(newStylePath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cabb71348644f23e — Filesystem access.

repo/packages/core/src/core/logger.test.ts:692

      await fs.writeFile(taggedFilePath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4bc84412473e3a37 — Filesystem access.

repo/packages/core/src/core/logger.test.ts:749

      await fs.writeFile(
        taggedFilePath,
        JSON.stringify(taggedConversation, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #161994fa989b8d46 — Filesystem access.

repo/packages/core/src/core/logger.ts:90

      const fileContent = await fs.readFile(this.logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5f2cc24b1fe8121 — Filesystem access.

repo/packages/core/src/core/logger.ts:161

        await fs.writeFile(this.logFilePath, '[]', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23b34d3f9a44891a — Filesystem access.

repo/packages/core/src/core/logger.ts:230

      await fs.writeFile(
        this.logFilePath,
        JSON.stringify(currentLogsOnDisk, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d63d5cfe50814904 — Filesystem access.

repo/packages/core/src/core/logger.ts:339

      await fs.writeFile(path, JSON.stringify(checkpoint, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ceef98a9e62f2407 — Filesystem access.

repo/packages/core/src/core/logger.ts:355

      const fileContent = await fs.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #959ca427e0a33899 — Environment-variable access.

repo/packages/core/src/core/loggingContentGenerator.ts:216

      const location = process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18954315a1ae5916 — Filesystem access.

repo/packages/core/src/hooks/trustedHooks.ts:37

        const content = fs.readFileSync(this.configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #801106916abf20ae — Filesystem access.

repo/packages/core/src/hooks/trustedHooks.ts:53

      fs.writeFileSync(
        this.configPath,
        JSON.stringify(this.trustedHooks, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bcff5432392ab913 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.test.ts:39

    delete process.env['CURSOR_TRACE_ID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14ce3fabef7992d0 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:40

  return !!(process.env['EDITOR_IN_CLOUD_SHELL'] || process.env['CLOUD_SHELL']);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5d317e1c6f082b9 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:44

  return !!process.env['TERMINAL_EMULATOR']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40dcd5a442951de1 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:50

  if (process.env['ANTIGRAVITY_CLI_ALIAS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c91970727406ae13 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:53

  if (process.env['__COG_BASHRC_SOURCED']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46b71314e40bf99e — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:56

  if (process.env['REPLIT_USER']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c1b8fbe15a725bc — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:59

  if (process.env['CURSOR_TRACE_ID']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e904615633fce727 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:62

  if (process.env['CODESPACES']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5139ee869b3ae5ee — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:68

  if (process.env['TERM_PRODUCT'] === 'Trae') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f035f12ee74063d1 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:71

  if (process.env['MONOSPACE_ENV']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b95dcd8090d8c8bd — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:74

  if (process.env['POSITRON'] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36a33a993a8b2b73 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:77

  if (process.env['TERM_PROGRAM'] === 'sublime') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #067e1b5228fa46f7 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:80

  if (process.env['ZED_SESSION_ID'] || process.env['TERM_PROGRAM'] === 'Zed') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a6855f2091d6b84 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:83

  if (process.env['XCODE_VERSION_ACTUAL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e0914285115f01f — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:160

    process.env['TERM_PROGRAM'] !== 'vscode' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e6c5bee96054431 — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:161

    process.env['TERM_PROGRAM'] !== 'sublime' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba7b278c72c4c25a — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:162

    process.env['TERM_PROGRAM'] !== 'Zed' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #277bc16a82e086eb — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:163

    !process.env['ZED_SESSION_ID'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d799ed5b389a286c — Environment-variable access.

repo/packages/core/src/ide/detect-ide.ts:164

    !process.env['XCODE_VERSION_ACTUAL'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b965523a85f6d17c — Environment-variable access.

repo/packages/core/src/ide/ide-client.test.ts:65

    process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'] = '/test/workspace';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be63736f7af8dbc5 — Environment-variable access.

repo/packages/core/src/ide/ide-client.test.ts:66

    delete process.env['GEMINI_CLI_IDE_SERVER_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9a8f44682bb9a452 — Environment-variable access.

repo/packages/core/src/ide/ide-client.test.ts:67

    delete process.env['GEMINI_CLI_IDE_SERVER_STDIO_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a5bda00c71627b70 — Environment-variable access.

repo/packages/core/src/ide/ide-client.test.ts:68

    delete process.env['GEMINI_CLI_IDE_SERVER_STDIO_ARGS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0af527c1f8af46c7 — Environment-variable access.

repo/packages/core/src/ide/ide-client.test.ts:69

    delete process.env['GEMINI_CLI_IDE_AUTH_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d9dceac0c68cddb1 — Environment-variable access.

repo/packages/core/src/ide/ide-client.test.ts:589

      process.env['GEMINI_CLI_IDE_AUTH_TOKEN'] = 'env-auth-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4345be90cdc97e16 — Environment-variable access.

repo/packages/core/src/ide/ide-client.ts:142

      connectionConfig?.authToken ?? process.env['GEMINI_CLI_IDE_AUTH_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90a1b2fa6c0879ba — Environment-variable access.

repo/packages/core/src/ide/ide-client.ts:146

      process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #cae24c3955f4ab5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/ide/ide-client.ts:234

      this.client
        .request(
          {
            method: 'tools/call',
            params: {
              name: `openDiff`,
              arguments: {
                filePath,
                newContent,
              },
            },
          },
          CallToolResultSchema,
          { timeout: IDE_REQUEST_TIMEOUT_MS },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7f6b203feec7d737 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/ide/ide-client.ts:316

      const resultData = await this.client.request(
        {
          method: 'tools/call',
          params: {
            name: `closeDiff`,
            arguments: {
              filePath,
              suppressNotification: options?.suppressNotification,
            },
          },
        },
        CallToolResultSchema,
        { timeout: IDE_REQUEST_TIMEOUT_MS },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4935a68ba0bd0650 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/ide/ide-client.ts:441

      const response = await this.client.request(
        { method: 'tools/list', params: {} },
        ListToolsResultSchema,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #5a5f5a3f62b1c17b — Environment-variable access.

repo/packages/core/src/ide/ide-connection-utils.ts:75

  const port = process.env['GEMINI_CLI_IDE_SERVER_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11ebafbb1bb63389 — Environment-variable access.

repo/packages/core/src/ide/ide-connection-utils.ts:83

  const command = process.env['GEMINI_CLI_IDE_SERVER_STDIO_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5ffb18038b026aa — Environment-variable access.

repo/packages/core/src/ide/ide-connection-utils.ts:88

  const argsStr = process.env['GEMINI_CLI_IDE_SERVER_STDIO_ARGS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d9ab061dd6981f2 — Filesystem access.

repo/packages/core/src/ide/ide-connection-utils.ts:125

    const portFileContents = await fs.promises.readFile(portFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4c064e7c29383e1 — Filesystem access.

repo/packages/core/src/ide/ide-connection-utils.ts:171

        fs.promises.readFile(path.join(portFileDir, file), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a92844a671d1b55 — Environment-variable access.

repo/packages/core/src/ide/ide-connection-utils.ts:310

  const existingNoProxy = process.env['NO_PROXY'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0982dae8f5df08bf — Environment-variable access.

repo/packages/core/src/ide/ide-connection-utils.ts:356

  return !!process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7bf3847631423dd — Environment-variable access.

repo/packages/core/src/ide/ide-connection-utils.ts:361

    process.env['VSCODE_REMOTE_CONTAINERS_SESSION'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc9959101eaef359 — Environment-variable access.

repo/packages/core/src/ide/ide-connection-utils.ts:362

    process.env['REMOTE_CONTAINERS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #458459c042b3d8ad — Environment-variable access.

repo/packages/core/src/ide/ide-installer.ts:120

            process.env['ProgramFiles'] || 'C:\\Program Files',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a5c783a65aa39b3 — Environment-variable access.

repo/packages/core/src/ide/ide-installer.ts:255

    const envCommand = process.env['ANTIGRAVITY_CLI_ALIAS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0cc195eec86e2567 — Environment-variable access.

repo/packages/core/src/ide/process-utils.ts:229

  if (process.env['GEMINI_CLI_IDE_PID']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0be5422f4e268aee — Environment-variable access.

repo/packages/core/src/ide/process-utils.ts:230

    const idePid = parseInt(process.env['GEMINI_CLI_IDE_PID'], 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #6fdbd0e2d11878d2 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/mcp/mcp-oauth-provider.test.ts:63

      const authUrl = new URL('http://auth.example.com/authorize');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c9ca1161927e831d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/mcp/oauth-provider.ts:114

    const response = await fetch(registrationUrl, {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
      },
      body: JSON.stringify(registrationRequest),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ea910f196a795504 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/mcp/oauth-provider.ts:303

        const response = await fetch(mcpServerUrl, {
          method: 'HEAD',
          headers,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #28ea57c86c84470d — Environment-variable access.

repo/packages/core/src/mcp/oauth-token-storage.ts:31

    process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf64fbc9b46abd0e — Filesystem access.

repo/packages/core/src/mcp/oauth-token-storage.ts:72

      const data = await fs.readFile(tokenFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9db00f5539ac1a25 — Filesystem access.

repo/packages/core/src/mcp/oauth-token-storage.ts:113

      await fs.writeFile(
        tokenFile,
        JSON.stringify(tokenArray, null, 2),
        { mode: 0o600 }, // Restrict file permissions
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #996d89fcd0f948c3 — Filesystem access.

repo/packages/core/src/mcp/oauth-token-storage.ts:204

          await fs.writeFile(tokenFile, JSON.stringify(tokenArray, null, 2), {
            mode: 0o600,
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #27a068a6c0a0bd25 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/mcp/oauth-utils.ts:100

      const response = await fetch(resourceMetadataUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #792fc81b1497a191 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/mcp/oauth-utils.ts:124

      const response = await fetch(authServerMetadataUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3674d968d80bcc57 — Environment-variable access.

repo/packages/core/src/mcp/token-storage/hybrid-token-storage.ts:28

    const forceFileStorage = process.env[FORCE_FILE_STORAGE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a2b7d9616db23f7b — Filesystem access.

repo/packages/core/src/policy/config.test.ts:119

      return (
        await vi.importActual<typeof import('node:fs/promises')>(
          'node:fs/promises',
        )
      ).readFile(p);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a8eac1eca5df589 — Filesystem access.

repo/packages/core/src/policy/config.ts:808

              const fileContent = await fs.readFile(policyFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14d201626132c455 — Filesystem access.

repo/packages/core/src/policy/config.ts:892

              await handle.writeFile(newContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d26088ea2061e839 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:39

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7526718d22e262b6 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:55

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15c668e8fc532006 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:66

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({ 'workspace:id': currentHash }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b8104af37619e19 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:83

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e23d5bac15e3b5f — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:93

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({ 'workspace:id': 'different_hash' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #185c72841bea42a3 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:110

      await fs.writeFile(path.join(policyDir1, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d5fff7d46ca2e702 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:120

      await fs.writeFile(path.join(policyDir2, 'b.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #16032e04df0bff32 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:135

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aae3bd46245c8562 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:142

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentB');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1381304809260396 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:155

      await fs.writeFile(path.join(policyDir1, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #319b4bbe96d9c93e — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:156

      await fs.writeFile(path.join(policyDir1, 'b.toml'), 'contentB');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #463759dfa5f46e8b — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:178

      await fs.writeFile(path.join(dirA, 'p.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d41f949a8741173 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:182

      await fs.writeFile(path.join(dirB, 'p.toml'), 'contentB');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84c1d41a5f447214 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:196

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({
          'workspace:idA': hashA,
          'workspace:idB': 'oldHashB',
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d1bea6b3e55321e2 — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:229

        await fs.readFile(integrityStoragePath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #57f6247ea430572c — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:235

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({ 'other:id': 'otherhash' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6574a50373da628b — Filesystem access.

repo/packages/core/src/policy/integrity.test.ts:243

        await fs.readFile(integrityStoragePath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f560768fbe353808 — Filesystem access.

repo/packages/core/src/policy/integrity.ts:123

      const content = await fs.readFile(storagePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7aea2914b78709da — Filesystem access.

repo/packages/core/src/policy/integrity.ts:148

      await fs.writeFile(storagePath, JSON.stringify(data, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65e1d77dcd06bf1d — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:76

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c51c10f7713d4f78 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:98

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e4ffd1fe2261d5d — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:129

    memfs.writeFileSync(policyFile, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ba729cac93de114 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:139

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76478a37a733db4a — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:161

    memfs.writeFileSync(policyFile, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ae0cc151b3f409e9 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:171

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f31305b6efd0898a — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:192

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ae4a2e11d1ae4341 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:211

    const writtenContent = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce248a2f54b4c3e9 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:251

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #70318b18df8b3fed — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:411

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d449d6136ffaf514 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:430

    memfs.writeFileSync(policyFile, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1491cb14808da08c — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:442

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #89fc56750e72b012 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:501

    memfs.writeFileSync(policyFile, 'this is not valid toml ][[[');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bdec45bfe8b6ca11 — Filesystem access.

repo/packages/core/src/policy/persistence.test.ts:519

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78cdd0be5072b12c — Filesystem access.

repo/packages/core/src/policy/sandboxPolicyManager.ts:59

        const content = fs.readFileSync(defaultPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be7b29538b36230b — Filesystem access.

repo/packages/core/src/policy/sandboxPolicyManager.ts:118

      const content = fs.readFileSync(this.configPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f99377fa7c4e3606 — Filesystem access.

repo/packages/core/src/policy/sandboxPolicyManager.ts:134

      fs.writeFileSync(this.configPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d119dcf7595ac720 — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:59

    await fs.writeFile(path.join(tempDir, fileName), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #25304efa688ac93f — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:312

      await fs.writeFile(
        path.join(tempDir, 'tier4.toml'),
        `
[[rule]]
toolName = "tier4-tool"
decision = "allow"
priority = 100
modes = ["autoEdit"]
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #20cb4bff2bdce55e — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:433

      await fs.writeFile(
        path.join(tempDir, 'valid.toml'),
        `
[[rule]]
toolName = "glob"
decision = "allow"
priority = 100
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b3ca2f40c94ce77d — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:443

      await fs.writeFile(
        path.join(tempDir, 'invalid.toml'),
        `
[[rule]]
toolName = "grep"
decision = "allow"
priority = -1
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1376696759b33b52 — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:661

      await fs.writeFile(
        filePath,
        '[[rule]]\ntoolName = "test-tool"\ndecision = "allow"\npriority = 500\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #571365cb0d3bcb16 — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:864

      const fileContent = await fs.readFile(planTomlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f26902b69762d320 — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:869

        await fs.writeFile(path.join(tempPolicyDir, 'plan.toml'), fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #96ec634a04c75088 — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:982

      const planContent = await fs.readFile(planTomlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #944d8a7191733fc1 — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:983

      const readOnlyContent = await fs.readFile(readOnlyTomlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3da19d8feed8e11e — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:989

        await fs.writeFile(path.join(tempPolicyDir, 'plan.toml'), planContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb6b714746a7bad8 — Filesystem access.

repo/packages/core/src/policy/toml-loader.test.ts:990

        await fs.writeFile(
          path.join(tempPolicyDir, 'read-only.toml'),
          readOnlyContent,
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fac6392d7428d1c — Filesystem access.

repo/packages/core/src/policy/toml-loader.ts:187

    const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4beb5aa84f22a18 — Environment-variable access.

repo/packages/core/src/prompts/promptProvider.ts:54

      process.env['GEMINI_SYSTEM_MD'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46f6b13bffad8c7a — Filesystem access.

repo/packages/core/src/prompts/promptProvider.ts:119

      basePrompt = fs.readFileSync(systemMdPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #239cff48e1c904d9 — Environment-variable access.

repo/packages/core/src/prompts/promptProvider.ts:326

      process.env['GEMINI_WRITE_SYSTEM_MD'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fb6670d999ced1f — Filesystem access.

repo/packages/core/src/prompts/promptProvider.ts:333

      fs.writeFileSync(writePath, basePrompt);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f7a06d1665731ef — Environment-variable access.

repo/packages/core/src/prompts/promptProvider.ts:345

  if (process.env['SANDBOX'] === 'sandbox-exec') return 'macos-seatbelt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e51636fb58d0a8c6 — Environment-variable access.

repo/packages/core/src/prompts/promptProvider.ts:346

  if (process.env['SANDBOX']) return 'generic';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ab95cffdda3b4f7 — Environment-variable access.

repo/packages/core/src/prompts/utils.ts:110

  const envVar = process.env[`GEMINI_PROMPT_${key.toUpperCase()}`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0fe42671ad2082f1 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:57

    await fs.writeFile(filePath, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf62526c4513a2fd — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:67

    await fs.writeFile(filePath, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a58d4f7dec4b6a07 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:78

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #535828edacdfa8a4 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:87

    await fs.writeFile(secretPath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #222179e3716ad1ac — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:98

    await fs.writeFile(passwdPath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b84c0c99e11c1f5 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:100

    await fs.writeFile(srcPath, 'source content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #373fa5c5d793c80b — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:123

    await fs.writeFile(targetPath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8128ce056ec816a4 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:139

    await fs.writeFile(realFilePath, 'real content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #616c36a29e22fd7e — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:152

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #28c8ff73722a6640 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:165

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10d6513ac54abf94 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:178

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c3383fdc5ee00539 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:198

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bf38761fc570242 — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:213

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #551caad30fab990e — Filesystem access.

repo/packages/core/src/safety/built-in.test.ts:231

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97d7bb7a3a2d421b — Filesystem access.

repo/packages/core/src/sandbox/linux/LinuxSandboxManager.ts:102

  fs.writeFileSync(bpfPath, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bfde74a48033a239 — Filesystem access.

repo/packages/core/src/sandbox/linux/LinuxSandboxManager.ts:192

    fs.writeFileSync(maskPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f10c9ca133cbf04 — Filesystem access.

repo/packages/core/src/sandbox/linux/LinuxSandboxManager.ts:346

    fs.writeFileSync(tempFile, content, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f157777916972b4d — Filesystem access.

repo/packages/core/src/sandbox/macos/MacOsSandboxManager.test.ts:82

      expect(fs.readFileSync(tempFile, 'utf8')).toBe('(mock profile)');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c2dea406f9f70ac — Filesystem access.

repo/packages/core/src/sandbox/macos/MacOsSandboxManager.ts:200

    fs.writeFileSync(tempFile, profile, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d44765b5acb480d1 — Environment-variable access.

repo/packages/core/src/sandbox/macos/seatbeltArgsBuilder.ts:116

  if (process.env['PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a3ed7ed8e01016e — Environment-variable access.

repo/packages/core/src/sandbox/macos/seatbeltArgsBuilder.ts:117

    const paths = process.env['PATH'].split(':');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cef8f22f20e53d43 — Filesystem access.

repo/packages/core/src/sandbox/utils/fsUtils.ts:23

      const gitContent = await fs.readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8adf861560261c80 — Filesystem access.

repo/packages/core/src/sandbox/utils/fsUtils.ts:36

          const backlink = (await fs.readFile(backlinkPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a01fea149760a806 — Filesystem access.

repo/packages/core/src/sandbox/utils/fsUtils.ts:45

            const config = await fs.readFile(configPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f44a5909c987cba — Environment-variable access.

repo/packages/core/src/sandbox/utils/proactivePermissions.ts:130

    const appData = process.env['AppData'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08bbe623bc031b5f — Environment-variable access.

repo/packages/core/src/sandbox/utils/proactivePermissions.ts:131

    const localAppData = process.env['LocalAppData'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d35f9383a2d8f359 — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:54

    const forbidden = fs
      .readFileSync(forbiddenPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8eda3ecfc2241eb5 — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:58

    const allowed = fs
      .readFileSync(allowedPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0bc94cf8119d4be5 — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:380

      fs.writeFileSync(longPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18789cac4579ece9 — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:381

      fs.writeFileSync(devicePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ee2185db43af38de — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:490

    fs.writeFileSync(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ae0fa17ee1d6859 — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:507

    fs.writeFileSync(maliciousPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb19d40648c33746 — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:524

    fs.writeFileSync(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a845f4c7b13539b5 — Environment-variable access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:124

          const systemRoot = process.env['SystemRoot'] || 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b60eb60c14aab180 — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:425

    await fs.promises.writeFile(
      forbiddenManifestPath,
      Array.from(forbiddenManifest).join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9c604d88a8628bc — Filesystem access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:431

    await fs.promises.writeFile(
      allowedManifestPath,
      Array.from(allowedManifest).join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aeea2159c84a2dc8 — Environment-variable access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:468

    const systemRoot = process.env['SystemRoot'] || 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2d443d42404c7a1 — Environment-variable access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:469

    const programFiles = process.env['ProgramFiles'] || 'C:\\Program Files';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9b51851c82d63282 — Environment-variable access.

repo/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:471

      process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dba4d91edbc0a5ef — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:35

    await fs.writeFile(
      path.join(commandsDir, 'test-cmd.toml'),
      'prompt = "test"',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #312b812fce3b8d5e — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:43

    await fs.writeFile(path.join(skillsDir, 'test-skill', 'SKILL.md'), 'body');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d9459be8ff6f48c5 — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:48

    await fs.writeFile(path.join(agentsDir, 'test-agent.md'), 'body');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01d14a3c2adf9cb0 — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:61

    await fs.writeFile(
      path.join(geminiDir, 'settings.json'),
      JSON.stringify(settings),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #36308f6ed2d88c16 — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:94

    await fs.writeFile(
      path.join(geminiDir, 'settings.json'),
      JSON.stringify(settings),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3eac10a3d0a52714 — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:124

    await fs.writeFile(path.join(geminiDir, 'settings.json'), 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4dbc59c3dcac34aa — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:135

    await fs.writeFile(path.join(geminiDir, 'settings.json'), 'null');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0cd966f04556bb0a — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:145

    await fs.writeFile(path.join(geminiDir, 'settings.json'), '[]');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b0c628ec8db6696 — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:155

    await fs.writeFile(path.join(geminiDir, 'settings.json'), '"string"');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78cce4c3c3308113 — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.test.ts:168

    await fs.writeFile(path.join(agentsDir, 'test-agent.md'), 'body');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ca65afec3eb32d5 — Filesystem access.

repo/packages/core/src/services/FolderTrustDiscoveryService.ts:141

      const content = await fs.readFile(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bcf5439d283a0794 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:289

      fs.writeFileSync(
        sessionFile,
        JSON.stringify({ ...initialData, messages: undefined }) +
          '\n' +
          (initialData.messages || [])
            .map((m: unknown) => JSON.stringify(m))
            .join('\n') +
          '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f456287593c80713 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:661

      fs.writeFileSync(sessionFile, JSON.stringify({ sessionId }) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c345dc5b50a35456 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:664

      fs.writeFileSync(logFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c1a2db64c5e6461 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:692

      fs.writeFileSync(
        sessionFile,
        JSON.stringify({ sessionId, messages: [] }, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1877cfb94cf11c30 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:699

      fs.writeFileSync(path.join(toolOutputDir, 'output.txt'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0cfa5999ece49a7f — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:717

      fs.writeFileSync(sessionFile, 'not-json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #000aa8c8a097ad57 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:741

      fs.writeFileSync(
        parentFile,
        JSON.stringify({ sessionId: parentSessionId }) + '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #39d465b146ca504a — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:750

      fs.writeFileSync(
        subagentFile,
        JSON.stringify({ sessionId: subagentSessionId, kind: 'subagent' }) +
          '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #91e12142b7fb5ff1 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:758

      fs.writeFileSync(parentLog, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c3abd7eb86976e00 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:763

      fs.writeFileSync(subagentLog, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bbab246165d57d58 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:804

      fs.writeFileSync(
        parentFile,
        JSON.stringify({ sessionId: parentSessionId }) + '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5d88700cae61c28 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:814

      fs.writeFileSync(
        subagentFile,
        JSON.stringify({ sessionId: subagentSessionId, kind: 'subagent' }) +
          '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7a6dcce982c8ca50 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:838

      fs.writeFileSync(sessionFile, JSON.stringify({ sessionId }) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6eaeb23667203aa7 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:841

      fs.writeFileSync(logFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6540164d692c0cb2 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.test.ts:878

      fs.writeFileSync(path.join(toolOutputDir, 'output.txt'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d3110840cd6e766 — Filesystem access.

repo/packages/core/src/services/chatRecordingService.ts:978

    const fileContent = await fs.promises.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f5e898621d73e85 — Filesystem access.

repo/packages/core/src/services/fileDiscoveryService.test.ts:21

    await fs.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c04852b3432fd3c — Filesystem access.

repo/packages/core/src/services/fileKeychain.ts:71

      const data = await fs.readFile(this.tokenFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #411ebd2f758aeb08 — Filesystem access.

repo/packages/core/src/services/fileKeychain.ts:102

    await fs.writeFile(this.tokenFilePath, encrypted, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d4021103c4a3d85 — Filesystem access.

repo/packages/core/src/services/fileSystemService.ts:35

    return fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cca6bdff964c648e — Filesystem access.

repo/packages/core/src/services/fileSystemService.ts:39

    await fs.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f1918342dd8ea7d3 — Filesystem access.

repo/packages/core/src/services/gitService.test.ts:200

      const actualConfigContent = await fs.readFile(gitConfigPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #893e579e14c00782 — Filesystem access.

repo/packages/core/src/services/gitService.test.ts:225

      await fs.writeFile(visibleGitIgnorePath, gitignoreContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bbc9da3d2c44785 — Filesystem access.

repo/packages/core/src/services/gitService.test.ts:231

      const copiedContent = await fs.readFile(hiddenGitIgnorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fda3d819b06569bf — Filesystem access.

repo/packages/core/src/services/gitService.test.ts:241

      const content = await fs.readFile(hiddenGitIgnorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7934ce356776cf15 — Filesystem access.

repo/packages/core/src/services/gitService.test.ts:304

      const systemConfigContent = await fs.readFile(
        path.join(repoDir, '.gitconfig_system_empty'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ace98059d8b5fbe3 — Filesystem access.

repo/packages/core/src/services/gitService.ts:140

    await fs.writeFile(gitConfigPath, gitConfigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05a340bb2123b155 — Filesystem access.

repo/packages/core/src/services/gitService.ts:143

    await fs.writeFile(shadowRepoEnv.GIT_CONFIG_SYSTEM, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d581518281745929 — Filesystem access.

repo/packages/core/src/services/gitService.ts:169

      userGitIgnoreContent = await fs.readFile(userGitIgnorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0b6a5bebe466628 — Filesystem access.

repo/packages/core/src/services/gitService.ts:176

    await fs.writeFile(shadowGitIgnorePath, userGitIgnoreContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #143e99e82f373ec8 — Environment-variable access.

repo/packages/core/src/services/keychainService.test.ts:201

      process.env['GEMINI_FORCE_FILE_STORAGE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #357d6e9f87ea8477 — Environment-variable access.

repo/packages/core/src/services/keychainService.ts:101

    const forceFileStorage = process.env[FORCE_FILE_STORAGE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #adc51aecc242efaa — Filesystem access.

repo/packages/core/src/services/memoryPatchUtils.ts:536

    content = await fs.readFile(sourcePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86b4a656b87da3d8 — Filesystem access.

repo/packages/core/src/services/memoryPatchUtils.ts:744

        source = await fs.readFile(resolvedTargetPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73913efa95a7d0ad — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:137

  await fs.writeFile(
    filePath,
    records.map((record) => JSON.stringify(record)).join('\n') + '\n',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #add67cdb2d2cb73b — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:173

      const content = JSON.parse(await fs.readFile(lockPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5503b1ac91808a3d — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:187

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c54aa2ca80523abd — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:203

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #525069a883b6d5b0 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:208

      const content = JSON.parse(await fs.readFile(lockPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1993bcd2880f2e38 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:222

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a1c1cf992960080c — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:227

      const content = JSON.parse(await fs.readFile(lockPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c7aac3c0c01e971c — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:244

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bbeaa70f914712b — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:258

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9b703415d6befb1e — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:271

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3391198304122ab3 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:290

      await fs.writeFile(lockPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #85a70d3f54884a65 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:329

      await fs.writeFile(statePath, JSON.stringify(existingState));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88d9d9a76d5b9e8d — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:378

      await fs.writeFile(
        lockPath,
        JSON.stringify({
          pid: process.pid,
          startedAt: new Date().toISOString(),
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6b8e7262b2adf046 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:461

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-err00001.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0441502aa4a2959d — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:522

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-skill001.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3565688d54b255be — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:533

          await fs.writeFile(
            path.join(newSkillDir, 'SKILL.md'),
            '# My New Skill',
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ba2d420c866be0d9 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:596

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-inbox001.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ada1ecf3f767e48b — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:606

          await fs.writeFile(
            path.join(inboxDir, 'private', 'MEMORY.patch'),
            [
              `--- /dev/null`,
              `+++ ${path.join(memoryDir, 'MEMORY.md')}`,
              `@@ -0,0 +1,1 @@`,
              `+- new project fact`,
              ``,
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d36ae55749bbc60 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:616

          await fs.writeFile(
            path.join(inboxDir, 'global', 'reply-style.patch'),
            [
              `--- /dev/null`,
              `+++ ${path.join(globalMemoryDir, 'GEMINI.md')}`,
              `@@ -0,0 +1,1 @@`,
              `+Prefer concise architecture summaries.`,
              ``,
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2354447723a4c3b5 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:699

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-malformed.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f78d1615ca3b9b64 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:715

          await fs.writeFile(
            malformedPatchPath,
            [
              `--- /dev/null`,
              `+++ ${path.join(memoryDir, 'MEMORY.md')}`,
              `@@ -0,0 +1,1 @@`,
              `+First extracted fact.`,
              `+Second extracted fact exceeds the declared hunk count.`,
              ``,
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8682e5d83a41b9d6 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1142

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-brandnew.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00b2687365f5ebc4 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1164

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-oldsess1.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9607de453e837b61 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1197

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-resumed01.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3f42b893dd169811 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1230

      await fs.writeFile(
        path.join(chatsDir, fileName),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #babe86f11cd6ccff — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1421

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-sub00001.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #06195d5e79838d23 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1443

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-short001.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b2b025a0fe2162f — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1468

        await fs.writeFile(
          path.join(
            chatsDir,
            `${SESSION_FILE_PREFIX}2025-01-0${i + 1}T00-00-cap${paddedIndex}.json`,
          ),
          JSON.stringify(conversation),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ee844d66a2eee4b3 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1493

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-proc0001.json`,
        ),
        JSON.stringify(oldConv),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a71b3c653a624aa7 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1506

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-02T00-00-fres0001.json`,
        ),
        JSON.stringify(newConv),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #16994509bdf9312b — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1582

        await fs.writeFile(
          path.join(
            chatsDir,
            `${SESSION_FILE_PREFIX}2025-01-${day}T00-00-backlog${i}.json`,
          ),
          JSON.stringify(conversation),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d4b2379fccc6cfd9 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1630

        await fs.writeFile(filePath, JSON.stringify(conversation));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3752f8cf1b68bfbb — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1693

      await fs.writeFile(statePath, JSON.stringify(state));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #733b1d5f98303e81 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1778

      await fs.writeFile(
        statePath,
        JSON.stringify({ lastProcessed: '2025-01-01' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c146ad72983c962 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1813

      await fs.writeFile(path.join(skillsDir, 'some-file.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2fe28ab24c9c439b — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1838

      await fs.writeFile(patchPath, 'this is not a valid patch');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc50a40ef36af34b — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1855

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #483a3e8c0e49c28e — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1869

      await fs.writeFile(patchPath, patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50159d755e9027e3 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1885

      await fs.writeFile(targetFile, 'alpha\nbeta\ngamma\ndelta\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29e743d189d3c1aa — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1888

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,4 +1,5 @@',
          ' alpha',
          ' beta',
          '+beta2',
          ' gamma',
          ' delta',
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -2,4 +2,5 @@',
          ' beta',
          ' beta2',
          ' gamma',
          '+gamma2',
          ' delta',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56dc7e691a1521f1 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1924

      await fs.writeFile(targetFile, 'original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3a54400fa705a35e — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1927

      await fs.writeFile(
        patchPath,
        [
          '--- /dev/null',
          `+++ ${targetFile}`,
          '@@ -0,0 +1 @@',
          '+replacement content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #884abf33cfef7379 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1942

      expect(await fs.readFile(targetFile, 'utf-8')).toBe('original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d9db73b3125b210 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1952

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3902737815875c50 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1955

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          '+++ .gemini/skills/foo/SKILL.md',
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f51cdb1118dd0e96 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1973

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d968ed7005700d8 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:1983

      await fs.writeFile(
        patchPath,
        [
          `--- ${path.join(projectSkillsDir, 'target.md')}`,
          `+++ ${path.join(projectSkillsDir, 'target.md')}`,
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0eec1e53da6ad69a — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2003

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #186f94e45c513083 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2006

      await fs.writeFile(
        patchPath,
        [
          `--- ${outsideFile}`,
          `+++ ${outsideFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #97a5cc8f7ff1f5d2 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2042

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b8e28665608d9bd — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2045

      await fs.writeFile(
        patchPath,
        [
          `--- ${path.join(linkedDir, 'escaped.md')}`,
          `+++ ${path.join(linkedDir, 'escaped.md')}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3af7435ec2f69c65 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2063

      expect(await fs.readFile(outsideFile, 'utf-8')).not.toContain('line2.5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #03010668b9c0a73e — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2088

      await fs.writeFile(existingSkill, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aa8f4f74f60d0ef8 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2094

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-patchonly.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #412a6ec489761f12 — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2105

          await fs.writeFile(
            patchPath,
            [
              `--- ${existingSkill}`,
              `+++ ${existingSkill}`,
              '@@ -1,3 +1,4 @@',
              ' line1',
              ' line2',
              '+line2.5',
              ' line3',
              '',
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c249044caa3a2cb — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2172

      await fs.writeFile(existingSkill, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #998c7aaf42c66a5c — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2173

      await fs.writeFile(
        path.join(skillsDir, 'existing-skill.patch'),
        [
          `--- ${existingSkill}`,
          `+++ ${existingSkill}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #990225ce8bf264ed — Filesystem access.

repo/packages/core/src/services/memoryService.test.ts:2191

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-oldpatch.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b02573ae1de21f74 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:436

      await fd.writeFile(JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5871366543a43389 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:463

    const content = await fs.readFile(lockPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1efaab376d8af458 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:514

    const content = await fs.readFile(statePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53361c84f6f01bab — Filesystem access.

repo/packages/core/src/services/memoryService.ts:545

  await fs.writeFile(tmpPath, JSON.stringify(state, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2eba215eb61f3581 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:744

        const content = await fs.readFile(skillPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0d32a670a131a98 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:876

      const patchContent = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef5dd1c1715bcd2b — Filesystem access.

repo/packages/core/src/services/memoryService.ts:970

        snapshot.set(relativePath, await fs.readFile(absolutePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #870681f3e7dbcfc2 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:1053

        content = await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be3929a8e9e6b049 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:1218

              await fs.readFile(path.join(skillsDir, e), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2893b41585911a16 — Filesystem access.

repo/packages/core/src/services/memoryService.ts:1355

        currentContent = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3f472e66c287a95f — Environment-variable access.

repo/packages/core/src/services/modelConfig.golden.test.ts:41

    if (process.env['UPDATE_GOLDENS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #765495880e516582 — Filesystem access.

repo/packages/core/src/services/modelConfig.golden.test.ts:43

      await fs.writeFile(
        GOLDEN_FILE_PATH,
        JSON.stringify(resolvedAliases, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fa5c382efe535b4b — Filesystem access.

repo/packages/core/src/services/modelConfig.golden.test.ts:54

      goldenContent = await fs.readFile(GOLDEN_FILE_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10d8652a271e3558 — Environment-variable access.

repo/packages/core/src/services/modelConfig.golden.test.ts:86

    if (process.env['UPDATE_GOLDENS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c425c82b4e88cec6 — Filesystem access.

repo/packages/core/src/services/modelConfig.golden.test.ts:88

      await fs.writeFile(
        RETRY_GOLDEN_FILE_PATH,
        JSON.stringify(resolvedAliases, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d777d0635290923 — Filesystem access.

repo/packages/core/src/services/modelConfig.golden.test.ts:99

      goldenContent = await fs.readFile(RETRY_GOLDEN_FILE_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1891fb55f4ac8d6f — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:233

        fs.writeFileSync(testFile, 'virtual read success');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d6382f6338daf9e1 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:542

          fs.writeFileSync(testFile, 'secret data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cc41c5407f06c02 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:593

        fs.writeFileSync(nestedFile, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5aa373a086c21de2 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:699

        fs.writeFileSync(targetFile, 'secret data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b6cef48e8d36bc1b — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:778

        fs.writeFileSync(
          path.join(mainGitDir, 'config'),
          '[core]\n\trepositoryformatversion = 0\n',
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #37b33be96850b5bd — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:791

        fs.writeFileSync(
          path.join(worktreeDir, '.git'),
          `gitdir: ${worktreeGitDir}\n`,
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b8d8e2fda6dc3a6e — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:798

        fs.writeFileSync(backlinkPath, path.join(worktreeDir, '.git'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a0ce363811b32f7d — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:802

        fs.writeFileSync(secretFile, 'git-secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6aac74046b1c0c38 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:836

        fs.writeFileSync(
          path.join(worktreeDir, '.git'),
          `gitdir: ${worktreeGitDir}\n`,
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b68123bf242802d0 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:840

        fs.writeFileSync(
          path.join(worktreeGitDir, 'gitdir'),
          path.join(worktreeDir, '.git'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #409315cda6958aca — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:928

      fs.writeFileSync(
        path.join(mainGitDir, 'config'),
        '[core]\n\trepositoryformatversion = 0\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a0423131c92c96c4 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:941

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f8a6b4536d0cfd0 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:948

      fs.writeFileSync(backlinkPath, path.join(worktreeDir, '.git'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #338f1aeb5298c583 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:952

      fs.writeFileSync(secretFile, 'git-secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4de270fd89e5ca85 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:986

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d70fe318799a7d69 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:990

      fs.writeFileSync(
        path.join(worktreeGitDir, 'gitdir'),
        path.join(worktreeDir, '.git'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f207dd30e53718dd — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:1030

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7aa97a373340c9e8 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:1034

      fs.writeFileSync(
        path.join(worktreeGitDir, 'gitdir'),
        path.join(worktreeDir, '.git'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b028bbccba0b6248 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:1073

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ac5b892d3289423 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:1077

      fs.writeFileSync(
        path.join(worktreeGitDir, 'gitdir'),
        path.join(worktreeDir, '.git'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6ee2919b4da2d35e — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:1111

      fs.writeFileSync(
        path.join(workspaceDir, '.git'),
        `gitdir: ${externalGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #856bc763281a0c06 — Filesystem access.

repo/packages/core/src/services/sandboxManager.integration.test.ts:1143

      fs.writeFileSync(testFile, 'initial');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bddce323a9c84a42 — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.test.ts:105

  await fs.writeFile(filePath, contents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #720594b4a1453941 — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.test.ts:408

      const written = JSON.parse(await fs.readFile(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b7303dd1d4903f19 — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.test.ts:436

      const lines = (await fs.readFile(filePath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d136c440a6a06e2b — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.test.ts:463

      const lines = (await fs.readFile(filePath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #79277fe7313354d9 — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.test.ts:651

      const lines = (await fs.readFile(filePath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ade48cce32ddbe8 — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.test.ts:689

      const previousLines = (await fs.readFile(previousPath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d48c466bd47da0a7 — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.test.ts:701

      const currentLines = (await fs.readFile(currentPath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #473485cc8b38cd2e — Filesystem access.

repo/packages/core/src/services/sessionSummaryUtils.ts:438

    await fs.writeFile(
      sessionPath,
      JSON.stringify(
        {
          ...freshConversation,
          ...metadataUpdate,
          lastUpdated,
        },
        null,
        2,
      ),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50762ed931691003 — Environment-variable access.

repo/packages/core/src/services/shellExecutionService.test.ts:213

    process.env['PATH'] = '/test/path';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3c6524feaa9d6d3 — Filesystem access.

repo/packages/core/src/services/trackerService.ts:74

      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14d07d0b1b90dc56 — Filesystem access.

repo/packages/core/src/services/trackerService.ts:182

    await fs.writeFile(taskPath, JSON.stringify(task, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ac12ac3cb359d285 — Filesystem access.

repo/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:211

    fs.writeFileSync(
      path.join(skillDir, 'SKILL.md'),
      SKILL_TEMPLATE.replace(/{skill_name}/g, skillName).replace(
        /{skill_title}/g,
        skillTitle,
      ),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52dafc262f987414 — Filesystem access.

repo/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:218

    fs.writeFileSync(
      path.join(skillDir, 'scripts/example_script.cjs'),
      EXAMPLE_SCRIPT.replace(/{skill_name}/g, skillName),
      { mode: 0o755 },
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #053ba888acedaa08 — Filesystem access.

repo/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:223

    fs.writeFileSync(
      path.join(skillDir, 'references/example_reference.md'),
      EXAMPLE_REFERENCE.replace(/{skill_title}/g, skillTitle),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c543ded1b3599c9e — Filesystem access.

repo/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:227

    fs.writeFileSync(
      path.join(skillDir, 'assets/example_asset.txt'),
      'Placeholder for assets.',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9f808f4e9352fb25 — Filesystem access.

repo/packages/core/src/skills/builtin/skill-creator/scripts/validate_skill.cjs:25

  const content = fs.readFileSync(skillMdPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c6887718b6f5f9f — Filesystem access.

repo/packages/core/src/skills/builtin/skill-creator/scripts/validate_skill.cjs:78

    const fileContent = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #abe87c16bbfe8932 — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:35

    await fs.writeFile(
      skillFile,
      `---\nname: my-skill\ndescription: A test skill\n---\n# Instructions\nDo something.\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cadf0f6c0df90d1e — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:53

    await fs.writeFile(path.join(notASkillDir, 'some-file.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #61b264baba1c1616 — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:88

    await fs.writeFile(skillFile, '# No frontmatter here');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1d3487c52a2388f7 — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:108

    await fs.writeFile(
      skillFile,
      `---
name: foo
description: Simple story generation assistant for fiction writing. Use for creating characters, scenes, storylines, and prose. Trigger words: character, scene, storyline, story, prose, fiction, writing.
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d9d3579c01d66241 — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:130

    await fs.writeFile(
      skillFile,
      `---
name: multi-colon
description: Use this for tasks like: coding, reviewing, testing. Keywords: async, await, promise.
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #48b2624cdf19b680 — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:153

    await fs.writeFile(
      skillFile,
      `---
name: quoted-skill
description: "A skill with colons: like this one: and another."
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2fb2989303fb1a38 — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:177

    await fs.writeFile(
      skillFile,
      `---
name: multiline-skill
description:
  Expertise in reviewing code for style, security, and performance. Use when the
  user asks for "feedback," a "review," or to "check" their changes.
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #49e489618cb19dca — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:202

    await fs.writeFile(
      skillFile,
      `---
name: 
description: 
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #038943a59b50f24b — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:222

    await fs.writeFile(
      skillFile,
      `---
  name: indented-name
  description: indented-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c0eb7c9fe853ffc — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:242

    await fs.writeFile(
      skillFile,
      `---
name:no-space-name
description:no-space-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ebca00497ad4cd22 — Filesystem access.

repo/packages/core/src/skills/skillLoader.test.ts:260

    await fs.writeFile(
      skillFile,
      `---
name: gke:prs-troubleshooter
description: Test sanitization
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16ee780bef843cfb — Filesystem access.

repo/packages/core/src/skills/skillLoader.ts:168

    const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a6aa9c93c6333e82 — Filesystem access.

repo/packages/core/src/skills/skillManager.test.ts:46

    await fs.writeFile(
      path.join(userDir, 'skill-a', 'SKILL.md'),
      `---
name: skill-user
description: user-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c0546a79578ef6b9 — Filesystem access.

repo/packages/core/src/skills/skillManager.test.ts:54

    await fs.writeFile(
      path.join(projectDir, 'skill-b', 'SKILL.md'),
      `---
name: skill-project
description: project-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00bb67e6a7f9f17e — Filesystem access.

repo/packages/core/src/skills/skillManager.test.ts:109

    await fs.writeFile(
      path.join(userDir, 'skill', 'SKILL.md'),
      `---
name: same-name
description: user-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #48bce07dd131728e — Filesystem access.

repo/packages/core/src/skills/skillManager.test.ts:117

    await fs.writeFile(
      path.join(projectDir, 'skill', 'SKILL.md'),
      `---
name: same-name
description: project-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8580d8b3a19dd20b — Filesystem access.

repo/packages/core/src/skills/skillManager.test.ts:200

    await fs.writeFile(
      path.join(skillDir, 'SKILL.md'),
      `---
name: skill1
description: desc1
---
body1`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5c9a62f4f9c8c1a2 — Filesystem access.

repo/packages/core/src/skills/skillManager.test.ts:234

    await fs.writeFile(
      path.join(projectDir, 'skill-project', 'SKILL.md'),
      `---
name: skill-project
description: project-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #b213835b7593f27b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.test.ts:221

      http.post(CLEARCUT_URL, () => HttpResponse.text(EXAMPLE_RESPONSE)),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #18a97fc335bda25b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.test.ts:913

      server.resetHandlers(http.post(CLEARCUT_URL, () => HttpResponse.error()));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #2e0cd6d551809f72 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.test.ts:932

        http.post(CLEARCUT_URL, () =>
          HttpResponse.json(
            { 'the system is down': true },
            {
              status: 500,
            },
          ),
        ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #fe96b643876d0f72 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:186

  if (process.env['SURFACE']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b980f368764ecae9 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:187

    return process.env['SURFACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a7cca2ff5b37093 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:190

  } else if (process.env['GITHUB_SHA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acf628c88ba93965 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:192

  } else if (process.env['TERM_PROGRAM'] === 'vscode') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a036fc06eab3cb95 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:203

  return process.env['GH_WORKFLOW_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d891687f75fc3e33 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:210

  return process.env['GITHUB_REPOSITORY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e85205500a9eda98 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:217

  return process.env['GITHUB_EVENT_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f272c19cff634a3 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:224

  return process.env['GH_PR_NUMBER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57fc296df2e76aff — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:231

  return process.env['GH_ISSUE_NUMBER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00c86a5d3257a786 — Environment-variable access.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:238

  return process.env['GH_CUSTOM_TRACKING_ID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9cab31c0ece93a1b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:557

      const response = await fetch(CLEARCUT_URL, {
        method: 'POST',
        body: safeJsonStringify(request),
        headers: {
          'Content-Type': 'application/json',
        },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #0a46dc997e73f41c — Environment-variable access.

repo/packages/core/src/telemetry/event-loop-monitor.ts:22

      process.env['GEMINI_EVENT_LOOP_MONITOR_ENABLED'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48499fbeb800a42c — Environment-variable access.

repo/packages/core/src/telemetry/gcp-exporters.ts:61

          process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43e98d3cb851d230 — Environment-variable access.

repo/packages/core/src/telemetry/gcp-exporters.ts:124

          process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2df2ac5f020003a — Environment-variable access.

repo/packages/core/src/telemetry/metrics.ts:1135

      process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43d1f8295654b41b — Environment-variable access.

repo/packages/core/src/telemetry/metrics.ts:1153

      process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15536e8571834483 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:156

    const originalEnv = process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #167c9a9d8f81a1b3 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:157

    process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d50e4147d4197cfb — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:168

        process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7f3f1a35fc70daa7 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:170

        delete process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #41b4b1a0a8d44313 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:205

    const originalOtlpEnv = process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e10b0cd8af03cf9b — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:206

    const originalGoogleEnv = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7a96e9a5740b33ff — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:207

    delete process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92a7ddf96da46e1d — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:208

    delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bdfd7106c5fdbd72 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:219

        process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = originalOtlpEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c43fad5f3c14acc — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:222

        process.env['GOOGLE_CLOUD_PROJECT'] = originalGoogleEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f49e67c0355ad57 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:235

    const originalOtlpEnv = process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #89aa3b541c466038 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:236

    const originalGoogleEnv = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92a2647358f4fde6 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:237

    delete process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #59f93a2825583e5d — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:238

    process.env['GOOGLE_CLOUD_PROJECT'] = 'fallback-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c9c633744e6c82c — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:258

        process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = originalOtlpEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e6ca376dd208963 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:261

        process.env['GOOGLE_CLOUD_PROJECT'] = originalGoogleEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #da604eaac95abf48 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.test.ts:263

        delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8223390fdefb55c5 — Environment-variable access.

repo/packages/core/src/telemetry/sdk.ts:250

    process.env['OTLP_GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48bb92ea61a85d2f — Environment-variable access.

repo/packages/core/src/telemetry/sdk.ts:251

    process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa0943d3d4bebd6b — Environment-variable access.

repo/packages/core/src/telemetry/sdk.ts:356

    const monitorInterval = process.env['GEMINI_MEMORY_MONITOR_INTERVAL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #08e474971152168a — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:84

    await fsp.writeFile(
      path.join(tempRootDir, 'policies', 'new-policies.txt'),
      '[[rule]]\ntoolName = "run_shell_command"\ndecision = "allow"\n',
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b13095dd39f7ead — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:160

    const updatedContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #23a44926f55082ea — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:194

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f53f82244bf2ac7 — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:230

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #daa7e6551b75d6c2 — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:269

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a2286643d2e2a15e — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:310

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #914fb4aa50c27dc8 — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:362

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f5cfff082edd79b — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:455

    await fsp.writeFile(
      path.join(plansDir, 'plan-file.txt'),
      'plan content',
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0d48d38515047e5 — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:500

    const updatedContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #afb043e95183ca2b — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:533

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d5191bb393291870 — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:571

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4197a5e96379e0f — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:611

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #98abb7d9aea59b34 — Filesystem access.

repo/packages/core/src/tools/at-reference-resolution.test.ts:662

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8bd87d78cde00e35 — Filesystem access.

repo/packages/core/src/tools/confirmation-policy.test.ts:59

            return fs.readFileSync(p, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fee4540add3cbd5e — Filesystem access.

repo/packages/core/src/tools/confirmation-policy.test.ts:64

          fs.writeFileSync(p, c);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #099deedb1fcc698e — Filesystem access.

repo/packages/core/src/tools/confirmation-policy.test.ts:163

          fs.writeFileSync(fullPath, 'existing content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5eae213410af6847 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:772

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #928be8103de96db7 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:797

      expect(fs.readFileSync(filePath, 'utf8')).toBe(newContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93b9ca4041cbf400 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:805

      fs.writeFileSync(filePath, 'Some content.', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e4e481a059a9f588 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:830

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #20f8122c6f10b64f — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:856

      expect(fs.readFileSync(filePath, 'utf8')).toBe(finalContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e0c049fe3437e74f — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:863

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #722450a86d1c6e07 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:874

      const finalContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #40ae438f485b41a4 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:890

      const finalContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c694b284472487e0 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:896

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52f0eb3dd7f18a6c — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:926

      expect(fs.readFileSync(filePath, 'utf8')).toBe(initialContent); // File is unchanged

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #536fd311fd5c3658 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:942

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cfe704a45127e9e0 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:999

        setup: (fp: string) => fs.writeFileSync(fp, 'existing content', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60dcdc6228329b80 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1005

        setup: (fp: string) => fs.writeFileSync(fp, 'content', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #012aff6b1d8cbc27 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1011

        setup: (fp: string) => fs.writeFileSync(fp, 'one one two', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c343a742c3b001c8 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1099

        fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56690a49bfa79492 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1115

            expect(fs.readFileSync(filePath, 'utf8')).toBe(finalContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f14505fa8e6a5617 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1142

      fs.writeFileSync(filePath, initialContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4803a9d0530e5e8e — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1234

        fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00acc086e3d42ba5 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1272

        const finalContent = fs.readFileSync(file.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #283239a6ce353090 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1294

      fs.writeFileSync(filePath, 'Some content.', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c8f9fed4b8316138 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1317

      fs.writeFileSync(filePath, 'Some content.', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5b15d4a3eaba1169 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1337

      fs.writeFileSync(filePath, '{"key": "value"}', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5ae749fca58844e0 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1356

      fs.writeFileSync(filePath, '{"cells": []}', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea0af952a96181d1 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1387

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #594872d6fa156356 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1418

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f7aefdb475d3a8b3 — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1455

      fs.writeFileSync(planFilePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #67eba40e2764131f — Filesystem access.

repo/packages/core/src/tools/edit.test.ts:1472

      expect(fs.readFileSync(planFilePath, 'utf8')).toBe('some new content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #068e1c8d51b67417 — Filesystem access.

repo/packages/core/src/tools/exit-plan-mode.test.ts:78

    fs.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f88ae47308dd9c42 — Filesystem access.

repo/packages/core/src/tools/exit-plan-mode.test.ts:498

      fs.writeFileSync(outsideFile, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f03885f9e7538920 — Filesystem access.

repo/packages/core/src/tools/get-internal-docs.test.ts:45

    const expectedContent = await fs.readFile(expectedDocsPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc916d6e9ce106b7 — Filesystem access.

repo/packages/core/src/tools/get-internal-docs.ts:131

      const content = await fs.readFile(resolvedPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c91832af12d73986 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:44

    await fs.writeFile(path.join(tempRootDir, '.git'), ''); // Fake git repo

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #705ffce27520c7da — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:85

    await fs.writeFile(path.join(tempRootDir, 'fileA.txt'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #67e2dd833a013a87 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:86

    await fs.writeFile(path.join(tempRootDir, 'FileB.TXT'), 'contentB'); // Different case for testing

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7a09af930fc2104e — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:90

    await fs.writeFile(path.join(tempRootDir, 'sub', 'fileC.md'), 'contentC');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a6d41e07317c6de — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:91

    await fs.writeFile(path.join(tempRootDir, 'sub', 'FileD.MD'), 'contentD'); // Different case

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #501a45177143242d — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:95

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'deep', 'fileE.log'),
      'contentE',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #31a01156cb985d35 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:101

    await fs.writeFile(path.join(tempRootDir, 'older.sortme'), 'older_content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0eb8444d27bca51f — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:104

    await fs.writeFile(path.join(tempRootDir, 'newer.sortme'), 'newer_content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #25cd1eb58535c05c — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:204

      await fs.writeFile(path.join(tempRootDir, 'file[1].txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c07d7c3616bcce71 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:220

      await fs.writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b1a44ac545277a09 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:333

      await fs.writeFile(path.join(tempRootDir, 'not-a-dir'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4efee047dd2b52d1 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:380

      await fs.writeFile(
        path.join(tempRootDir, '.gitignore'),
        'ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #258ba2bc903e7199 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:384

      await fs.writeFile(path.join(tempRootDir, 'ignored_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #144596b5aca640db — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:385

      await fs.writeFile(path.join(tempRootDir, 'visible_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1a4c5e4bea2b90a4 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:397

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        'gemini-ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ffe6640090c57bdd — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:401

      await fs.writeFile(
        path.join(tempRootDir, 'gemini-ignored_test.txt'),
        'content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6cb531f334794903 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:405

      await fs.writeFile(path.join(tempRootDir, 'visible_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #53dc258790df0474 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:417

      await fs.writeFile(
        path.join(tempRootDir, '.gitignore'),
        'ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #28037c1bd45c2877 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:421

      await fs.writeFile(path.join(tempRootDir, 'ignored_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c221fab1480e3f5 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:435

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        'gemini-ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5062b01f57e74b3 — Filesystem access.

repo/packages/core/src/tools/glob.test.ts:439

      await fs.writeFile(
        path.join(tempRootDir, 'gemini-ignored_test.txt'),
        'content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62dc734637bc64f0 — Filesystem access.

repo/packages/core/src/tools/grep-utils.ts:53

    const content = await fsPromises.readFile(absolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a6a16e4bf31aad4 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:89

    await fs.writeFile(
      path.join(tempRootDir, 'fileA.txt'),
      'hello world\nsecond line with world',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #71c8d5c7996b2bc4 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:93

    await fs.writeFile(
      path.join(tempRootDir, 'fileB.js'),
      'const foo = "bar";\nfunction baz() { return "hello"; }',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #178e78ea56decf30 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:98

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileC.txt'),
      'another world in sub dir',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb164ab3e454dabc — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:102

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileD.md'),
      '# Markdown file\nThis is a test.',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d62fd876a6502de — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:196

      await fs.writeFile(path.join(tempRootDir, '..env'), 'world in ..env');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5740ee3c603acff1 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:258

      await fs.writeFile(
        path.join(tempRootDir, 'sub', 'another.js'),
        'const greeting = "hello";',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef89386438deca13 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:368

      await fs.writeFile(
        path.join(secondDir, 'other.txt'),
        'hello from second directory\nworld in second',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #09c28485ab981fd8 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:372

      await fs.writeFile(
        path.join(secondDir, 'another.js'),
        'function world() { return "test"; }',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #14a8a59a92acdea7 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:456

      await fs.writeFile(
        path.join(secondDir, 'sub', 'test.txt'),
        'hello from second sub directory',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5a85f29488a78740 — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:585

      await fs.writeFile(
        path.join(tempRootDir, 'copyright.txt'),
        'Copyright 2025 Google LLC\nCopyright 2026 Google LLC',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eccc303aae46129b — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:609

      await fs.writeFile(
        path.join(tempRootDir, 'context.txt'),
        lines.join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f461285611e2cfd — Filesystem access.

repo/packages/core/src/tools/grep.test.ts:631

      await fs.writeFile(
        path.join(tempRootDir, 'longline.txt'),
        `Target match ${longString}`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f24164b7f322978e — Filesystem access.

repo/packages/core/src/tools/grep.ts:600

          const content = await fsPromises.readFile(fileAbsolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84cfabb38b50d422 — Filesystem access.

repo/packages/core/src/tools/line-endings.test.ts:172

      fs.writeFileSync(filePath, originalContent); // Write with CRLF (or however Node writes binary buffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #26c7b315cb6aea9a — Filesystem access.

repo/packages/core/src/tools/line-endings.test.ts:174

      fs.writeFileSync(filePath, Buffer.from('line1\r\nline2\r\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f68c253ec51a45f — Filesystem access.

repo/packages/core/src/tools/line-endings.test.ts:197

      const writtenContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d4e570dabc404163 — Filesystem access.

repo/packages/core/src/tools/line-endings.test.ts:222

      const writtenContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2207f781aaf6f8cc — Filesystem access.

repo/packages/core/src/tools/line-endings.test.ts:245

      fs.writeFileSync(filePath, Buffer.from(originalContent));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f9e7212e0233421a — Filesystem access.

repo/packages/core/src/tools/line-endings.test.ts:270

      const writtenContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #561f3a9c5bde3475 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:122

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f200dfe088389bdb — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:124

      await fs.writeFile(
        path.join(tempSecondaryDir, 'secondary-file.txt'),
        'secondary',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0986449e7a39f88 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:141

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4058f3598bd92e73 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:143

      await fs.writeFile(
        path.join(tempSecondaryDir, 'secondary-file.txt'),
        'secondary',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a4673d4c48f2ab2c — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:169

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b74d8599acf3eb8e — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:170

      await fs.writeFile(path.join(tempRootDir, 'file2.log'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #867a1bcb3b5b0ea6 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:187

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e97f6d3d57aa8917 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:188

      await fs.writeFile(path.join(tempRootDir, 'file2.log'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0a22c60f6a8b56da — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:189

      await fs.writeFile(path.join(tempRootDir, '.git'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76523c5c1072c7db — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:190

      await fs.writeFile(path.join(tempRootDir, '.gitignore'), '*.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a890e24da697f52 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:203

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a6c6cc90f1300ddd — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:204

      await fs.writeFile(path.join(tempRootDir, 'file2.log'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15c8c6c70f01fd11 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:205

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        '*.log',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #430d436964e9a171 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:221

      await fs.writeFile(testPath, 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1f59e7aa089c58d — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:242

      await fs.writeFile(path.join(tempRootDir, 'a-file.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e62b2ac65caa49f — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:243

      await fs.writeFile(path.join(tempRootDir, 'b-file.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3cbd352e89bee3ce — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:282

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e64434bc51c5b0a — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:284

      await fs.writeFile(problematicFile, 'content2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #edbfefd1f8abce88 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:357

      await fs.writeFile(
        path.join(tempSecondaryDir, 'secondary-file.txt'),
        'secondary',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #33b339fcc728fef8 — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:378

      await fs.writeFile(path.join(tempRootDir, 'jit-file.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #252cde571678fe1c — Filesystem access.

repo/packages/core/src/tools/ls.test.ts:392

      await fs.writeFile(
        path.join(tempRootDir, 'jit-disabled-file.txt'),
        'content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #191220d2a176ee24 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2242

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #61642d6c1613529d — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2260

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #d8a231b3432d3611 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2280

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #f04f384f751f3892 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2298

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #0880ec34279c3c2f — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2315

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #0073636bad2a5672 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2334

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #b6d255f1e3ccd44b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2355

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #f3b5b035fbb27da1 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.test.ts:2376

          _url: new URL('http://test-server-http'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7829bf2cd1eb9133 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.ts:378

    return this.client!.request(
      {
        method: 'resources/read',
        params: { uri },
      },
      ReadResourceResultSchema,
      options,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2501188e54a87fd5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.ts:1562

      const response = await mcpClient.request(
        {
          method: 'resources/list',
          params: cursor ? { cursor } : {},
        },
        ListResourcesResultSchema,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #04ef535402ddd87a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/tools/mcp-client.ts:2021

          const response = await fetch(urlToFetch, {
            method: 'HEAD',
            headers: {
              Accept: acceptHeader,
            },
            signal: AbortSignal.timeout(5000),
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #43f7a0bcf0737a6d — Environment-variable access.

repo/packages/core/src/tools/mcp-client.ts:2192

  const noProxy = process.env['NO_PROXY'] || process.env['no_proxy'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #77b4cae0de820117 — Filesystem access.

repo/packages/core/src/tools/modifiable-tool.test.ts:82

      await fsp.writeFile(newPath, modifiedContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f705e9c340c2a9d — Filesystem access.

repo/packages/core/src/tools/modifiable-tool.test.ts:168

        await fsp.writeFile(newPath, modifiedContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f310f9f966e37a77 — Filesystem access.

repo/packages/core/src/tools/modifiable-tool.test.ts:187

      await fsp.writeFile(newPath, modifiedContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc6a951d5ab4907d — Filesystem access.

repo/packages/core/src/tools/modifiable-tool.ts:93

  fs.writeFileSync(tempOldPath, currentContent, {
    encoding: 'utf8',
    mode: 0o600,
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #725760ddebeaf788 — Filesystem access.

repo/packages/core/src/tools/modifiable-tool.ts:97

  fs.writeFileSync(tempNewPath, proposedContent, {
    encoding: 'utf8',
    mode: 0o600,
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6000c565302637a2 — Filesystem access.

repo/packages/core/src/tools/modifiable-tool.ts:115

    oldContent = fs.readFileSync(tmpOldPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #738fe6d5e94aaecc — Filesystem access.

repo/packages/core/src/tools/modifiable-tool.ts:122

    newContent = fs.readFileSync(tempNewPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e0f049dee951caa — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:238

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d6af2f1b52cae6f8 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:276

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0805727d80d20b03 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:316

      await fsp.writeFile(filePath, largeContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5f83abfb01bf1d2 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:332

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dcb0c256e5570d23 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:350

      await fsp.writeFile(imagePath, pngHeader);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #499b85e33a6f10af — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:368

      await fsp.writeFile(pdfPath, pdfHeader);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2bbbb4f7a89a3374 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:386

      await fsp.writeFile(binPath, binaryData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3ed104cd0ed33037 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:400

      await fsp.writeFile(svgPath, svgContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0708223359dbe162 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:413

      await fsp.writeFile(svgPath, largeContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7dad8b8a847d424c — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:428

      await fsp.writeFile(emptyPath, '', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f8d5b5e5f2f22933 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:441

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bdfa86ed80528af7 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:470

      await fsp.writeFile(tempFilePath, tempFileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb47f8ab28df3ef4 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:482

        await fsp.writeFile(
          path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
          ['foo.*', 'ignored/'].join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5a89d4f976deb2ed — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:525

        await fsp.writeFile(ignoredFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1a63a763fa43cc5 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:537

        await fsp.writeFile(ignoredFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d24f5d8b2ebf5cc — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:547

        await fsp.writeFile(allowedFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ed506857405b559f — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:557

        await fsp.writeFile(ignoredFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #05c1233db31f0097 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:642

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a766c0d07d442003 — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:658

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #183e06cf0bb820ec — Filesystem access.

repo/packages/core/src/tools/read-file.test.ts:684

      await fsp.writeFile(filePath, pngHeader);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b61afeebfcde6288 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:92

    fs.writeFileSync(path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME), 'foo.*');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76840996d9b46fa5 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:150

          return originalFs.promises.readFile(fp, options);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f282d3228bdc2148 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:263

      fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7dd00c2946ace888 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:268

      fs.writeFileSync(fullPath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #94566fc7c945c48c — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:606

      fs.writeFileSync(path.join(tempDir1, 'file1.txt'), 'Content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f5ebad52d0e674ae — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:607

      fs.writeFileSync(path.join(tempDir2, 'file2.txt'), 'Content2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe3896a34995c889 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:752

      fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #41ae48216f244062 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:876

      fs.writeFileSync(
        path.join(tempRootDir, 'jit-test.ts'),
        'const x = 1;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #53acbd56fe322446 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:899

      fs.writeFileSync(
        path.join(tempRootDir, 'jit-disabled-test.ts'),
        'const y = 2;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e5b610716bef3dd4 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:938

      fs.writeFileSync(
        path.join(tempRootDir, 'subA', 'a.ts'),
        'const a = 1;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5e3caad211e45ce8 — Filesystem access.

repo/packages/core/src/tools/read-many-files.test.ts:943

      fs.writeFileSync(
        path.join(tempRootDir, 'subB', 'b.ts'),
        'const b = 2;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e8d313d77b003673 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:171

    await fs.writeFile(
      path.join(tempRootDir, 'fileA.txt'),
      'hello world\nsecond line with world',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #df3a7d2282647a00 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:175

    await fs.writeFile(
      path.join(tempRootDir, 'fileB.js'),
      'const foo = "bar";\nfunction baz() { return "hello"; }',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b863bea5529199f — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:180

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileC.txt'),
      'another world in sub dir',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b529201eb38d83e5 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:184

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileD.md'),
      '# Markdown file\nThis is a test.',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #47cc2c9ebccd1744 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:407

      await fs.writeFile(
        path.join(tempRootDir, 'sub', 'another.js'),
        'const greeting = "hello";',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #433e8e75d18548b0 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:561

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        'ignored.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e38fbf5a4e449e8b — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:707

      await fs.writeFile(
        path.join(secondDir, 'other.txt'),
        'hello from second directory\nworld in second',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a6dcfe9005ee327b — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:711

      await fs.writeFile(
        path.join(secondDir, 'another.js'),
        'function world() { return "test"; }',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e4a17cdc08f0644 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:792

      await fs.writeFile(
        path.join(secondDir, 'sub', 'test.txt'),
        'hello from second sub directory',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a26e857270e81916 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:900

          await fs.writeFile(path.join(tempRootDir, 'empty.txt'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #749f42d2455decea — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:916

      await fs.writeFile(
        path.join(tempRootDir, specialFileName),
        'hello world with special chars',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29f06470efa321db — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:947

      await fs.writeFile(
        path.join(deepPath, 'deep.txt'),
        'content in deep directory',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #954630208fca4a24 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:978

      await fs.writeFile(
        path.join(tempRootDir, 'code.js'),
        'function getName() { return "test"; }\nconst getValue = () => "value";',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6dabe2bf1251373b — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1010

      await fs.writeFile(
        path.join(tempRootDir, 'case.txt'),
        'Hello World\nhello world\nHELLO WORLD',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d38c85d04b910199 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1059

      await fs.writeFile(
        path.join(tempRootDir, 'special.txt'),
        'Price: $19.99\nRegex: [a-z]+ pattern\nEmail: [email protected]',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01dfbfc8ec6b7b0d — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1093

      await fs.writeFile(
        path.join(tempRootDir, 'test.ts'),
        'typescript content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0383046c18b6158e — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1097

      await fs.writeFile(path.join(tempRootDir, 'test.tsx'), 'tsx content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #914b5e2e3e0234df — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1098

      await fs.writeFile(
        path.join(tempRootDir, 'test.js'),
        'javascript content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c7bbd0dc64bb9af0 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1102

      await fs.writeFile(path.join(tempRootDir, 'test.txt'), 'text content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a58049a732d3d960 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1144

      await fs.writeFile(
        path.join(tempRootDir, 'src', 'main.ts'),
        'source code',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01732cfb688a9799 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1148

      await fs.writeFile(path.join(tempRootDir, 'other.ts'), 'other code');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00978063a36da767 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1357

      await fs.writeFile(geminiIgnorePath, 'ignored.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7938d50c12c11311 — Filesystem access.

repo/packages/core/src/tools/ripGrep.test.ts:1403

      await fs.writeFile(geminiIgnorePath, 'ignored.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46f280d8cd457322 — Environment-variable access.

repo/packages/core/src/tools/shell.test.ts:90

const originalComSpec = process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d2c1539da862217 — Environment-variable access.

repo/packages/core/src/tools/shell.test.ts:204

    process.env['ComSpec'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4aef3c56d7365a4c — Environment-variable access.

repo/packages/core/src/tools/shell.test.ts:250

      delete process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d26e268c63c3907 — Environment-variable access.

repo/packages/core/src/tools/shell.test.ts:252

      process.env['ComSpec'] = originalComSpec;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #696f0d60b806bd48 — Filesystem access.

repo/packages/core/src/tools/shell.test.ts:317

      fs.writeFileSync(extractedTmpFile, `54321${os.EOL}54322${os.EOL}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ff57fa09a85f1de — Filesystem access.

repo/packages/core/src/tools/shell.test.ts:352

      fs.writeFileSync(extractedTmpFile, `67890${os.EOL}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ca9c19bd5d1ffde — Filesystem access.

repo/packages/core/src/tools/shell.test.ts:353

      expect(fs.readFileSync(extractedTmpFile, 'utf8').trim()).toBe('67890');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e396e745c7dc89bf — Filesystem access.

repo/packages/core/src/tools/shell.test.ts:660

          fs.writeFileSync(extractedTmpFile, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9676afc366710ef1 — Environment-variable access.

repo/packages/core/src/tools/shell.ts:209

      const systemRoot = process.env['SystemRoot'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #620eed9205b9dfbc — Environment-variable access.

repo/packages/core/src/tools/shell.ts:214

      const programFiles = process.env['ProgramFiles'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a740228db096a64 — Environment-variable access.

repo/packages/core/src/tools/shell.ts:216

      const programFilesX86 = process.env['ProgramFiles(x86)'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #868e5ae601fce0f7 — Filesystem access.

repo/packages/core/src/tools/shell.ts:742

          const backgroundPIDContent = await fsPromises.readFile(
            tempFilePath,
            'utf8',
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #859df1f3e4797dc3 — Filesystem access.

repo/packages/core/src/tools/shellBackgroundTools.integration.test.ts:54

    fs.writeFileSync(
      scriptPath,
      "setInterval(() => console.log('Log line'), 100);",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a4afe74723907fc9 — Filesystem access.

repo/packages/core/src/tools/shellBackgroundTools.test.ts:152

    fs.writeFileSync(logPath, 'line 1\nline 2\nline 3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d6d663af67c7b44 — Filesystem access.

repo/packages/core/src/tools/shellBackgroundTools.test.ts:211

    fs.writeFileSync(logPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0464c7d6d83102dd — Filesystem access.

repo/packages/core/src/tools/shellBackgroundTools.test.ts:243

    fs.writeFileSync(logPath, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4694399a43a09c0e — Filesystem access.

repo/packages/core/src/tools/shellBackgroundTools.test.ts:281

    fs.writeFileSync(logPath, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ed9a105bcf6da238 — Filesystem access.

repo/packages/core/src/tools/shellBackgroundTools.test.ts:320

    fs.writeFileSync(logPath, 'line1\nline2\nline3\nline4\nline5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #177834d358e4ae97 — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:406

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6a2c231fad9bd8a2 — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:468

      fs.writeFileSync(filePath, 'content', { mode: 0o000 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6258c460ecbce52f — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:503

      fs.writeFileSync(filePath, 'original', { mode: 0o000 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f90b59315e66b53d — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:557

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #327602c8df3d188a — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:738

      fs.writeFileSync(filePath, 'original', { mode: 0o000 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ed1667b2593e610a — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:807

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0aebf552b0718ed6 — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:854

      expect(fs.readFileSync(filePath, 'utf8')).toBe(content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d2558b70be5e7c82 — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:914

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #09f0c6a97ca38326 — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:1104

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56bdea39caf9994a — Filesystem access.

repo/packages/core/src/tools/write-file.test.ts:1186

      expect(fs.readFileSync(expectedWritePath, 'utf8')).toBe('nested content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e47f9271dd81fcad — Filesystem access.

repo/packages/core/src/utils/bfsFileSearch.test.ts:27

    await fsPromises.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #06bebaedd97ae5a3 — Filesystem access.

repo/packages/core/src/utils/bfsFileSearch.test.ts:250

    await fsPromises.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d4ed7741ef571c1 — Environment-variable access.

repo/packages/core/src/utils/browser.ts:18

  const browserEnv = process.env['BROWSER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44f99a2171824506 — Environment-variable access.

repo/packages/core/src/utils/browser.ts:24

    process.env['CI'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9001984fca2220b6 — Environment-variable access.

repo/packages/core/src/utils/browser.ts:25

    process.env['DEBIAN_FRONTEND'] === 'noninteractive'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #661fe2589b55a565 — Environment-variable access.

repo/packages/core/src/utils/browser.ts:33

  const isSSH = !!process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f44b251cdf475133 — Environment-variable access.

repo/packages/core/src/utils/browser.ts:40

    const hasDisplay = displayVariables.some((v) => !!process.env[v]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7759d0bffa691407 — Filesystem access.

repo/packages/core/src/utils/browserConsent.ts:86

    await fs.writeFile(
      consentFilePath,
      `Browser privacy consent acknowledged at ${new Date().toISOString()}\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80d4013192bffee5 — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:40

  return !!process.env['TMUX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd159cea3f97beac — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:47

  return !!process.env['STY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a3fbd6509c55e6f — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:54

  const term = process.env['TERM'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a383a24d9133112 — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:55

  return isTmux() && term.startsWith('screen') && !process.env['COLORTERM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8358f774d10c5672 — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:62

  const term = process.env['TERM'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97d6b5149b434082 — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:70

  return process.env['TERM_PROGRAM'] === 'Apple_Terminal';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ca4f756b1c76e54 — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:83

  const term = process.env['TERM'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74100fd7d7949a14 — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:102

    process.env['COLORTERM'] === 'truecolor' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c305cc89c7a3889a — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:103

    process.env['COLORTERM'] === '24bit' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d35a1b806edc7fdc — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:104

    process.env['COLORTERM'] === 'kmscon'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d6d001cd4d9836e — Environment-variable access.

repo/packages/core/src/utils/compatibility.ts:173

    const term = process.env['TERM'] || 'dumb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f03d0c0d92552f8f — Environment-variable access.

repo/packages/core/src/utils/debugLogger.ts:27

    this.logStream = process.env['GEMINI_DEBUG_LOG_FILE']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ced61f123e1c88f4 — Environment-variable access.

repo/packages/core/src/utils/debugLogger.ts:28

      ? fs.createWriteStream(process.env['GEMINI_DEBUG_LOG_FILE'], {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8893fb0cf5e15f6 — Environment-variable access.

repo/packages/core/src/utils/editor.ts:264

  const notUsingSandbox = !process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4debf71610ae848a — Filesystem access.

repo/packages/core/src/utils/errorReporting.test.ts:52

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3aa313e6c014542a — Filesystem access.

repo/packages/core/src/utils/errorReporting.test.ts:75

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be4215312d0d9053 — Filesystem access.

repo/packages/core/src/utils/errorReporting.test.ts:96

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4579ecc9404e854c — Filesystem access.

repo/packages/core/src/utils/errorReporting.test.ts:171

    const reportContent = await fs.readFile(expectedMinimalReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5df0d68d82b73135 — Filesystem access.

repo/packages/core/src/utils/errorReporting.test.ts:192

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17719d5f81e28e7a — Filesystem access.

repo/packages/core/src/utils/errorReporting.ts:81

      await fs.writeFile(reportPath, stringifiedReportContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88183627233c97bd — Filesystem access.

repo/packages/core/src/utils/errorReporting.ts:96

    await fs.writeFile(reportPath, stringifiedReportContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad370698724f37d0 — Environment-variable access.

repo/packages/core/src/utils/fetch.ts:177

    process.env['NO_PROXY'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73ca72f17acb985f — Environment-variable access.

repo/packages/core/src/utils/fetch.ts:178

    process.env['no_proxy'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #f53ae55040918970 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/utils/fetch.ts:209

    const response = await fetch(url, {
      ...options,
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #9d0c714925a6da1c — Environment-variable access.

repo/packages/core/src/utils/fetch.ts:236

    process.env['NO_PROXY'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fcaa078ff745c30 — Environment-variable access.

repo/packages/core/src/utils/fetch.ts:237

    process.env['no_proxy'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c7e9f4e35494c2e0 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:100

        await fsPromises.readFile(wasmFixturePath),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3f551e204aab7dc0 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:183

      actualNodeFs.writeFileSync(testFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c286eb68c39d6753 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:195

      actualNodeFs.writeFileSync(targetFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eba88b32cf2ffcaf — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:205

      actualNodeFs.writeFileSync(testFile, 'some content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c41bbba266a8da4 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:211

      actualNodeFs.writeFileSync(testFile, '   ');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f1733fa87c7a45fc — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:224

      actualNodeFs.writeFileSync(testFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c7a43557a380535 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:254

      actualNodeFs.writeFileSync(filePathForBinaryTest, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1c41f18ec38dd4b8 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:259

      actualNodeFs.writeFileSync(
        filePathForBinaryTest,
        'Hello, world!\nThis is a test file with normal text content.',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c7d04fa91c5b5965 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:270

      actualNodeFs.writeFileSync(filePathForBinaryTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1c72978a1ff37203 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:278

      actualNodeFs.writeFileSync(filePathForBinaryTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #811bc74ccb4f2a2f — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:293

      actualNodeFs.writeFileSync(filePathForBinaryTest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c276b4c0ba5c242 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:299

      actualNodeFs.writeFileSync(filePathForBinaryTest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f71d1ece67f9aa3 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:305

      actualNodeFs.writeFileSync(filePathForBinaryTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce4776b9aef100da — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:392

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e105306effb9e3db — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:405

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84f0c994513c8674 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:435

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6a5af7489de3afaf — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:460

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e44b10683daddd50 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:485

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cc03285ee656f897 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:494

        await fsPromises.writeFile(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #31f3e439b566ab02 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:502

        await fsPromises.writeFile(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78fcfb14a26760d0 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:517

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #98a8f2a059ce0c8f — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:530

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b52eedce1e63885a — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:570

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aaec76b9131faad1 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:603

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8b2565568a36f9ae — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:636

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #233dd16c602008a7 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:652

        await fsPromises.writeFile(filePath, fullContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #896cf79d0700c494 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:663

        await fsPromises.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4eff976afe5e4d7e — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:677

      actualNodeFs.writeFileSync(filePathForDetectTest, 'Plain text content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bedbc35e4d7f7516 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:720

        actualNodeFs.writeFileSync(filePath, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d97a59b343a6033b — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:731

      actualNodeFs.writeFileSync(
        filePath,
        Buffer.from([0x66, 0x4c, 0x61, 0x43, 0x00, 0x00, 0x00, 0x22]),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #98a715d0f5742297 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:753

      actualNodeFs.writeFileSync(filePathForDetectTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ba2fd9bb772fb1d — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:773

      actualNodeFs.writeFileSync(adpFilePath, xmlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6fa6df15e543a7a7 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:801

      actualNodeFs.writeFileSync(testTextFilePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dda654264ab9c2fb — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:823

      actualNodeFs.writeFileSync(testTextFilePath, 'content'); // File must exist for initial statSync

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #05fa263d63ab9087 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:837

      actualNodeFs.writeFileSync(testImageFilePath, 'content'); // File must exist

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c04791d94712495a — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:853

      actualNodeFs.writeFileSync(testImageFilePath, fakePngData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb095d7374e38736 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:875

      actualNodeFs.writeFileSync(testPdfFilePath, fakePdfData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #45379c6b26a3a8c0 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:900

      actualNodeFs.writeFileSync(testAudioFilePath, fakeMp3Data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e70cffaf0f0098bf — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:925

      actualNodeFs.writeFileSync(wavFilePath, fakeWavData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #548a35ff5dd6fd5f — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:942

      actualNodeFs.writeFileSync(
        unsupportedAudioPath,
        Buffer.from([0x00, 0x01, 0x02, 0x03]),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7daf48d4c4798909 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:964

      actualNodeFs.writeFileSync(testVideoFilePath, fakeMp4Data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a974fc3a7071b3f — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:991

      actualNodeFs.writeFileSync(testSvgFilePath, svgContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00d270a3dceebfea — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1006

      actualNodeFs.writeFileSync(
        testBinaryFilePath,
        Buffer.from([0x00, 0x01, 0x02]),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #441b268ab1de5b64 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1036

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e79c9ecc462c5ca — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1056

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b5daecb99f94458 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1077

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e5912b5cedc2d20e — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1097

      actualNodeFs.writeFileSync(
        testTextFilePath,
        `Short line\n${longLine}\nAnother short line`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b09cbf81c8ef6bc — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1121

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b603ee2dfb98aa61 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1141

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e83b41175c409c52 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1164

      actualNodeFs.writeFileSync(
        testTextFilePath,
        linesWithLongInMiddle.join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b9c529398cbf1370 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1185

      actualNodeFs.writeFileSync(testTextFilePath, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d61d5b98a640a3d5 — Filesystem access.

repo/packages/core/src/utils/fileUtils.test.ts:1231

      const savedContent = await fsPromises.readFile(
        expectedOutputFile,
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7e4b376b6edad35 — Filesystem access.

repo/packages/core/src/utils/fileUtils.ts:31

  const buffer = await fsPromises.readFile(resolvedPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ebc03692130a5e5 — Filesystem access.

repo/packages/core/src/utils/fileUtils.ts:168

  const full = await fs.promises.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bc007b301c56cc2 — Filesystem access.

repo/packages/core/src/utils/fileUtils.ts:587

        const contentBuffer = await fs.promises.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f904a04a7360ca52 — Filesystem access.

repo/packages/core/src/utils/fileUtils.ts:604

        const contentBuffer = await fs.promises.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b513aaeaa75af32a — Filesystem access.

repo/packages/core/src/utils/fileUtils.ts:709

  await fsPromises.writeFile(outputFile, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1f771313c9046985 — Filesystem access.

repo/packages/core/src/utils/filesearch/crawler.test.ts:410

      await fs.writeFile(path.join(tmpDir, '.gitignore'), 'b.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a60263ad4c714b17 — Filesystem access.

repo/packages/core/src/utils/filesearch/fileSearch.test.ts:205

    await fs.writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ae78d1591af862f — Filesystem access.

repo/packages/core/src/utils/filesearch/fileWatcher.test.ts:54

    await fs.writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8ecb04210e5388f4 — Filesystem access.

repo/packages/core/src/utils/filesearch/fileWatcher.test.ts:87

    await fs.writeFile(path.join(tmpDir, 'ignored.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e07933b5e63e97b9 — Filesystem access.

repo/packages/core/src/utils/filesearch/fileWatcher.test.ts:88

    await fs.writeFile(path.join(tmpDir, 'kept.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3ccd585d2831b0fa — Filesystem access.

repo/packages/core/src/utils/filesearch/fileWatcher.test.ts:146

    await fs.writeFile(path.join(tmpDir, 'nested', 'file.txt'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #03f0652c4bb8b481 — Filesystem access.

repo/packages/core/src/utils/filesearch/fileWatcher.test.ts:179

    await fs.writeFile(beforeStopFile, 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #968ba94e88099db0 — Filesystem access.

repo/packages/core/src/utils/filesearch/fileWatcher.test.ts:189

    await fs.writeFile(path.join(tmpDir, 'after-stop.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7338db271c963993 — Filesystem access.

repo/packages/core/src/utils/filesearch/fileWatcher.test.ts:208

    await fs.writeFile(path.join(tmpDir, 'idempotent.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f2a62086b1bfa14 — Filesystem access.

repo/packages/core/src/utils/filesearch/ignore.ts:26

      ignorer.add(fs.readFileSync(filePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #89c54eaaa1471291 — Filesystem access.

repo/packages/core/src/utils/getFolderStructure.test.ts:27

    await fsPromises.writeFile(fullPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c64baad848311cc — Filesystem access.

repo/packages/core/src/utils/getFolderStructure.test.ts:252

      await fsPromises.writeFile(
        path.join(testRootDir, '.gitignore'),
        'ignored.txt\nnode_modules/\n.gemini/*\n!/.gemini/config.yaml',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f9f1b813adfdc3b2 — Filesystem access.

repo/packages/core/src/utils/getFolderStructure.test.ts:275

      await fsPromises.writeFile(
        path.join(testRootDir, '.gitignore'),
        'ignored.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #427f24b4bffbecf9 — Filesystem access.

repo/packages/core/src/utils/getFolderStructure.test.ts:299

      await fsPromises.writeFile(
        path.join(testRootDir, GEMINI_IGNORE_FILE_NAME),
        'ignored.txt\nnode_modules/\n.gemini/\n!/.gemini/config.yaml',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a8c237817072fb04 — Filesystem access.

repo/packages/core/src/utils/getFolderStructure.test.ts:319

      await fsPromises.writeFile(
        path.join(testRootDir, GEMINI_IGNORE_FILE_NAME),
        'ignored.txt\nnode_modules/\n.gemini/\n!/.gemini/config.yaml',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0161ba3bbd5441c0 — Environment-variable access.

repo/packages/core/src/utils/getPty.ts:21

  if (process.env['GEMINI_PTY_INFO'] === 'child_process') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4d48cd0be283422f — Filesystem access.

repo/packages/core/src/utils/gitIgnoreParser.test.ts:20

    await fs.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de413b2795b47468 — Filesystem access.

repo/packages/core/src/utils/gitIgnoreParser.ts:42

      content = fs.readFileSync(patternsFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5437d87bddf0be02 — Environment-variable access.

repo/packages/core/src/utils/headless.ts:31

  if (process.env['GEMINI_CLI_INTEGRATION_TEST'] !== 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b370b9f2d9924f1 — Environment-variable access.

repo/packages/core/src/utils/headless.ts:33

      process.env['CI'] === 'true' || process.env['GITHUB_ACTIONS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce1747db22d38f88 — Filesystem access.

repo/packages/core/src/utils/ignoreFileParser.test.ts:20

    await fs.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82d5a768070fc7ca — Filesystem access.

repo/packages/core/src/utils/ignoreFileParser.ts:65

      content = fs.readFileSync(patternsFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0395c02ce01b65c1 — Filesystem access.

repo/packages/core/src/utils/installationManager.test.ts:86

      expect(fs.readFileSync(installationIdFile(), 'utf-8')).toBe(newId);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #686a2f3d91eae7f0 — Filesystem access.

repo/packages/core/src/utils/installationManager.test.ts:92

      fs.writeFileSync(installationIdFile(), existingId);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f572e9a6f28507c9 — Filesystem access.

repo/packages/core/src/utils/installationManager.ts:21

      const installationid = fs
        .readFileSync(installationIdFile, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6348d558b5576afd — Filesystem access.

repo/packages/core/src/utils/installationManager.ts:33

    fs.writeFileSync(installationIdFile, installationId, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #35a99e55bc836dbe — Filesystem access.

repo/packages/core/src/utils/memoryDiscovery.test.ts:65

    await fsPromises.writeFile(fullPath, fileContents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #148f1d73aff129a7 — Environment-variable access.

repo/packages/core/src/utils/memoryDiscovery.ts:184

          process.env['NODE_ENV'] === 'test' || process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ad02f79d534325f — Filesystem access.

repo/packages/core/src/utils/memoryDiscovery.ts:223

          const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5cc6e748f2c79102 — Environment-variable access.

repo/packages/core/src/utils/memoryDiscovery.ts:258

              process.env['NODE_ENV'] === 'test' || process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1f50d7ef89c05863 — Filesystem access.

repo/packages/core/src/utils/memoryImportProcessor.test.ts:884

        fsSync.writeFileSync(path.join(outsideDir, 'sensitive.md'), 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bf580d3b637c4be — Filesystem access.

repo/packages/core/src/utils/memoryImportProcessor.ts:278

          const importedContent = await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1e3e2f8c0760888 — Filesystem access.

repo/packages/core/src/utils/memoryImportProcessor.ts:347

      const fileContent = await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #018d171c646a7b16 — Environment-variable access.

repo/packages/core/src/utils/oauth-flow.ts:200

      const portStr = process.env['OAUTH_CALLBACK_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #6bc8074d0aa034ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/utils/oauth-flow.ts:472

  const response = await fetch(config.tokenUrl, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/x-www-form-urlencoded',
      Accept: 'application/json, application/x-www-form-urlencoded',
    },
    body: params.toString(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8bfa11847c4fee09 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/utils/oauth-flow.ts:525

  const response = await fetch(tokenUrl, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/x-www-form-urlencoded',
      Accept: 'application/json, application/x-www-form-urlencoded',
    },
    body: params.toString(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #bfc152de32a66bd7 — Filesystem access.

repo/packages/core/src/utils/pathCorrector.test.ts:51

    fs.writeFileSync(path.join(rootDir, testFile), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d132175ebc27465 — Filesystem access.

repo/packages/core/src/utils/pathCorrector.test.ts:66

    fs.writeFileSync(fullPath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #94615a8e9377d76b — Filesystem access.

repo/packages/core/src/utils/pathCorrector.test.ts:94

    fs.writeFileSync(path.join(subDir1, ambiguousFile), 'content 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d8b3086ae7f6f99 — Filesystem access.

repo/packages/core/src/utils/pathCorrector.test.ts:95

    fs.writeFileSync(path.join(subDir2, ambiguousFile), 'content 2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db10f3801a586412 — Environment-variable access.

repo/packages/core/src/utils/paths.ts:23

  const envHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f862c708ac20085 — Environment-variable access.

repo/packages/core/src/utils/paths.ts:532

    !!process.env['TEST_SRCDIR'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee0c7ab211eba127 — Environment-variable access.

repo/packages/core/src/utils/paths.ts:533

    !!process.env['TEST_WORKSPACE'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca00d41539183b26 — Environment-variable access.

repo/packages/core/src/utils/paths.ts:534

    !!process.env['BAZEL_TEST'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa9429c87252b457 — Environment-variable access.

repo/packages/core/src/utils/paths.ts:535

    !!process.env['RUNFILES_DIR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #421b65d1ce31d005 — Environment-variable access.

repo/packages/core/src/utils/paths.ts:547

      process.env['SystemRoot'] || 'C:\\Windows',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d49c433d028c6cc — Environment-variable access.

repo/packages/core/src/utils/paths.ts:548

      process.env['ProgramFiles'] || 'C:\\Program Files',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e34ee4e7717c17d — Environment-variable access.

repo/packages/core/src/utils/paths.ts:549

      process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1aebae53b9b8b70e — Filesystem access.

repo/packages/core/src/utils/planUtils.test.ts:36

      fs.writeFileSync(fullPath, '# My Plan');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #594ed535d115987d — Filesystem access.

repo/packages/core/src/utils/planUtils.test.ts:54

      fs.writeFileSync(outsideFile, 'secret content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #638db09ec1676ed2 — Filesystem access.

repo/packages/core/src/utils/planUtils.test.ts:71

      fs.writeFileSync(planPath, 'some content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2dfd4d1740dc0997 — Filesystem access.

repo/packages/core/src/utils/planUtils.test.ts:78

      fs.writeFileSync(planPath, '   ');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bee27c7cce5096bf — Environment-variable access.

repo/packages/core/src/utils/retry.ts:230

      process.env['GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d21a359ff8c8a22b — Environment-variable access.

repo/packages/core/src/utils/retry.ts:231

      process.env['GOOGLE_CLOUD_PROJECT_ID']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31b79be060bbdc57 — Environment-variable access.

repo/packages/core/src/utils/secure-browser-launcher.ts:154

  const browserEnv = process.env['BROWSER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f15d6fc77f3237e9 — Environment-variable access.

repo/packages/core/src/utils/secure-browser-launcher.ts:161

    process.env['CI'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3a2057f7ab126f7 — Environment-variable access.

repo/packages/core/src/utils/secure-browser-launcher.ts:162

    process.env['DEBIAN_FRONTEND'] === 'noninteractive'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d5d1e6e59378f70 — Environment-variable access.

repo/packages/core/src/utils/secure-browser-launcher.ts:170

  const isSSH = !!process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #864faf587c27c545 — Environment-variable access.

repo/packages/core/src/utils/secure-browser-launcher.ts:176

    const hasDisplay = displayVariables.some((v) => !!process.env[v]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9b6ca2d7856f53c7 — Filesystem access.

repo/packages/core/src/utils/sessionOperations.test.ts:71

      await fs.writeFile(logFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0a0617cbde460d9f — Filesystem access.

repo/packages/core/src/utils/sessionOperations.test.ts:100

      await fs.writeFile(path.join(subDir, 'sub1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e4ceba1faa6c0f44 — Filesystem access.

repo/packages/core/src/utils/sessionOperations.test.ts:101

      await fs.writeFile(path.join(subDir, 'sub2.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73f2f32884664dcc — Filesystem access.

repo/packages/core/src/utils/sessionOperations.test.ts:105

      await fs.writeFile(path.join(logsDir, 'session-sub1.jsonl'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f8791836fda6cae — Filesystem access.

repo/packages/core/src/utils/sessionOperations.test.ts:106

      await fs.writeFile(path.join(logsDir, 'session-sub2.jsonl'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95a4f6ad211e0e52 — Filesystem access.

repo/packages/core/src/utils/sessionOperations.ts:256

        const fileContent = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0fdc4b9c0fbf0bb9 — Environment-variable access.

repo/packages/core/src/utils/shell-utils.test.ts:294

  const originalComSpec = process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #650f515c24caed8a — Environment-variable access.

repo/packages/core/src/utils/shell-utils.test.ts:298

    const systemRoot = process.env['SystemRoot'] || 'C:\\\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fec9aff996e541e5 — Environment-variable access.

repo/packages/core/src/utils/shell-utils.test.ts:299

    process.env['ComSpec'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf0941a8dc2bd506 — Environment-variable access.

repo/packages/core/src/utils/shell-utils.test.ts:305

      delete process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #af90ac6d681f8b5a — Environment-variable access.

repo/packages/core/src/utils/shell-utils.test.ts:307

      process.env['ComSpec'] = originalComSpec;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #87c0a0af4896c77a — Environment-variable access.

repo/packages/core/src/utils/shell-utils.test.ts:580

    process.env['ComSpec'] = 'powershell.exe';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49912c88700b2fe9 — Environment-variable access.

repo/packages/core/src/utils/shell-utils.ts:92

  const pathEnv = process.env['PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09ad162cdbb4412f — Environment-variable access.

repo/packages/core/src/utils/shell-utils.ts:665

    const comSpec = process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a1b46b7c8bd1f10 — Environment-variable access.

repo/packages/core/src/utils/surface.ts:25

    process.env['GEMINI_CLI_SURFACE'] || process.env['SURFACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21e48598e4a3288b — Environment-variable access.

repo/packages/core/src/utils/surface.ts:43

  if (process.env['TERM_PROGRAM'] === 'vscode' || process.env['VSCODE_PID']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f7fc57c95e393cc — Environment-variable access.

repo/packages/core/src/utils/surface.ts:49

  if (process.env['GITHUB_SHA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0d517ae50f5f2239 — Environment-variable access.

repo/packages/core/src/utils/trust.test.ts:48

    delete process.env['GEMINI_CLI_TRUST_WORKSPACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f61a0a4893c1fdf1 — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:66

    fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cc2b67a9995a162 — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:83

    fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #449d0b2ab356b7ce — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:97

    fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #838e40099f79fb3c — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:113

      fs.readFileSync(trustedFoldersPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6958d0e8fb5d71e7 — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:129

    fs.writeFileSync(trustedFoldersPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #082786bbe69b65bc — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:168

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ff5e0c533333eceb — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:192

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ab6ed206610e09b — Filesystem access.

repo/packages/core/src/utils/trust.test.ts:195

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10037e980993bc8a — Environment-variable access.

repo/packages/core/src/utils/trust.ts:47

  if (process.env['GEMINI_CLI_TRUST_WORKSPACE'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fdb90549a4dd0c36 — Filesystem access.

repo/packages/core/src/utils/trust.ts:209

      await fs.promises.writeFile(this.user.path, JSON.stringify({}, null, 2), {
        // Restrict file access to read/write for the owner only
        mode: 0o600,
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a85bba6dd6b5f929 — Filesystem access.

repo/packages/core/src/utils/trust.ts:227

      const content = await fs.promises.readFile(this.user.path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbd1ff4fb8246822 — Filesystem access.

repo/packages/core/src/utils/trust.ts:289

      const content = fs.readFileSync(userPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02250e26fa8536d8 — Filesystem access.

repo/packages/core/src/utils/trust.ts:339

    fs.writeFileSync(tempPath, content, {
      encoding: 'utf-8',
      // Restrict file access to read/write for the owner only
      mode: 0o600,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8741374740fee891 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:57

      expect(fs.readFileSync(accountsFile(), 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a646e3c21abbe35 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:64

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          { active: '[email protected]', old: ['[email protected]'] },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5489535fef7d3fa1 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:75

      expect(fs.readFileSync(accountsFile(), 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76dcc1a5206cd738 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:89

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          { active: '[email protected]', old: ['[email protected]'] },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d1096227ad059be6 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:100

      expect(fs.readFileSync(accountsFile(), 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c35544e34a570f95 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:111

      fs.writeFileSync(accountsFile(), 'not valid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4645ec62331a100e — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:119

      expect(JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'))).toEqual({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #951f52d6eefbdc2c — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:127

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: '[email protected]', old: 'not-an-array' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #550c4b2a1d0f77cc — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:138

      expect(JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'))).toEqual({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f34fc8ab9851e043 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:148

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: '[email protected]', old: [] }, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb61eb19b6344ed5 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:163

      fs.writeFileSync(accountsFile(), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #32cf25d524a18c4a — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:170

      fs.writeFileSync(accountsFile(), '{ "active": "[email protected]"'); // Invalid JSON

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #094bc7a7091f5412 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:183

      fs.writeFileSync(accountsFile(), JSON.stringify({ old: [] }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #732f70482b8b7f7f — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:192

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          { active: '[email protected]', old: ['[email protected]'] },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6fa0a0bd429e482a — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:203

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e53b3f99d51a6aaf — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:210

      fs.writeFileSync(accountsFile(), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7fe22c3f5ae297d8 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:212

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #77a6280919342773 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:219

      fs.writeFileSync(accountsFile(), 'not valid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93337a9b53db6050 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:227

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #930d3332380f2306 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:234

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: null, old: ['[email protected]'] }, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d43c987cdb719852 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:241

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c39f21840c3ef6ba — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:248

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          {
            active: '[email protected]',
            old: ['[email protected]'],
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3edcaaf73ebbf1c0 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:262

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ddfe655a7e9a684 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:275

      fs.writeFileSync(accountsFile(), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #029e1313febb9994 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:281

      fs.writeFileSync(accountsFile(), 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73adc0572895f3b7 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:292

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: '[email protected]', old: [] }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1acb68dcf785ddc1 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:301

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({
          active: null,
          old: ['[email protected]', '[email protected]'],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #531eb1afb1368e47 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:313

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({
          active: '[email protected]',
          old: ['[email protected]', '[email protected]'],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9ebc360210b53a75 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:325

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: null, old: 1 }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f6fd6aa5deba607e — Filesystem access.

repo/packages/core/src/utils/userAccountManager.test.ts:339

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({
          active: '[email protected]',
          old: ['[email protected]', '[email protected]'],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fc667bb3847f1ae — Filesystem access.

repo/packages/core/src/utils/userAccountManager.ts:64

      const content = readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f4b27d8ac51f358 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.ts:85

      const content = await fsp.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4672521ea3b40836 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.ts:116

    await fsp.writeFile(filePath, JSON.stringify(accounts, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b33d983646843933 — Filesystem access.

repo/packages/core/src/utils/userAccountManager.ts:146

    await fsp.writeFile(filePath, JSON.stringify(accounts, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #284950b264714700 — Environment-variable access.

repo/packages/core/src/utils/version.test.ts:31

    process.env['CLI_VERSION'] = '2.0.0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22f7ace3426ec592 — Environment-variable access.

repo/packages/core/src/utils/version.test.ts:37

    delete process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ccaaf0db0345997 — Environment-variable access.

repo/packages/core/src/utils/version.test.ts:43

    delete process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bba7c9e45c241992 — Environment-variable access.

repo/packages/core/src/utils/version.test.ts:50

    delete process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06f59985c252f8b4 — Environment-variable access.

repo/packages/core/src/utils/version.ts:22

    return process.env['CLI_VERSION'] || pkgJson?.version || 'unknown';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f26ce1adbd441921 — Filesystem access.

repo/packages/core/src/utils/workspaceContext.test.ts:111

      fs.writeFileSync(validPath1, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e14f02f0efff46f — Filesystem access.

repo/packages/core/src/utils/workspaceContext.test.ts:113

      fs.writeFileSync(validPath2, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c22a3bf7f87015d — Filesystem access.

repo/packages/core/src/utils/workspaceContext.test.ts:248

        fs.writeFileSync(realFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #056bded30463e368 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/core/src/voice/whisperModelManager.ts:66

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #232760d7662144c9 — Environment-variable access.

repo/packages/core/test-setup.ts:8

if (process.env.NO_COLOR !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12209439ef8108f2 — Environment-variable access.

repo/packages/core/test-setup.ts:9

  delete process.env.NO_COLOR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party

expand_more 382 low-confidence finding(s)

low env_fs test-only Excluded from app score #18ed07cb9999a7b3 — Environment-variable access.

repo/.github/scripts/apply-issue-labels.cjs:61

  const effortRaw = process.env.LABELS_OUTPUT_EFFORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #def8b2538c2eef7a — Environment-variable access.

repo/.github/scripts/apply-issue-labels.cjs:62

  const standardRaw = process.env.LABELS_OUTPUT_STANDARD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d187fe63019c5e6f — Environment-variable access.

repo/.github/scripts/apply-issue-labels.cjs:63

  const genericRaw = process.env.LABELS_OUTPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4cbe774b870e5fc3 — Filesystem access.

repo/.github/scripts/cleanup-triage-labels.cjs:12

    const fileContent = fs.readFileSync('issues_to_cleanup.json', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84dc0a8605357400 — Environment-variable access.

repo/.github/scripts/gemini-lifecycle-manager.cjs:15

  const dryRun = process.env.DRY_RUN === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c6b602f75aaad435 — Filesystem access.

repo/.github/scripts/sync-issue-types.cjs:88

    fs.writeFileSync(
      'no_type_issues.json',
      JSON.stringify(issuesNeedingAnalysis),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a9b1d5c3eef97f0 — Environment-variable access.

repo/.github/scripts/sync-maintainer-labels.cjs:32

  process.argv.includes('--dry-run') || process.env.DRY_RUN === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d8f4de6e24815e2 — Environment-variable access.

repo/.github/scripts/sync-maintainer-labels.cjs:35

  auth: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #14b195613802aa3c — Environment-variable access.

repo/esbuild.config.js:97

      process.env.NODE_ENV || 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8683581bc6f9b726 — Environment-variable access.

repo/esbuild.config.js:99

    'process.env.DEV': JSON.stringify(process.env.DEV || 'false'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d15c8236c029bfe — Environment-variable access.

repo/esbuild.config.js:137

      process.env.NODE_ENV || 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29d8bb38b0890af6 — Environment-variable access.

repo/esbuild.config.js:156

      process.env.NODE_ENV || 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4970472730cb9d64 — Environment-variable access.

repo/esbuild.config.js:158

    'process.env.DEV': JSON.stringify(process.env.DEV || 'false'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #636d6440b32770e4 — Environment-variable access.

repo/esbuild.config.js:166

    if (process.env.DEV === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c124dd56280455a6 — Filesystem access.

repo/esbuild.config.js:167

      writeFileSync('./bundle/esbuild.json', JSON.stringify(metafile, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc4dae45efcfb2ec — Filesystem access.

repo/evals/answer-vs-act.eval.ts:37

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #179571859fa79601 — Filesystem access.

repo/evals/answer-vs-act.eval.ts:63

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf7fb3b7746169b6 — Filesystem access.

repo/evals/answer-vs-act.eval.ts:88

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1fee4d4e46721cbf — Filesystem access.

repo/evals/answer-vs-act.eval.ts:113

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #17e0315d5342dcd6 — Filesystem access.

repo/evals/answer-vs-act.eval.ts:138

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b5b9c5154f35b317 — Filesystem access.

repo/evals/answer-vs-act.eval.ts:164

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d2c0fc74589f397d — Filesystem access.

repo/evals/app-test-helper.ts:95

          await fs.promises.writeFile(logFile, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #326a1be92464a79d — Filesystem access.

repo/evals/auto_memory_contract.eval.ts:112

    await fsp.writeFile(
      path.join(chatsDir, filename),
      JSON.stringify(conversation, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ba49b92a03f2f8c9 — Filesystem access.

repo/evals/auto_memory_contract.eval.ts:147

            await fsp.readFile(path.join(dir, fileName), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #74fc14c56725ba48 — Filesystem access.

repo/evals/auto_memory_contract.eval.ts:251

      await fsp.writeFile(
        path.join(inboxPrivate, 'extraction.patch'),
        preExistingPatch,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #306cb6279ce41491 — Environment-variable access.

repo/evals/auto_memory_modes.eval.ts:171

        const homeDir = process.env['GEMINI_CLI_HOME'] ?? os.homedir();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5fcd2cd01eb074e3 — Filesystem access.

repo/evals/auto_memory_modes.eval.ts:178

        await fs.writeFile(
          path.join(inboxDir, 'private', 'verify-memory.patch'),
          [
            `--- /dev/null`,
            `+++ ${privateTarget}`,
            `@@ -0,0 +1,3 @@`,
            `+# Project Memory Candidate`,
            `+`,
            `+Future agents should remember that this project verifies memory changes with \`npm run verify:memory\`.`,
            ``,
          ].join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f3f921f5e95c17ed — Filesystem access.

repo/evals/auto_memory_modes.eval.ts:192

        await fs.writeFile(
          path.join(inboxDir, 'global', 'reply-style.patch'),
          [
            `--- /dev/null`,
            `+++ ${globalTarget}`,
            `@@ -0,0 +1,1 @@`,
            `+User prefers concise Chinese architecture plans.`,
            ``,
          ].join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d6f0340b921b3df6 — Filesystem access.

repo/evals/auto_memory_modes.eval.ts:308

  await fs.writeFile(
    sessionFilePath,
    [
      {
        sessionId,
        projectHash: 'auto-memory-eval',
        summary: 'Capture durable auto memory routing behavior',
        startTime: oldTimestamp,
        lastUpdated: oldTimestamp,
        kind: 'main',
      },
      ...messages,
    ]
      .map((record) => JSON.stringify(record))
      .join('\n') + '\n',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #529a9e83088447cb — Filesystem access.

repo/evals/auto_memory_modes.eval.ts:346

    raw = await fs.readFile(statePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c9236f41f7abde3e — Filesystem access.

repo/evals/auto_memory_modes.eval.ts:426

      await expect(fs.readFile(privatePatchPath, 'utf-8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d0ee0b999edb4c67 — Filesystem access.

repo/evals/auto_memory_modes.eval.ts:429

      await expect(fs.readFile(globalPatchPath, 'utf-8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b3c17216a6cba76 — Filesystem access.

repo/evals/file_creation_behavior.eval.ts:37

      const indexContent = rig.readFile('src/index.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a2e5d5336f1d8a5a — Filesystem access.

repo/evals/file_creation_behavior.eval.ts:40

      const pkgContent = rig.readFile('package.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #161ab57e28d3a0e9 — Filesystem access.

repo/evals/file_creation_behavior.eval.ts:44

      const loggerContent = rig.readFile('src/logger.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0882a9b09150f9a7 — Filesystem access.

repo/evals/file_creation_behavior.eval.ts:105

      const configContent = rig.readFile('config.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f4a3612935d941a7 — Filesystem access.

repo/evals/file_creation_behavior.eval.ts:125

      const validatorContent = rig.readFile('src/auth/validator.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e200ae697f3939aa — Filesystem access.

repo/evals/file_creation_behavior.eval.ts:126

      const typesContent = rig.readFile('src/auth/types.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2c00120ad11501a3 — Filesystem access.

repo/evals/generalist_agent.eval.ts:50

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f47c08625eca67a0 — Filesystem access.

repo/evals/redundant_casts.eval.ts:51

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0e7150b9e4f7f37 — Filesystem access.

repo/evals/skill_extraction.eval.ts:320

    await fsp.writeFile(
      path.join(chatsDir, filename),
      JSON.stringify(conversation, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ff4094ba3564d03c — Filesystem access.

repo/evals/skill_extraction.eval.ts:336

  const raw = await fsp.readFile(statePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cdd7c4fca9554843 — Filesystem access.

repo/evals/skill_extraction.eval.ts:567

  await fsp.writeFile(outputPath, `${JSON.stringify(report, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50f7f63834af346d — Filesystem access.

repo/evals/skill_extraction.eval.ts:583

          await fsp.readFile(
            path.join(skillsDir, entry.name, 'SKILL.md'),
            'utf-8',
          ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29ed357525b10363 — Environment-variable access.

repo/evals/skill_extraction.eval.ts:658

    process.env['SCRATCHPAD_STATS_TRIALS'] ?? '8',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0eae9a0d72fce4e — Environment-variable access.

repo/evals/skill_extraction.eval.ts:860

  if (process.env['RUN_SCRATCHPAD_STATS'] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f57cef8b3052912 — Filesystem access.

repo/evals/subagents.eval.ts:69

  return fs.readFileSync(path.join(rig.testDir!, relativePath), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #17a0a255c87e32cd — Filesystem access.

repo/evals/subtask_delegation.eval.ts:79

      const logicFile = rig.readFile('src/logic.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4cfc450bad10169 — Filesystem access.

repo/evals/subtask_delegation.eval.ts:80

      const docFile = rig.readFile('docs/logic.md');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #671fea779d582f5b — Filesystem access.

repo/evals/test-helper.test.ts:63

    const logContent = fs
      .readFileSync(RELIABILITY_LOG, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18b1dfa62b685aaa — Filesystem access.

repo/evals/test-helper.test.ts:126

    const logContent = fs
      .readFileSync(RELIABILITY_LOG, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f5bbdd5694aa26d — Filesystem access.

repo/evals/test-helper.test.ts:153

    const logContent = fs
      .readFileSync(RELIABILITY_LOG, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bc7d705be0cd8cf1 — Environment-variable access.

repo/evals/test-helper.ts:30

  process.env['GEMINI_MODEL'] || PREVIEW_GEMINI_FLASH_MODEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #16bb84824d645e33 — Environment-variable access.

repo/evals/test-helper.ts:129

        const originalGeminiHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #51d1e439a2f4ee9e — Environment-variable access.

repo/evals/test-helper.ts:130

        process.env['GEMINI_CLI_HOME'] = rig.homeDir!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a2acf4301b3d2da — Filesystem access.

repo/evals/test-helper.ts:150

          fs.writeFileSync(
            path.join(chatsDir, filename),
            JSON.stringify(conversation, null, 2),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3849a2ec72ee1de2 — Environment-variable access.

repo/evals/test-helper.ts:160

            delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b6157cb78926848a — Environment-variable access.

repo/evals/test-helper.ts:162

            process.env['GEMINI_CLI_HOME'] = originalGeminiHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7f0886c0018c5fa2 — Filesystem access.

repo/evals/test-helper.ts:198

        await fs.promises.writeFile(stderrFile, rig._lastRunStderr);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29cbf1f047886e77 — Filesystem access.

repo/evals/test-helper.ts:201

      await fs.promises.writeFile(
        logFile,
        JSON.stringify(rig.readToolLogs(), null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b1fda975abb1a2c9 — Environment-variable access.

repo/evals/test-helper.ts:245

    model: process.env['GEMINI_MODEL'] || 'unknown',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #49b24e58824fb291 — Filesystem access.

repo/evals/test-helper.ts:289

    fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2f58cfe1b0b0e128 — Filesystem access.

repo/evals/test-helper.ts:319

    fs.writeFileSync(ackPath, JSON.stringify(acknowledgedAgents, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #58b6ad58880aeba3 — Environment-variable access.

repo/evals/test-helper.ts:348

  const targetSuiteType = process.env['EVAL_SUITE_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ebd102b45f54373 — Environment-variable access.

repo/evals/test-helper.ts:349

  const targetSuiteName = process.env['EVAL_SUITE_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #158354fde8c4fe76 — Environment-variable access.

repo/evals/test-helper.ts:363

    !process.env['RUN_EVALS'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f494093fb62c51e2 — Filesystem access.

repo/evals/tool_output_masking.eval.ts:65

      fs.writeFileSync(
        outputFilePath,
        `Some padding...\nThe secret key is: ${secretValue}\nMore padding...`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #61ba7c70aabf4e94 — Filesystem access.

repo/evals/tool_output_masking.eval.ts:128

      fs.writeFileSync(sessionFile, JSON.stringify(conversation, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eddc2010cf5cc056 — Filesystem access.

repo/evals/tool_output_masking.eval.ts:132

      fs.writeFileSync(
        path.join(settingsDir, 'trustedFolders.json'),
        JSON.stringify(
          {
            [path.resolve(rig.homeDir!)]: 'TRUST_FOLDER',
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1e8b7525727fda65 — Filesystem access.

repo/evals/tool_output_masking.eval.ts:201

      fs.writeFileSync(
        outputFilePath,
        `Full content containing ${secretValue}`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a183a811aa83a365 — Filesystem access.

repo/evals/tool_output_masking.eval.ts:265

      fs.writeFileSync(sessionFile, JSON.stringify(conversation, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #efd8e24a32bed7ca — Filesystem access.

repo/evals/tool_output_masking.eval.ts:268

      fs.writeFileSync(
        path.join(settingsDir, 'trustedFolders.json'),
        JSON.stringify(
          {
            [path.resolve(rig.homeDir!)]: 'TRUST_FOLDER',
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fb6d263734af6746 — Filesystem access.

repo/evals/tracker.eval.ts:74

      const loginContent = fs.readFileSync(
        path.join(rig.testDir!, 'src/login.js'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #44eb65b51b8ed5af — Filesystem access.

repo/evals/tracker.eval.ts:113

      const loginContent = fs.readFileSync(
        path.join(rig.testDir!, 'src/login.js'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb6f117737beccd0 — Filesystem access.

repo/evals/unsafe-cloning.eval.ts:45

    const content = rig.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b3d9c060c9791d28 — Filesystem access.

repo/integration-tests/acp-env-auth.test.ts:51

      writeFileSync(
        join(projectDir, '.env'),
        'GEMINI_API_KEY=test-key-from-env\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #602dffa227f44f9d — Filesystem access.

repo/integration-tests/acp-telemetry.test.ts:112

    expect(readFileSync(telemetryPath, 'utf-8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c86cce088e50a89 — Environment-variable access.

repo/integration-tests/browser-agent.test.ts:47

        `${process.env['LOCALAPPDATA'] ?? ''}\\Google\\Chrome\\Application\\chrome.exe`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2dcaeca2f21570ab — Environment-variable access.

repo/integration-tests/browser-policy.test.ts:41

        `${process.env['LOCALAPPDATA'] ?? ''}\\Google\\Chrome\\Application\\chrome.exe`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7deb6a1f5d56104f — Filesystem access.

repo/integration-tests/browser-policy.test.ts:97

      writeFileSync(
        trustedFoldersPath,
        JSON.stringify(trustedFolders, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #14f9d60f705b1160 — Filesystem access.

repo/integration-tests/browser-policy.test.ts:110

      writeFileSync(
        policyFile,
        `
[[rule]]
name = "Force confirm browser_agent"
toolName = "invoke_agent"
argsPattern = "\\"agent_name\\":\\\\s*\\"browser_agent\\""
decision = "ask_user"
priority = 200
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab3a19474e7dffc5 — Filesystem access.

repo/integration-tests/browser-policy.test.ts:126

          const settings = JSON.parse(readFileSync(settingsPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c6ebd11380c8e20 — Filesystem access.

repo/integration-tests/browser-policy.test.ts:132

          writeFileSync(settingsPath, JSON.stringify(settings, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a2bc5e145df42903 — Environment-variable access.

repo/integration-tests/checkpointing.test.ts:33

    process.env['HOME'] = fakeHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #30dbd95a85629973 — Environment-variable access.

repo/integration-tests/checkpointing.test.ts:34

    delete process.env['GIT_CONFIG_GLOBAL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #851729db32e42c72 — Environment-variable access.

repo/integration-tests/checkpointing.test.ts:35

    delete process.env['GIT_CONFIG_SYSTEM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef7f4663849ed6fa — Filesystem access.

repo/integration-tests/checkpointing.test.ts:62

    await fs.writeFile(path.join(projectRoot, 'file1.txt'), 'version 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f194c76e3821fa68 — Filesystem access.

repo/integration-tests/checkpointing.test.ts:63

    await fs.writeFile(path.join(projectRoot, 'file2.txt'), 'permanent file');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fb59784cc9deeb38 — Filesystem access.

repo/integration-tests/checkpointing.test.ts:70

    await fs.writeFile(
      path.join(projectRoot, 'file1.txt'),
      'version 2 (BAD CHANGE)',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d160f2104f76761 — Filesystem access.

repo/integration-tests/checkpointing.test.ts:74

    await fs.writeFile(
      path.join(projectRoot, 'file3.txt'),
      'new file (SHOULD BE GONE)',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b5722e6aeb26c18 — Filesystem access.

repo/integration-tests/checkpointing.test.ts:84

    const file1Content = await fs.readFile(
      path.join(projectRoot, 'file1.txt'),
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4de4a07d7d691844 — Filesystem access.

repo/integration-tests/checkpointing.test.ts:95

    const file2Content = await fs.readFile(
      path.join(projectRoot, 'file2.txt'),
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f14f3068da0748de — Filesystem access.

repo/integration-tests/checkpointing.test.ts:115

    await fs.writeFile(globalConfigPath, globalConfigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4189ac0a74351603 — Environment-variable access.

repo/integration-tests/checkpointing.test.ts:118

    process.env['HOME'] = fakeHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7f3ef1e2c2504607 — Environment-variable access.

repo/integration-tests/checkpointing.test.ts:121

    delete process.env['GIT_CONFIG_GLOBAL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5596a825b9670c2b — Filesystem access.

repo/integration-tests/checkpointing.test.ts:129

    await fs.writeFile(path.join(projectRoot, 'test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #821a13bbb220d7ec — Filesystem access.

repo/integration-tests/clipboard-linux.test.ts:29

    fs.writeFileSync(dummyImagePath, Buffer.from(DUMMY_PNG_BASE64, 'base64'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #83546df3b19f9826 — Filesystem access.

repo/integration-tests/clipboard-linux.test.ts:59

        input: fs.readFileSync(dummyImagePath),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e89420fd9ca261d — Filesystem access.

repo/integration-tests/context-fidelity.test.ts:90

        fs.writeFileSync(
          filePath,
          mocks.map((m) => JSON.stringify(m)).join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #764aacb2b4aa180f — Filesystem access.

repo/integration-tests/context-fidelity.test.ts:110

      fs.writeFileSync(
        path.join(rig.testDir!, '.geminiignore'),
        'traces/\nresp*.json\ndebug.log\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #237eadf568e89e7d — Filesystem access.

repo/integration-tests/context-fidelity.test.ts:201

          return JSON.parse(fs.readFileSync(assetPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3231a601b35612b2 — Filesystem access.

repo/integration-tests/context-fidelity.test.ts:206

      const log1 = fs.readFileSync(traceLog, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #40855ef3135bd528 — Filesystem access.

repo/integration-tests/context-fidelity.test.ts:227

      const log2 = fs.readFileSync(traceLog, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2551242ce4ccae05 — Filesystem access.

repo/integration-tests/extensions-install.test.ts:34

    writeFileSync(testServerPath, extension);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f27332ae477bcea3 — Filesystem access.

repo/integration-tests/extensions-install.test.ts:48

      writeFileSync(testServerPath, extensionUpdate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #db65962e002d2ed4 — Filesystem access.

repo/integration-tests/extensions-reload.test.ts:48

    writeFileSync(testServerPath, safeJsonStringify(extension, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #851c4d49732a75aa — Filesystem access.

repo/integration-tests/extensions-reload.test.ts:70

    writeFileSync(testServerPath, safeJsonStringify(extension, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e124daae0234f7bf — Filesystem access.

repo/integration-tests/file-system.test.ts:88

    const fileContent = rig.readFile('test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b3784814fbdbfee — Environment-variable access.

repo/integration-tests/file-system.test.ts:111

    if (process.env['VERBOSE'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #82dd8753a282eded — Filesystem access.

repo/integration-tests/file-system.test.ts:136

    const newFileContent = rig.readFile(fileName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5d6a36a13dd3e3a8 — Filesystem access.

repo/integration-tests/file-system.test.ts:174

    const newFileContent = rig.readFile(fileName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00cc85659f759354 — Filesystem access.

repo/integration-tests/file-system.test.ts:218

    const newFileContent = rig.readFile(fileName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef4d65313984994e — Environment-variable access.

repo/integration-tests/globalSetup.ts:8

if (process.env['NO_COLOR'] !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61fe14ee6f24fc2e — Environment-variable access.

repo/integration-tests/globalSetup.ts:9

  delete process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7135666eb17c099 — Filesystem access.

repo/integration-tests/globalSetup.ts:53

        const content = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1639fe32687657e — Environment-variable access.

repo/integration-tests/globalSetup.ts:103

  process.env['TEST_FIXTURE_PORT'] = String(port);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09793e7438f79e40 — Environment-variable access.

repo/integration-tests/globalSetup.ts:123

  process.env['INTEGRATION_TEST_FILE_DIR'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bfdee36bda2986e6 — Environment-variable access.

repo/integration-tests/globalSetup.ts:125

  if (process.env['KEEP_OUTPUT']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #995647a74dce7054 — Environment-variable access.

repo/integration-tests/globalSetup.ts:128

  process.env['VERBOSE'] = process.env['VERBOSE'] ?? 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8427fe1c5dad8f8e — Environment-variable access.

repo/integration-tests/globalSetup.ts:148

  if (process.env['KEEP_OUTPUT'] !== 'true' && runDir) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #02fa8cbb3b5f2278 — Filesystem access.

repo/integration-tests/hooks-agent-flow.test.ts:52

      writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bd752bfa6a9a39c — Filesystem access.

repo/integration-tests/hooks-agent-flow.test.ts:255

      const countsRaw = rig.readFile('message-counts.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f572bb851f3cbac — Filesystem access.

repo/integration-tests/hooks-system.test.ts:223

        const fileContent = rig.readFile('approved.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #195d3855e6176d7a — Filesystem access.

repo/integration-tests/hooks-system.test.ts:328

        writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f5422eb54aebfa4 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:390

        const modifiedContent = rig.readFile('tail-called-file.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3509bff49ff41324 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:1021

        const fileContent = rig.readFile('input-test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ba0be0709ebeaca4 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:1174

        const fileContent = rig.readFile('multi-event-test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8fe7f555a67ade57 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:1226

        writeFileSync(failingPath, 'process.exit(1);');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b63b5d73e301ab7 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:1228

        writeFileSync(
          workingPath,
          "console.log(JSON.stringify({decision: 'allow', reason: 'Working hook succeeded'}));",
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2961396d24d56b69 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:1273

        const fileContent = rig.readFile('error-test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #af4563a47aa01018 — Environment-variable access.

repo/integration-tests/hooks-system.test.ts:1890

        const isCI = process.env['CI'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f498d41114fa022f — Filesystem access.

repo/integration-tests/hooks-system.test.ts:2175

        const modifiedContent = rig.readFile('modified.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ac31baec52fefb6f — Filesystem access.

repo/integration-tests/hooks-system.test.ts:2181

          rig.readFile('original.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #96e4e95ea57761e6 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:2299

          writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9273e1ea73ed84da — Filesystem access.

repo/integration-tests/hooks-system.test.ts:2338

          writeFileSync(
            join(stateDir, 'state.json'),
            JSON.stringify({
              terminalSetupPromptShown: true,
              hasSeenScreenReaderNudge: true,
              tipsShown: 100,
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d24550501c1f920 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:2376

          const fileContent = rig.readFile('approved.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e3b3f0a2b1ba6601 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:2403

          writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5dc78ba683c942b1 — Filesystem access.

repo/integration-tests/hooks-system.test.ts:2441

          writeFileSync(
            join(stateDir, 'state.json'),
            JSON.stringify({
              terminalSetupPromptShown: true,
              hasSeenScreenReaderNudge: true,
              tipsShown: 100,
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2f981b457e56366e — Filesystem access.

repo/integration-tests/mcp-resources.test.ts:36

    fs.writeFileSync(join(userGeminiDir, 'projects.json'), '{"projects":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c98a4848e254dcb8 — Filesystem access.

repo/integration-tests/mcp-resources.test.ts:81

    fs.writeFileSync(scriptPath, scriptContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #519edc9652bec877 — Filesystem access.

repo/integration-tests/mcp-resources.test.ts:105

    fs.writeFileSync(join(userGeminiDir, 'projects.json'), '{"projects":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #39860ee865781158 — Filesystem access.

repo/integration-tests/mcp-resources.test.ts:167

    fs.writeFileSync(scriptPath, scriptContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5876a7d13077318e — Filesystem access.

repo/integration-tests/mcp_server_cyclic_schema.test.ts:192

    writeFileSync(testServerPath, serverScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1ad1ff6b9b438ab4 — Filesystem access.

repo/integration-tests/parallel-tools.test.ts:59

      fs.writeFileSync('pty_output_failure.txt', run.output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #361e4423b68f11ca — Filesystem access.

repo/integration-tests/parallel-tools.test.ts:79

    expect(fs.readFileSync(join(rig.testDir!, 'output.txt'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fa8481a2df7e222d — Filesystem access.

repo/integration-tests/plan-mode.test.ts:258

    writeFileSync(
      join(rig.homeDir!, GEMINI_DIR, 'state.json'),
      JSON.stringify({ terminalSetupPromptShown: true }, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5dfc8ea292b8301 — Filesystem access.

repo/integration-tests/plan-mode.test.ts:265

    writeFileSync(join(fullPlansDir, planFilename), 'Execute echo hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5e2b222ef4f474cd — Environment-variable access.

repo/integration-tests/policy-headless.test.ts:209

    process.env['REGENERATE_MODEL_GOLDENS'] === 'true' ? 120000 : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e3017e6ba9351f67 — Filesystem access.

repo/integration-tests/replace.test.ts:36

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b7bd0084f7d981c — Filesystem access.

repo/integration-tests/replace.test.ts:58

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b310fa05fe36caa — Filesystem access.

repo/integration-tests/replace.test.ts:78

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b119e8d4568cec8 — Filesystem access.

repo/integration-tests/replace.test.ts:99

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00790118d8a1ab19 — Filesystem access.

repo/integration-tests/resume-gc.test.ts:74

      fs.writeFileSync(
        filePath,
        mocks.map((m) => JSON.stringify(m)).join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e7f81691aa9f613 — Filesystem access.

repo/integration-tests/resume-gc.test.ts:145

    const traces = fs.readFileSync(traceLog, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dbd0ef7b340fe6c7 — Filesystem access.

repo/integration-tests/ripgrep-real.test.ts:68

    await fs.writeFile(path.join(tempDir, 'file1.txt'), 'hello world\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b63766522b6cc61 — Filesystem access.

repo/integration-tests/ripgrep-real.test.ts:70

    await fs.writeFile(
      path.join(tempDir, 'subdir', 'file2.txt'),
      'hello universe\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c62d1ed9fd75bf8b — Filesystem access.

repo/integration-tests/ripgrep-real.test.ts:74

    await fs.writeFile(path.join(tempDir, 'file3.txt'), 'goodbye moon\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b5e2053025f3ec1c — Filesystem access.

repo/integration-tests/ripgrep-real.test.ts:111

    await fs.writeFile(
      path.join(tempDir, 'script.js'),
      'console.log("hello");\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #48b210cb8f2fbd33 — Filesystem access.

repo/integration-tests/ripgrep-real.test.ts:131

    await fs.writeFile(
      path.join(tempDir, 'context.txt'),
      'line1\nline2\nline3 match\nline4\nline5\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #59978759fa8a6082 — Environment-variable access.

repo/integration-tests/run_shell_command.test.ts:528

    process.env[varName] = varValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f46ca69c83d2a09 — Environment-variable access.

repo/integration-tests/run_shell_command.test.ts:554

      delete process.env[varName];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7dc95580072f7d89 — Filesystem access.

repo/integration-tests/simple-mcp-server.test.ts:197

    writeFileSync(testServerPath, serverScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #89ba3ca3f18ce718 — Filesystem access.

repo/integration-tests/skill-creator-scripts.test.ts:68

    let content = fs.readFileSync(path.join(skillDir, 'SKILL.md'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e7c5354356253ef1 — Filesystem access.

repo/integration-tests/skill-creator-scripts.test.ts:72

    fs.writeFileSync(path.join(skillDir, 'SKILL.md'), content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d2fdebe12fb6ffc — Filesystem access.

repo/integration-tests/skill-creator-scripts.test.ts:76

    let scriptContent = fs.readFileSync(exampleScriptPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea266a1ce925ba9b — Filesystem access.

repo/integration-tests/skill-creator-scripts.test.ts:78

    fs.writeFileSync(exampleScriptPath, scriptContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9af810f66958d379 — Filesystem access.

repo/integration-tests/skill-creator-vulnerabilities.test.ts:97

    let content = fs.readFileSync(skillMd, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #858e587649156034 — Filesystem access.

repo/integration-tests/skill-creator-vulnerabilities.test.ts:99

    fs.writeFileSync(skillMd, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #183cae5e5c351296 — Filesystem access.

repo/integration-tests/symlink-install.test.ts:61

      writeFileSync(join(realExtPath, 'gemini-extension.json'), extension);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7306197e62609b84 — Filesystem access.

repo/integration-tests/symlink-install.test.ts:68

      writeFileSync(
        join(maliciousExtPath, 'gemini-extension.json'),
        otherExtension,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65fd88d36c6955e2 — Filesystem access.

repo/integration-tests/symlink-install.test.ts:118

        readFileSync(trustedFoldersPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dfd85458eb450210 — Environment-variable access.

repo/integration-tests/test-helper.ts:10

export const skipFlaky = !process.env['RUN_FLAKY_INTEGRATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0694ec30a14a0177 — Filesystem access.

repo/integration-tests/test-mcp-support.test.ts:41

    fs.writeFileSync(join(userGeminiDir, 'projects.json'), '{"projects":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aeb41a979c6671e7 — Filesystem access.

repo/integration-tests/user-policy.test.ts:33

    fs.writeFileSync(
      join(userPoliciesDir, 'allowed-tools.toml'),
      `
[[rule]]
toolName = "run_shell_command"
commandPrefix = "ls -F"
decision = "allow"
priority = 100
      `,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d0b2f3ef1f8bf1ab — Filesystem access.

repo/integration-tests/utf-bom-encoding.test.ts:67

    writeFileSync(join(rig.testDir!, filename), content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f59f66ffb11890f6 — Filesystem access.

repo/integration-tests/write_file.test.ts:58

    const newFileContent = rig.readFile(newFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #94494079862c4a44 — Environment-variable access.

repo/integration-tests/write_file.test.ts:76

    if (process.env['VERBOSE'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f6674c38f8ceff6 — Environment-variable access.

repo/memory-tests/globalSetup.ts:23

  process.env['HOME'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be4b2c9773d59737 — Environment-variable access.

repo/memory-tests/globalSetup.ts:25

    process.env['USERPROFILE'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fdef903228968293 — Environment-variable access.

repo/memory-tests/globalSetup.ts:27

  process.env['GEMINI_CONFIG_DIR'] = join(runDir, '.gemini');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc7c2b8cdb0d807d — Environment-variable access.

repo/memory-tests/globalSetup.ts:53

  process.env['INTEGRATION_TEST_FILE_DIR'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #169868e852029661 — Environment-variable access.

repo/memory-tests/globalSetup.ts:54

  process.env['GEMINI_CLI_INTEGRATION_TEST'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40b882033f547db1 — Environment-variable access.

repo/memory-tests/globalSetup.ts:55

  process.env['GEMINI_FORCE_FILE_STORAGE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #554368d0858e2c02 — Environment-variable access.

repo/memory-tests/globalSetup.ts:56

  process.env['TELEMETRY_LOG_FILE'] = join(runDir, 'telemetry.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dc70075b78fabb2 — Environment-variable access.

repo/memory-tests/globalSetup.ts:57

  process.env['VERBOSE'] = process.env['VERBOSE'] ?? 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1e096b457e923c0 — Environment-variable access.

repo/memory-tests/globalSetup.ts:64

  if (process.env['KEEP_OUTPUT'] !== 'true' && runDir) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4e08ac665d50d27 — Environment-variable access.

repo/memory-tests/memory-usage.test.ts:23

const UPDATE_BASELINES = process.env['UPDATE_MEMORY_BASELINES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce3733244bb397d5 — Filesystem access.

repo/memory-tests/memory-usage.test.ts:372

  const session = JSON.parse(readFileSync(sourceSessionPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b979ff60bbbeee42 — Environment-variable access.

repo/perf-tests/globalSetup.ts:52

  process.env['INTEGRATION_TEST_FILE_DIR'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d293a1ffb0689d98 — Environment-variable access.

repo/perf-tests/globalSetup.ts:53

  process.env['VERBOSE'] = process.env['VERBOSE'] ?? 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #799a9ee4c943e315 — Environment-variable access.

repo/perf-tests/globalSetup.ts:60

  if (process.env['KEEP_OUTPUT'] !== 'true' && runDir) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3baed3e8a8badf8c — Environment-variable access.

repo/perf-tests/perf-usage.test.ts:25

const UPDATE_BASELINES = process.env['UPDATE_PERF_BASELINES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2871b53132402f27 — Environment-variable access.

repo/perf-tests/perf-usage.test.ts:29

const SAMPLE_COUNT = process.env['CI'] ? 5 : 3;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65ab5a3129ddee55 — Filesystem access.

repo/perf-tests/perf-usage.test.ts:229

              const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2416b980f817e801 — Filesystem access.

repo/perf-tests/perf-usage.test.ts:336

      writeFileSync(
        join(geminiDir, 'projects.json'),
        JSON.stringify({
          projects: { [rig.testDir!]: identifier },
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2a45bb538dd08b3 — Filesystem access.

repo/perf-tests/perf-usage.test.ts:342

      writeFileSync(join(projectTempDir, '.project_root'), rig.testDir!);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bfdad6b46e1e1462 — Filesystem access.

repo/perf-tests/perf-usage.test.ts:464

          writeFileSync(
            settingsPath,
            JSON.stringify({
              security: { folderTrust: { enabled: false } },
              ui: { terminalBuffer: true },
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3dbc9741dc0a0150 — Filesystem access.

repo/perf-tests/perf-usage.test.ts:565

          writeFileSync(
            settingsPath,
            JSON.stringify({
              security: { folderTrust: { enabled: false } },
              ui: { useAlternateBuffer: true },
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bfddf5b26c6035df — Filesystem access.

repo/scripts/aggregate_evals.js:62

      const content = fs.readFileSync(reportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a1e6da1d276c68cb — Environment-variable access.

repo/scripts/aggregate_evals.js:101

    const currentRunId = process.env.GITHUB_RUN_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #075f5bfb57b08af9 — Environment-variable access.

repo/scripts/build.js:36

if (process.env.CI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c6e04b450362d808 — Environment-variable access.

repo/scripts/build.js:70

    process.env.BUILD_SANDBOX === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04d1116194197500 — Environment-variable access.

repo/scripts/build.js:71

    process.env.BUILD_SANDBOX === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #30ea48f2f09cc901 — Environment-variable access.

repo/scripts/build_binary.js:102

  if (process.env.SKIP_SIGNING === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9dcb8ee5dba56cd0 — Environment-variable access.

repo/scripts/build_binary.js:110

    const identity = process.env.APPLE_IDENTITY || '-';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dc99ab704b5080d9 — Environment-variable access.

repo/scripts/build_binary.js:132

    if (process.env.WINDOWS_PFX_FILE && process.env.WINDOWS_PFX_PASSWORD) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cce29c16755f614e — Environment-variable access.

repo/scripts/build_binary.js:135

        process.env.WINDOWS_PFX_FILE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8b071673eb886699 — Environment-variable access.

repo/scripts/build_binary.js:137

        process.env.WINDOWS_PFX_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60fb1a476aaa6304 — Environment-variable access.

repo/scripts/build_binary.js:158

      if (process.env.WINDOWS_PFX_PASSWORD) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ac7c5f24b590c05f — Environment-variable access.

repo/scripts/build_binary.js:159

        msg = msg.replaceAll(process.env.WINDOWS_PFX_PASSWORD, '******');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e7ab7e54b090c2bd — Environment-variable access.

repo/scripts/build_binary.js:210

const includeNativeModules = process.env.BUNDLE_NATIVE_MODULES !== 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c4ba667ebffe813 — Filesystem access.

repo/scripts/build_binary.js:265

  readFileSync(join(root, 'package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7654c85a6793a68e — Filesystem access.

repo/scripts/build_binary.js:286

  const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5b41ef70e1eab26a — Filesystem access.

repo/scripts/build_binary.js:312

    const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #deac12c9fa4c4486 — Filesystem access.

repo/scripts/build_binary.js:324

  const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84786edab0bb089f — Filesystem access.

repo/scripts/build_binary.js:337

    const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0b6e415aa065e42a — Filesystem access.

repo/scripts/build_binary.js:356

    const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2c84cf3e059233fb — Filesystem access.

repo/scripts/build_binary.js:370

writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7930378271e4a399 — Filesystem access.

repo/scripts/build_binary.js:379

writeFileSync(seaConfigPath, JSON.stringify(seaConfig, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e259aa3445a0a005 — Filesystem access.

repo/scripts/build_package.js:57

writeFileSync(join(process.cwd(), 'dist', '.last_build'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ed54af5c06e27570 — Environment-variable access.

repo/scripts/build_sandbox.js:67

  process.exit(process.env.CI ? 1 : 0);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d083bef928eea13a — Filesystem access.

repo/scripts/build_sandbox.js:114

  readFileSync(join(process.cwd(), 'package.json'), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e0ff691bae19a9c4 — Environment-variable access.

repo/scripts/build_sandbox.js:126

const buildStdout = process.env.VERBOSE ? 'inherit' : 'ignore';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #476a95176c524bf8 — Filesystem access.

repo/scripts/build_sandbox.js:143

      writeFileSync(tempAuthFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c63234d3e41c0f5d — Filesystem access.

repo/scripts/build_sandbox.js:152

    readFileSync(join(process.cwd(), 'package.json'), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cc8d2399a79b802a — Environment-variable access.

repo/scripts/build_sandbox.js:156

    process.env.GEMINI_SANDBOX_IMAGE_TAG || imageName.split(':')[1];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #220cd2c12325a690 — Environment-variable access.

repo/scripts/build_sandbox.js:162

        process.env.BUILD_SANDBOX_FLAGS || ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0beb4fb03512bda5 — Filesystem access.

repo/scripts/build_sandbox.js:180

      writeFileSync(argv.outputFile, finalImageName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #caad79584ab90554 — Environment-variable access.

repo/scripts/changed_prompt.js:24

  const targetBranch = process.env.GITHUB_BASE_REF || 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9700b17023155452 — Environment-variable access.

repo/scripts/changed_prompt.js:29

    const remoteUrl = process.env.GITHUB_REPOSITORY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #61018e90cbe83e0d — Environment-variable access.

repo/scripts/changed_prompt.js:30

      ? `https://github.com/${process.env.GITHUB_REPOSITORY}.git`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #391d5a320c8f8c60 — Environment-variable access.

repo/scripts/changed_prompt.js:39

    const head = process.env.PR_HEAD_SHA || 'HEAD';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b1b1fb3a6065978a — Filesystem access.

repo/scripts/check-build-status.js:72

    fs.writeFileSync(warningsFilePath, errorMessage);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #25173d544bedd5d4 — Filesystem access.

repo/scripts/check-build-status.js:128

    fs.writeFileSync(warningsFilePath, warningMessages.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d5772b6046e2a1e — Filesystem access.

repo/scripts/check-lockfile.js:17

    const fileContent = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #794336fa80c0e0c1 — Filesystem access.

repo/scripts/clean.js:38

  readFileSync(join(root, 'package.json'), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1921ed1c39cadc5 — Environment-variable access.

repo/scripts/close_duplicate_issues.js:11

if (!process.env.GITHUB_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8aeade75ec5c9805 — Environment-variable access.

repo/scripts/close_duplicate_issues.js:61

  auth: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #35093a7ce0749eb2 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/close_duplicate_issues.js:83 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:83

    console.log(`Found ${issues.length} issues.`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #8e2ce0701954b662 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/close_duplicate_issues.js:87 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:87

        console.log(`Skipping canonical issue #${issue.number}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #785b9a747e2c5a89 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/close_duplicate_issues.js:91 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:91

      console.log(
        `Processing issue #${issue.number}: ${issue.title} (by @${issue.user?.login})`,
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #c768c6e809b6f299 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/close_duplicate_issues.js:104 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:104

          console.log(`Skipping issue #${issue.number}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #44681e446b2100fc — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/close_duplicate_issues.js:136 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:136

          console.log(`  [DRY RUN] Would close issue #${issue.number}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #1d23f5d8ba3b1906 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/close_duplicate_issues.js:139 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/repo/scripts/close_duplicate_issues.js:139

        console.error(
          `  Failed to process issue #${issue.number}:`,
          error.message,
        );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #31e5e54fa9b56282 — Filesystem access.

repo/scripts/compare_evals.js:36

  const prReport = JSON.parse(fs.readFileSync(prReportPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ada706f350cc6a9 — Filesystem access.

repo/scripts/deflake.js:87

    await fs.writeFile(dockerIgnorePath, DOCKERIGNORE_CONTENT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #14e761b31bd581ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/scripts/download-ripgrep-binaries.ts:65

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #da0de2f34c2108dc — Filesystem access.

repo/scripts/eval_utils.js:67

      const content = fs.readFileSync(reportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0a3905f7cbdf0f29 — Environment-variable access.

repo/scripts/generate-git-commit-info.js:47

  const envCommit = process.env.GIT_COMMIT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a1baaffce04a960 — Filesystem access.

repo/scripts/generate-git-commit-info.js:76

writeFileSync(cliGitCommitFile, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dc80e93cc06c7c3a — Filesystem access.

repo/scripts/generate-git-commit-info.js:77

writeFileSync(coreGitCommitFile, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #823a2a066cdf739c — Filesystem access.

repo/scripts/generate-keybindings-doc.ts:54

  const currentDoc = await readFile(docPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9f9092c8bd03bad8 — Filesystem access.

repo/scripts/generate-keybindings-doc.ts:80

  await writeFile(docPath, updatedDoc, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d94d8d4886486d77 — Filesystem access.

repo/scripts/generate-settings-doc.ts:72

  const doc = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5d7fd9f17195cc28 — Filesystem access.

repo/scripts/generate-settings-doc.ts:102

  await writeFile(filePath, formattedDoc);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22710953c171212b — Filesystem access.

repo/scripts/generate-settings-schema.ts:73

    existing = await readFile(outputPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84a0424d349ebb91 — Filesystem access.

repo/scripts/generate-settings-schema.ts:98

  await writeFile(outputPath, formatted);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #af2ae11e11100f48 — Filesystem access.

repo/scripts/get-release-version.js:21

  return JSON.parse(readFileSync(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5367e2bfe3b44d1e — Environment-variable access.

repo/scripts/lint.js:25

  process.env.GEMINI_LINT_TEMP_DIR || join(tmpdir(), 'gemini-cli-linters');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #210d0cee6a791cfa — Environment-variable access.

repo/scripts/lint.js:187

  if (!process.env.GEMINI_LINT_TEMP_DIR) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56f2dda24e8b39c1 — Environment-variable access.

repo/scripts/lint.js:259

    const baseRef = process.env.GITHUB_BASE_REF || 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00ee927a713e66c6 — Filesystem access.

repo/scripts/lint.js:293

    const content = readFileSync(file, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d350309378e598a7 — Filesystem access.

repo/scripts/lint.js:358

      const content = readFileSync(tsconfigPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2153609af5cacfd3 — Filesystem access.

repo/scripts/lint.js:423

    const content = readFileSync(file, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d3c196b04a0c246 — Filesystem access.

repo/scripts/local_telemetry.js:142

  fs.writeFileSync(OTEL_CONFIG_FILE, OTEL_CONFIG_CONTENT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef3b36e9037fb991 — Filesystem access.

repo/scripts/local_telemetry.js:165

      console.error(fs.readFileSync(JAEGER_LOG_FILE, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #885addebe5e7c244 — Filesystem access.

repo/scripts/local_telemetry.js:190

      console.error(fs.readFileSync(OTEL_LOG_FILE, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #69a8ab4c489514bd — Filesystem access.

repo/scripts/prepare-github-release.js:14

  const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f62b0c0585575137 — Filesystem access.

repo/scripts/prepare-github-release.js:16

  fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b9180e3eb4cc6d86 — Filesystem access.

repo/scripts/prepare-github-release.js:36

fs.writeFileSync(
  coreNpmrcPath,
  '@google-gemini:registry=https://npm.pkg.github.com/',
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #685499865a9f84a3 — Filesystem access.

repo/scripts/prepare-npm-release.js:13

  return JSON.parse(fs.readFileSync(path.resolve(rootDir, filePath), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ba80e4b0c96a2d4 — Filesystem access.

repo/scripts/prepare-npm-release.js:17

  fs.writeFileSync(
    path.resolve(rootDir, filePath),
    JSON.stringify(data, null, 2),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fa5a00ff3432a5ae — Environment-variable access.

repo/scripts/releasing/patch-comment.js:22

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dfc7f56d85a8a117 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:31

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52799a71286e6783 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:67

  const testMode = argv.test || process.env.TEST_MODE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf412adbbc6471f6 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:74

      auth: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f08c147cb16cca4f — Environment-variable access.

repo/scripts/releasing/patch-comment.js:79

    owner: process.env.GITHUB_REPOSITORY_OWNER || 'google-gemini',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #793a8d2856518e6d — Environment-variable access.

repo/scripts/releasing/patch-comment.js:80

    repo: process.env.GITHUB_REPOSITORY_NAME || 'gemini-cli',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #924d1790fe1bb259 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:84

  const originalPr = argv.originalPr || process.env.ORIGINAL_PR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b37bc4b4358ab22 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:86

    argv.success !== undefined ? argv.success : process.env.SUCCESS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c825551a637f193 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:87

  const releaseVersion = argv.releaseVersion || process.env.RELEASE_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d901474ebe3b616a — Environment-variable access.

repo/scripts/releasing/patch-comment.js:90

    process.env.RELEASE_TAG ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #28b7760e969c561d — Environment-variable access.

repo/scripts/releasing/patch-comment.js:94

    process.env.NPM_TAG ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d2f3c3c50dc5367 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:96

  const channel = argv.channel || process.env.CHANNEL || 'stable';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a6a01d3cef373ce — Environment-variable access.

repo/scripts/releasing/patch-comment.js:97

  const dryRun = argv.dryRun || process.env.DRY_RUN === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e6c2a04c5602fdaa — Environment-variable access.

repo/scripts/releasing/patch-comment.js:98

  const runId = process.env.GITHUB_RUN_ID || '12345678';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f058a81e519c7e1 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:99

  const raceConditionFailure = process.env.RACE_CONDITION_FAILURE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #05c288b9620a2c3c — Environment-variable access.

repo/scripts/releasing/patch-comment.js:102

  const currentReleaseVersion = process.env.CURRENT_RELEASE_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #af06b3a0a12911ae — Environment-variable access.

repo/scripts/releasing/patch-comment.js:103

  const currentReleaseTag = process.env.CURRENT_RELEASE_TAG;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7f6f8c09e23fe2c2 — Environment-variable access.

repo/scripts/releasing/patch-comment.js:104

  const currentPreviousTag = process.env.CURRENT_PREVIOUS_TAG;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6920aa9bf3c1ee07 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:22

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a5475a58527b8a03 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:27

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #35b0ea77c3e0f3ad — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:32

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #baa36918e0804d09 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:38

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f547c2d32f40e265 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:43

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5d4db9d31a2e90e2 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:52

      default: process.env.ENVIRONMENT || 'prod',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bce5d6e3b24cac8f — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:70

  const testMode = argv.test || process.env.TEST_MODE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ad9ab5b806467f97 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:76

  const originalPr = argv.originalPr || process.env.ORIGINAL_PR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b56cc47607342511 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:80

      : parseInt(process.env.EXIT_CODE || '1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #21f61c4dcc95c3b7 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:81

  const commit = argv.commit || process.env.COMMIT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3868f448c138d86a — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:82

  const channel = argv.channel || process.env.CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c54be98bb6dd3c12 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:85

    argv.repository || process.env.REPOSITORY || 'google-gemini/gemini-cli';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bc06dba451e3b0ed — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:86

  const runId = argv.runId || process.env.GITHUB_RUN_ID || '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #36dbcef65a148850 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:122

  if (testMode && !process.env.LOG_CONTENT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3a29554eb8799352 — Environment-variable access.

repo/scripts/releasing/patch-create-comment.js:131

    logContent = process.env.LOG_CONTENT || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a0c67233cb8c4c80 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:62

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d8d70f7ad07027c2 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:87

      default: process.env.ENVIRONMENT || 'prod',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3314cd5e3e6e3259 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:100

  const testMode = argv.test || process.env.TEST_MODE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #435871f7e14b74f2 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:103

    eventName: process.env.GITHUB_EVENT_NAME || 'pull_request',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0cb7aec686e36f32 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:105

      owner: process.env.GITHUB_REPOSITORY_OWNER || 'google-gemini',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf3e12b5f693a0b7 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:106

      repo: process.env.GITHUB_REPOSITORY_NAME || 'gemini-cli',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9e0591f6cbd0b0e2 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:108

    payload: JSON.parse(process.env.GITHUB_EVENT_PAYLOAD || '{}'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4031b035a09f4c7b — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:112

  const headRef = argv.headRef || process.env.HEAD_REF;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #612f77bd8dbfabf9 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:114

  const body = argv.prBody || process.env.PR_BODY || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ef0cf09f30eab37 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:117

    argv.forceSkipTests || process.env.FORCE_SKIP_TESTS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5b258747f94edbae — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:118

  const runId = process.env.GITHUB_RUN_ID || '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #02601fbc54977984 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:163

          env: { ...process.env, GH_TOKEN: process.env.GITHUB_TOKEN },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #d069d05c56a4f5bd — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/releasing/patch-trigger.js:170 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:170

        console.log(`Found original PR: #${originalPr}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #faad0feaf89f2e04 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:193

      : process.env.WORKFLOW_ID || 'release-patch-3-release.yml';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #4c7864c0593db233 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/releasing/patch-trigger.js:196 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:196

  console.log(`Release ref: ${releaseRef}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #8fd66822f2884a2b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/releasing/patch-trigger.js:208 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:208

    console.log(`  - Release ref: ${releaseRef}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #61f5b3e90221e943 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/releasing/patch-trigger.js:241 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:241

      console.log(`Running command: gh ${args.join(' ')}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #ebb588cd91a829f8 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:245

        env: { ...process.env, GH_TOKEN: process.env.GITHUB_TOKEN },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #12c71fd90ab9526d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/releasing/patch-trigger.js:254 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:254

    console.log('✅ Would trigger workflow with inputs:', {
      type: channel,
      dry_run: isDryRun.toString(),
      force_skip_tests: forceSkipTests.toString(),
      release_ref: releaseRef,
      original_pr: originalPr ? originalPr.toString() : '',
    });

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low pii_flow test-only Excluded from app score #715123c8b06bfaa2 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/releasing/patch-trigger.js:265 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:265

    console.log(`Commenting on original PR ${originalPr}...`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #118c2be8f847cc26 — Environment-variable access.

repo/scripts/releasing/patch-trigger.js:301

            env: { ...process.env, GH_TOKEN: process.env.GITHUB_TOKEN },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #6e4837271cfad5eb — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/scripts/releasing/patch-trigger.js:324 · flow /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/repo/scripts/releasing/patch-trigger.js:324

      console.log('✅ Would post comment:', commentBody);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #eb0d72a05a6817f6 — Environment-variable access.

repo/scripts/run_eval_regression.js:23

  const modelList = process.env.MODEL_LIST || 'gemini-3-flash-preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a1474d835003efe3 — Filesystem access.

repo/scripts/run_eval_regression.js:86

    fs.writeFileSync('eval_regression_report.md', combinedReport);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4561d802fc583f0f — Filesystem access.

repo/scripts/run_regression_check.js:51

    ? JSON.parse(fs.readFileSync(reportPath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #02572f40b267c39e — Filesystem access.

repo/scripts/run_regression_check.js:275

  fs.writeFileSync(
    'evals/logs/pr_final_report.json',
    JSON.stringify(finalReport, null, 2),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2fdddcd4cbc0d49c — Environment-variable access.

repo/scripts/sandbox_command.js:36

const homedir = () => process.env['GEMINI_CLI_HOME'] || os.homedir();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e48cc9a94990acbf — Environment-variable access.

repo/scripts/sandbox_command.js:38

let geminiSandbox = process.env.GEMINI_SANDBOX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #45e136c19c7358cc — Filesystem access.

repo/scripts/sandbox_command.js:44

      stripJsonComments(readFileSync(userSettingsFile, 'utf-8')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e87b75a4471fc45c — Environment-variable access.

repo/scripts/sandbox_command.js:70

  geminiSandbox = process.env.GEMINI_SANDBOX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #33b66495f9fdf5c9 — Environment-variable access.

repo/scripts/sandbox_command.js:115

  if (os.platform() === 'darwin' && process.env.SEATBELT_PROFILE !== 'none') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a7bcd908140717b — Filesystem access.

repo/scripts/seed-test-inbox.js:70

  await fs.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f34d19f6761186d1 — Filesystem access.

repo/scripts/seed-test-inbox.js:118

  existingGlobalGemini = await fs.readFile(globalGeminiMd, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f7eda8df3104669 — Filesystem access.

repo/scripts/start.js:27

const pkg = JSON.parse(readFileSync(join(root, 'package.json'), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #82f356274a29c8f8 — Environment-variable access.

repo/scripts/start.js:49

const isInDebugMode = process.env.DEBUG === '1' || process.env.DEBUG === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3050f043585e0257 — Environment-variable access.

repo/scripts/start.js:52

  if (process.env.SANDBOX) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f58e96ea98bcfd19 — Environment-variable access.

repo/scripts/start.js:53

    const port = process.env.DEBUG_PORT || '9229';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7959464b9205441e — Environment-variable access.

repo/scripts/start.js:70

  process.env.GEMINI_KEEP_CI_ENV === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5b4534561c5e3057 — Environment-variable access.

repo/scripts/start.js:71

  process.env.GEMINI_KEEP_CI_ENV === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fa4f0c7a1fa226a8 — Environment-variable access.

repo/scripts/telemetry.js:17

  process.env.HOME || process.env.USERPROFILE || process.env.HOMEPATH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf9b50e9ac75dbd0 — Filesystem access.

repo/scripts/telemetry.js:28

      const content = readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #53d7b2628ee44099 — Environment-variable access.

repo/scripts/telemetry_gcp.js:81

  const projectId = process.env.OTLP_GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #254296eabdeb9b16 — Filesystem access.

repo/scripts/telemetry_gcp.js:132

  fs.writeFileSync(OTEL_CONFIG_FILE, getOtelConfigContent(projectId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9e647771a9a974b5 — Filesystem access.

repo/scripts/telemetry_gcp.js:159

      console.error(fs.readFileSync(OTEL_LOG_FILE, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eec487ef0555914b — Environment-variable access.

repo/scripts/telemetry_utils.js:28

const homedir = () => process.env['GEMINI_CLI_HOME'] || os.homedir();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88a548fa63174333 — Filesystem access.

repo/scripts/telemetry_utils.js:59

    const content = fs.readFileSync(tmpFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5cb879a0e81a8600 — Filesystem access.

repo/scripts/telemetry_utils.js:113

  const content = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b43c1073c4abc809 — Filesystem access.

repo/scripts/telemetry_utils.js:123

  fs.writeFileSync(filePath, JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e142c792a2dc85d5 — Filesystem access.

repo/scripts/utils/eval-inventory.ts:74

    const sourceText = await fs.promises.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fa45829eb2ff4955 — Environment-variable access.

repo/scripts/utils/eval-inventory.ts:259

  if (!generatedDate && process.env.SOURCE_DATE_EPOCH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea8362fd10f9e3ff — Environment-variable access.

repo/scripts/utils/eval-inventory.ts:260

    const epoch = parseInt(process.env.SOURCE_DATE_EPOCH, 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #daecc6c6d53d99e3 — Environment-variable access.

repo/scripts/utils/eval-inventory.ts:267

    (process.env.EVAL_INVENTORY_STABLE_DATE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f704200ba7c0342 — Environment-variable access.

repo/scripts/utils/eval-inventory.ts:268

      process.env.EVAL_INVENTORY_DETERMINISTIC)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e382db80353bb91c — Filesystem access.

repo/scripts/version.js:19

  return JSON.parse(readFileSync(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f79a01d42a8a2179 — Filesystem access.

repo/scripts/version.js:23

  writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06c1b957409cf136 — Filesystem access.

repo/sea/sea-launch.cjs:178

        fsMod.writeFileSync(destPath, new Uint8Array(content), {
          mode: 0o755,
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bf70fe52a7eb6ee — Environment-variable access.

repo/sea/sea-launch.cjs:228

  process.env.IS_BINARY = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d9ed49063f63a62 — Environment-variable access.

repo/third_party/get-ripgrep/src/downloadRipGrep.js:25

const VERSION = process.env.RIPGREP_VERSION || 'v13.0.0-10'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #433d5456f62f3bde — Environment-variable access.

repo/third_party/get-ripgrep/src/downloadRipGrep.js:30

  const arch = process.env.npm_config_arch || os.arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #065d2b41a740d0d2 — Environment-variable access.

repo/third_party/get-ripgrep/src/downloadRipGrep.js:31

  const platform = process.env.platform || os.platform()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0ffcc10b0d29a86 — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/egress-service/src/actions/github.ts:12

  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a55c6c9b6221e2c — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/egress-service/src/app.ts:21

    service: process.env.K_SERVICE || 'caretaker-egress-service',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc68edc56ced8d00 — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/egress-service/src/app.ts:22

    revision: process.env.K_REVISION || 'local',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37c99fc1ae49983f — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/egress-service/src/server.ts:9

const port = process.env.PORT || 8080;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1139c9fb50ef845 — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/ingestion-service/app.ts:24

  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8cc17efdebfe767 — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/ingestion-service/app.ts:60

    service: process.env.K_SERVICE || 'caretaker-ingestion-service',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f67f6267c7ead377 — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/ingestion-service/app.ts:61

    revision: process.env.K_REVISION || 'local',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #262236478daaa67f — Environment-variable access.

repo/tools/caretaker-agent/cloudrun/ingestion-service/server.ts:9

const port = parseInt(process.env.PORT || '8080', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62e5f8e8ab26acf1 — Filesystem access.

repo/tools/gemini-cli-bot/history/sync.ts:84

      writeFileSync(
        join(HISTORY_DIR, 'metrics-timeseries.csv'),
        readFileSync(tsFile),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c500fee43383753a — Filesystem access.

repo/tools/gemini-cli-bot/history/sync.ts:86

        readFileSync(tsFile),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09478156878a4f22 — Filesystem access.

repo/tools/gemini-cli-bot/history/sync.ts:100

      writeFileSync(
        join(HISTORY_DIR, 'metrics-before-prev.csv'),
        readFileSync(mbFile),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #391c21e936f49d15 — Filesystem access.

repo/tools/gemini-cli-bot/history/sync.ts:102

        readFileSync(mbFile),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae63273349802ee6 — Filesystem access.

repo/tools/gemini-cli-bot/metrics/history-helper.ts:28

    const content = readFileSync(TIMESERIES_FILE, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #853b9a3f75ea075c — Filesystem access.

repo/tools/gemini-cli-bot/metrics/index.ts:133

  writeFileSync(OUTPUT_FILE, results.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #458fd3ad086e2096 — Filesystem access.

repo/tools/gemini-cli-bot/metrics/index.ts:140

    timeseriesLines = readFileSync(TIMESERIES_FILE, 'utf-8').trim().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #426a7c48dee6c3ab — Filesystem access.

repo/tools/gemini-cli-bot/metrics/index.ts:155

    writeFileSync(TIMESERIES_FILE, timeseriesLines.join('\n') + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #62619ff4847c7ed9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/tools/gemini-cli-bot/metrics/scripts/actions_spend.ts:47

          const res = await fetch(
            `https://api.github.com/repos/${repoName}/actions/runs/${r.databaseId}/jobs`,
            {
              headers: {
                Authorization: `Bearer ${token}`,
                Accept: 'application/vnd.github.v3+json',
              },
            },
          );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (npm): packages/a2a-server

npm first-party

expand_more 53 low-confidence finding(s)

low env_fs production #58d7ac0bd82590b3 — Environment-variable access.

repo/packages/a2a-server/src/agent/executor.ts:54

    return process.env['CODER_AGENT_WORKSPACE_PATH'] ?? process.cwd();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c30aee7d29e1552 — Filesystem access.

repo/packages/a2a-server/src/agent/task.ts:669

      const currentContent = await fs.readFile(resolvedPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce37949e0262b81d — Filesystem access.

repo/packages/a2a-server/src/agent/task.ts:740

            await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d4773053d257ef3 — Environment-variable access.

repo/packages/a2a-server/src/agent/task.ts:996

      const gcpProject = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d223dd72be86154f — Environment-variable access.

repo/packages/a2a-server/src/agent/task.ts:997

      const gcpCreds = process.env['GOOGLE_APPLICATION_CREDENTIALS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23b769e9ce6de687 — Environment-variable access.

repo/packages/a2a-server/src/agent/task.ts:999

        delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ebdfd7d81f8e7a4 — Environment-variable access.

repo/packages/a2a-server/src/agent/task.ts:1000

        delete process.env['GOOGLE_APPLICATION_CREDENTIALS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #641ded44e9dd2144 — Environment-variable access.

repo/packages/a2a-server/src/agent/task.ts:1038

          process.env['GOOGLE_CLOUD_PROJECT'] = gcpProject;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a3b4fb79ea874c3 — Environment-variable access.

repo/packages/a2a-server/src/agent/task.ts:1041

          process.env['GOOGLE_APPLICATION_CREDENTIALS'] = gcpCreds;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7b39799bad1c304 — Environment-variable access.

repo/packages/a2a-server/src/commands/init.test.ts:63

    process.env['CODER_AGENT_WORKSPACE_PATH'] = mockWorkspacePath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08df7a74592c5b39 — Filesystem access.

repo/packages/a2a-server/src/commands/init.ts:83

    fs.writeFileSync(geminiMdPath, '', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c254466bebffbf84 — Environment-variable access.

repo/packages/a2a-server/src/commands/init.ts:93

      workspacePath: process.env['CODER_AGENT_WORKSPACE_PATH']!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0be1331cfd3c9c59 — Environment-variable access.

repo/packages/a2a-server/src/commands/init.ts:139

      process.env['CODER_AGENT_WORKSPACE_PATH']!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b222dd29396185f — Filesystem access.

repo/packages/a2a-server/src/commands/restore.ts:57

        data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84920a2f6e3396f6 — Filesystem access.

repo/packages/a2a-server/src/commands/restore.ts:131

        const data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0065502f544ac9da — Environment-variable access.

repo/packages/a2a-server/src/config/config.ts:247

  return process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2eac1f10d074c9f4 — Environment-variable access.

repo/packages/a2a-server/src/config/config.ts:458

      process.env['VITEST'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #826afd7d8aea0eb3 — Environment-variable access.

repo/packages/a2a-server/src/config/config.ts:459

      process.env['NODE_ENV'] === 'test' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87e1e4547ca459be — Filesystem access.

repo/packages/a2a-server/src/config/config.ts:533

      const content = await fs.promises.readFile(envFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d74362e2a36ecf1 — Filesystem access.

repo/packages/a2a-server/src/config/extension.ts:98

    const configContent = fs.readFileSync(configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8aed66cc7c3a10d6 — Filesystem access.

repo/packages/a2a-server/src/config/extension.ts:147

    const configContent = fs.readFileSync(metadataFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ff03eff5dd62d7b0 — Filesystem access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:52

    fs.writeFileSync(
      path.join(geminiDir, '.env'),
      'GEMINI_CLI_TRUST_WORKSPACE=true\nGEMINI_YOLO_MODE=true\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f3f09afcd91f5a18 — Environment-variable access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:67

    expect(process.env['GEMINI_CLI_TRUST_WORKSPACE']).toBeFalsy();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c1155d68b805c9a6 — Environment-variable access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:68

    expect(process.env['GEMINI_YOLO_MODE']).toBeFalsy();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0b22ace3969b044f — Filesystem access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:72

    fs.writeFileSync(
      path.join(tempWorkspaceDir, '.env'),
      'GEMINI_API_KEY=safe-key-123;rm -rf /\nGOOGLE_CLOUD_PROJECT=my-project\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #37345a13e2378bd6 — Environment-variable access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:87

    expect(process.env['GEMINI_API_KEY']).toBeFalsy();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52a9607c71663315 — Environment-variable access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:88

    expect(process.env['GOOGLE_CLOUD_PROJECT']).toBeFalsy();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b926dd6a2b8b0740 — Filesystem access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:93

    fs.writeFileSync(
      path.join(geminiDir, '.env'),
      'GEMINI_CLI_TRUST_WORKSPACE=true\nGEMINI_YOLO_MODE=true\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #34dea23c5f5ceea2 — Environment-variable access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:110

    expect(process.env['GEMINI_CLI_TRUST_WORKSPACE']).toBeFalsy();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c3074899c429778 — Environment-variable access.

repo/packages/a2a-server/src/config/rce_vulnerability.test.ts:111

    expect(process.env['GEMINI_YOLO_MODE']).toBeFalsy();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e86a575afc95b108 — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:110

    fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(settings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea9e7c552c3e7c20 — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:125

    fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(settings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00324376376ee872 — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:139

    fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #99bf8956245c6c4f — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:151

    fs.writeFileSync(workspaceSettingsPath, JSON.stringify(workspaceSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4e0049f9b32d58f2 — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:165

      fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #07aff616109084f8 — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:172

      fs.writeFileSync(
        workspaceSettingsPath,
        JSON.stringify(workspaceSettings),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84377f5eacbd3082 — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:188

      fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3cce3b01cf3da3ea — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:195

      fs.writeFileSync(
        workspaceSettingsPath,
        JSON.stringify(workspaceSettings),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f210257a6e792cc — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:213

      fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #271e14f7eb1bdf5e — Filesystem access.

repo/packages/a2a-server/src/config/settings.test.ts:224

      fs.writeFileSync(
        workspaceSettingsPath,
        JSON.stringify(workspaceSettings),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a2e4dc6f3c2b799 — Filesystem access.

repo/packages/a2a-server/src/config/settings.ts:85

      const userContent = fs.readFileSync(USER_SETTINGS_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ea4e2c27b3dac12 — Filesystem access.

repo/packages/a2a-server/src/config/settings.ts:119

        const projectContent = fs.readFileSync(workspaceSettingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dd33f992895afe4a — Environment-variable access.

repo/packages/a2a-server/src/http/app.test.ts:1062

      delete process.env['CODER_AGENT_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #75a1600748176a4f — Environment-variable access.

repo/packages/a2a-server/src/http/app.test.ts:1082

      delete process.env['CODER_AGENT_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #823ae342aa67c957 — Environment-variable access.

repo/packages/a2a-server/src/http/app.test.ts:1104

      process.env['CODER_AGENT_WORKSPACE_PATH'] = '/tmp/test-workspace';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c540336d30e7b02a — Environment-variable access.

repo/packages/a2a-server/src/http/app.ts:149

      if (!process.env['CODER_AGENT_WORKSPACE_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4cd8a26ece55283e — Environment-variable access.

repo/packages/a2a-server/src/http/app.ts:228

        process.env[key] = globalEnv[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb46f1099fddd24b — Environment-variable access.

repo/packages/a2a-server/src/http/app.ts:249

    const bucketName = process.env['GCS_BUCKET_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f951271969658ce5 — Environment-variable access.

repo/packages/a2a-server/src/http/app.ts:409

    const port = Number(process.env['CODER_AGENT_PORT'] || 0);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc97ef39361b7ee4 — Environment-variable access.

repo/packages/a2a-server/src/http/app.ts:414

      if (process.env['CODER_AGENT_PORT']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #632f34120b219de8 — Environment-variable access.

repo/packages/a2a-server/src/http/app.ts:415

        actualPort = process.env['CODER_AGENT_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b749763901105b81 — Environment-variable access.

repo/packages/a2a-server/src/http/server.ts:23

  process.env['NODE_ENV'] !== 'test'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76b98f664f541292 — Filesystem access.

repo/packages/a2a-server/src/persistence/gcs.test.ts:71

        actualFs.writeFileSync(file, Buffer.from('dummy tar content'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/cli

npm first-party

expand_more 902 low-confidence finding(s)

low env_fs production #5fb9a7cfd6f02dae — Environment-variable access.

repo/packages/cli/index.ts:57

      process.env['GEMINI_CLI_HOME'] || join(os.homedir(), '.gemini');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e76c1281a60c95f2 — Environment-variable access.

repo/packages/cli/index.ts:85

  if (!process.env['GEMINI_CLI_NO_RELAUNCH'] && !process.env['SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d294a390a4c3274 — Environment-variable access.

repo/packages/cli/index.ts:175

        if (!process.env['NO_COLOR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ffb756096dd11f3 — Environment-variable access.

repo/packages/cli/src/acp/acpSessionManager.ts:73

      (authDetails.baseUrl || process.env['GOOGLE_GEMINI_BASE_URL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd280d6bb46df104 — Environment-variable access.

repo/packages/cli/src/acp/acpSessionManager.ts:239

      (authDetails.baseUrl || process.env['GOOGLE_GEMINI_BASE_URL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d37de93c22c62509 — Environment-variable access.

repo/packages/cli/src/acp/commands/about.ts:29

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4b8f11061af7d4e — Environment-variable access.

repo/packages/cli/src/acp/commands/about.ts:30

      sandboxEnv = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #260c3d495628b811 — Environment-variable access.

repo/packages/cli/src/acp/commands/about.ts:31

    } else if (process.env['SANDBOX'] === 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44904e59227137c3 — Environment-variable access.

repo/packages/cli/src/acp/commands/about.ts:33

        process.env['SEATBELT_PROFILE'] || 'unknown'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e4f54aef35c2c94 — Environment-variable access.

repo/packages/cli/src/acp/commands/about.ts:40

    const gcpProject = process.env['GOOGLE_CLOUD_PROJECT'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7487f12fdf3ad416 — Filesystem access.

repo/packages/cli/src/acp/commands/init.ts:40

        fs.writeFileSync(geminiMdPath, '', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91a68795bb47e8fa — Filesystem access.

repo/packages/cli/src/acp/commands/restore.ts:57

        data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a328188dbc66d49 — Filesystem access.

repo/packages/cli/src/acp/commands/restore.ts:147

        const data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #11ed434b7f9c0a78 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/cli/src/commands/extensions/examples/mcp-server/example.js:23

    const apiResponse = await fetch(
      'https://jsonplaceholder.typicode.com/posts',
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #302f514979788e49 — Filesystem access.

repo/packages/cli/src/commands/extensions/new.ts:65

    await writeFile(
      join(args.path, 'gemini-extension.json'),
      JSON.stringify(manifest, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10f6cbd5005fe75f — Filesystem access.

repo/packages/cli/src/commands/gemma/logs.test.ts:78

    await fs.promises.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c566d216c0542ea9 — Filesystem access.

repo/packages/cli/src/commands/gemma/logs.test.ts:91

    await fs.promises.writeFile(filePath, 'line-1\nline-2\n', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #d7dbba73d39a9918 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/cli/src/commands/gemma/platform.ts:140

    const response = await fetch(
      `http://localhost:${port}/${LITERT_API_VERSION}/models/${GEMMA_MODEL_NAME}:generateContent`,
      { method: 'POST', signal: controller.signal },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #5e1e5a08ef61316e — Filesystem access.

repo/packages/cli/src/commands/gemma/platform.ts:191

    const content = fs.readFileSync(pidPath, 'utf-8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9b4d31207e73312 — Filesystem access.

repo/packages/cli/src/commands/gemma/platform.ts:210

  fs.writeFileSync(getPidFilePath(), JSON.stringify(processInfo), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ce650a5527820a8 — Filesystem access.

repo/packages/cli/src/commands/gemma/platform.ts:228

      const output = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #da00d6a0803d4af2 — Filesystem access.

repo/packages/cli/src/commands/gemma/setup.test.ts:37

    await fs.promises.writeFile(filePath, 'hello world', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84a2c4ba6d25d438 — Filesystem access.

repo/packages/cli/src/commands/gemma/setup.test.ts:50

    await fs.promises.writeFile(filePath, 'hello world', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #3c8ccd407a4c36f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/cli/src/commands/gemma/setup.ts:77

  const response = await fetch(url, { redirect: 'follow' });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #8c6fc577ec44fa56 — Filesystem access.

repo/packages/cli/src/commands/hooks/migrate.ts:188

      const content = fs.readFileSync(claudeLocalSettingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c6c756678299d96 — Filesystem access.

repo/packages/cli/src/commands/hooks/migrate.ts:202

      const content = fs.readFileSync(claudeSettingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #af2dd2264204eb85 — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:150

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7fc5fffec161ee66 — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:157

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8423c462a15bc305 — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:183

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b56cd2b8459a4d0 — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:190

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b0e49497e0d1c6e — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:208

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #348b4d076bbe0771 — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:215

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c95307286efe9c89 — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:244

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a60d4efc969c2d9 — Filesystem access.

repo/packages/cli/src/commands/mcp/remove.test.ts:251

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48ded6adbcb229d3 — Environment-variable access.

repo/packages/cli/src/config/auth.ts:22

    const key = process.env['GEMINI_API_KEY'] || (await loadApiKey());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #faa6e332da8c71d5 — Environment-variable access.

repo/packages/cli/src/config/auth.ts:34

      !!process.env['GOOGLE_CLOUD_PROJECT'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7de10741ac38803b — Environment-variable access.

repo/packages/cli/src/config/auth.ts:35

      !!process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #616b64c397942838 — Environment-variable access.

repo/packages/cli/src/config/auth.ts:36

    const hasGoogleApiKey = !!process.env['GOOGLE_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #1d66e972d34a28d5 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/cli/src/config/config.integration.test.ts:63

    server.resetHandlers(http.post(CLEARCUT_URL, () => HttpResponse.text()));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #9c13e200c5badbaa — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:140

      if (process.env['VITEST'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9154d1d72b40f4e3 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:149

        process.env['CI'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aa0b15445b318506 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:150

        process.env['GITHUB_ACTIONS'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8be3f4a31c4ded13 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:167

const originalGeminiModel = process.env['GEMINI_MODEL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #903e66eba8c6282d — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:172

  delete process.env['GEMINI_MODEL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #246998536d022285 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:195

    process.env['GEMINI_MODEL'] = originalGeminiModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f41ccddf85a3ac06 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:197

    delete process.env['GEMINI_MODEL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d5ffdbf3b3422ae2 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:890

        originalProxyEnv[key] = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d680c2e2f9e34fd — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:891

        delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f144c98af8fe83f5 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:898

          process.env[key] = originalProxyEnv[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #82d189b5066c923b — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:900

          delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e0ac27e05e705591 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:1952

    originalVitest = process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0e0542ebd5220755 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:1953

    originalIntegrationTest = process.env['GEMINI_CLI_INTEGRATION_TEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #509d29e24dbc1e94 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:1954

    delete process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0a5aa14ca520d5f1 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:1955

    delete process.env['GEMINI_CLI_INTEGRATION_TEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #975a639d3137123b — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:1960

      process.env['VITEST'] = originalVitest;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92ffa74f1a30f297 — Environment-variable access.

repo/packages/cli/src/config/config.test.ts:1963

      process.env['GEMINI_CLI_INTEGRATION_TEST'] = originalIntegrationTest;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9df78d278eb999d8 — Environment-variable access.

repo/packages/cli/src/config/config.ts:516

      process.env['GEMINI_CLI_TRUST_WORKSPACE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aef5ccf0365af9e1 — Environment-variable access.

repo/packages/cli/src/config/config.ts:566

    [process.env['DEBUG'], process.env['DEBUG_MODE']].some(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a24e29ec5fa119a8 — Environment-variable access.

repo/packages/cli/src/config/config.ts:600

    process.env['GEMINI_SANDBOX'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8f341b866ba1391 — Environment-variable access.

repo/packages/cli/src/config/config.ts:608

    process.env['GEMINI_CLI_INTEGRATION_TEST'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e81939bf9c30c44 — Environment-variable access.

repo/packages/cli/src/config/config.ts:609

    process.env['VITEST'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df54dc2e463cc43e — Environment-variable access.

repo/packages/cli/src/config/config.ts:644

  const ideWorkspacePath = process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f79632e0a2398ea — Environment-variable access.

repo/packages/cli/src/config/config.ts:682

    process.env['GEMINI_CLI_EXTENSION_REGISTRY_URI'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4544c9bd1c87701 — Environment-variable access.

repo/packages/cli/src/config/config.ts:843

    argv.model || process.env['GEMINI_MODEL'] || settings.model?.name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0d3ed94eb19c62e — Environment-variable access.

repo/packages/cli/src/config/config.ts:929

      (ide.name !== 'vscode' || process.env['TERM_PROGRAM'] === 'vscode')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3bb4b4605e4e2a7 — Environment-variable access.

repo/packages/cli/src/config/config.ts:1028

      process.env['HTTPS_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6a797f1289feccf — Environment-variable access.

repo/packages/cli/src/config/config.ts:1029

      process.env['https_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a9aa67fb8358e75 — Environment-variable access.

repo/packages/cli/src/config/config.ts:1030

      process.env['HTTP_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3967f6c20e1f4d75 — Environment-variable access.

repo/packages/cli/src/config/config.ts:1031

      process.env['http_proxy'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85c5202bb928a32f — Environment-variable access.

repo/packages/cli/src/config/config.ts:1063

    noBrowser: !!process.env['NO_BROWSER'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #80827115e0b3a46a — Filesystem access.

repo/packages/cli/src/config/extension-manager-agents.test.ts:89

    fs.writeFileSync(
      path.join(agentsDir, 'test-agent.md'),
      '---\nname: test-agent\nkind: local\ndescription: test desc\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #71ab0420a0362ebb — Filesystem access.

repo/packages/cli/src/config/extension-manager-agents.test.ts:124

    fs.writeFileSync(
      path.join(agentsDir, 'bad-agent.md'),
      '---\nname: bad-agent\nkind: local\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #abd0760541a49f99 — Filesystem access.

repo/packages/cli/src/config/extension-manager-hydration.test.ts:107

    fs.writeFileSync(
      path.join(skillSubdir, 'SKILL.md'),
      `---
name: my-skill
description: test
---
Use key: \${MY_API_KEY}
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #231315589da45877 — Filesystem access.

repo/packages/cli/src/config/extension-manager-hydration.test.ts:157

    fs.writeFileSync(
      path.join(agentsDir, 'my-agent.md'),
      `---
name: my-agent
description: test
---
System using model: \${MODEL_NAME}
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8659d5e37ed0eb4b — Filesystem access.

repo/packages/cli/src/config/extension-manager-hydration.test.ts:213

    fs.writeFileSync(
      path.join(hooksDir, 'hooks.json'),
      JSON.stringify({
        hooks: {
          BeforeTool: [
            {
              hooks: [
                {
                  type: 'command',
                  command: 'echo $HOOK_CMD',
                },
              ],
            },
          ],
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2c7cc73cc5b7c331 — Filesystem access.

repo/packages/cli/src/config/extension-manager-hydration.test.ts:288

    fs.writeFileSync(
      path.join(skillSubdir, 'SKILL.md'),
      '---\nname: my-skill\ndescription: test\n---\nValue is: ${MY_VALUE}',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #148afb60bb62d794 — Filesystem access.

repo/packages/cli/src/config/extension-manager-permissions.test.ts:50

    fs.writeFileSync(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d022a7a4f4031e4c — Filesystem access.

repo/packages/cli/src/config/extension-manager-permissions.test.ts:57

    expect(() => fs.writeFileSync(filePath, 'fail')).toThrow();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #924ae2cfa9019073 — Filesystem access.

repo/packages/cli/src/config/extension-manager-permissions.test.ts:72

    fs.writeFileSync(destFilePath, 'writable');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #69b3bc61abc992d4 — Filesystem access.

repo/packages/cli/src/config/extension-manager-permissions.test.ts:73

    expect(fs.readFileSync(destFilePath, 'utf-8')).toBe('writable');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fb7dde8de6fa3736 — Filesystem access.

repo/packages/cli/src/config/extension-manager-permissions.test.ts:85

    fs.writeFileSync(filePath, 'nested content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d553444f257489a7 — Filesystem access.

repo/packages/cli/src/config/extension-manager-permissions.test.ts:109

    fs.writeFileSync(symlinkTarget, 'external content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2da0ff313e91820 — Filesystem access.

repo/packages/cli/src/config/extension-manager-scope.test.ts:75

    fs.writeFileSync(
      path.join(extensionDir, 'gemini-extension.json'),
      JSON.stringify(extensionConfig),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d87fcaca3126ea9f — Filesystem access.

repo/packages/cli/src/config/extension-manager-scope.test.ts:85

    fs.writeFileSync(
      path.join(extensionDir, 'install-metadata.json'),
      JSON.stringify(installMetadata),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4fb69c8e85a0cce7 — Filesystem access.

repo/packages/cli/src/config/extension-manager-scope.test.ts:100

    fs.writeFileSync(userSettingsPath, 'TEST_SETTING=user-value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04d7d7292d73feb7 — Filesystem access.

repo/packages/cli/src/config/extension-manager-scope.test.ts:104

    fs.writeFileSync(workspaceSettingsPath, 'TEST_SETTING=workspace-value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4793b5dd706adf02 — Filesystem access.

repo/packages/cli/src/config/extension-manager-scope.test.ts:141

    fs.writeFileSync(userSettingsPath, 'TEST_SETTING=user-value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #96d8f0d9d102d2a2 — Filesystem access.

repo/packages/cli/src/config/extension-manager-skills.test.ts:103

    fs.writeFileSync(path.join(skillsDir, 'not-a-skill.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d6234280b6d6086 — Filesystem access.

repo/packages/cli/src/config/extension-manager-skills.test.ts:130

    fs.writeFileSync(path.join(skillsDir, 'not-a-skill.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cccc14e7e576468 — Filesystem access.

repo/packages/cli/src/config/extension-manager-skills.test.ts:177

    fs.writeFileSync(
      path.join(skillSubdir, 'SKILL.md'),
      '---\nname: test-skill\ndescription: test desc\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #40baf6ae602475ed — Environment-variable access.

repo/packages/cli/src/config/extension-manager-themes.spec.ts:49

    process.env['GEMINI_CLI_HOME'] = tempHomeDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7cdb0abf15584e01 — Environment-variable access.

repo/packages/cli/src/config/extension-manager-themes.spec.ts:73

    delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a76629b902c2a0ee — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:171

      fs.writeFileSync(path.join(ext1Dir, 'gemini-extension.json'), config);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #484ee10dbe649c62 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:172

      fs.writeFileSync(
        path.join(ext1Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext1Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #680c77cad111d525 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:177

      fs.writeFileSync(path.join(ext2Dir, 'gemini-extension.json'), config);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #647a6b991654f752 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:178

      fs.writeFileSync(
        path.join(ext2Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext2Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f9c29e0fca5fecb8 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:204

      fs.writeFileSync(
        path.join(externalDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext2', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1eab73e35afb0ba1 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:208

      fs.writeFileSync(
        path.join(externalDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: externalDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6bce4c4d8a20a0a6 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:239

      fs.writeFileSync(
        path.join(extensionDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'test-ext', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6cd6c385e860c4bc — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:393

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: oldName, version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88efecebec272243 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:397

      fs.writeFileSync(
        path.join(extDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: extDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5c847b9c5b8b957 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:408

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: newName, version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #53e8ec8985b63f65 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:412

      fs.writeFileSync(
        path.join(newSourceDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: newSourceDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb459832de8aff70 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:438

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: oldName, version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b47b90892709f585 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:442

      fs.writeFileSync(
        path.join(extDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: extDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e3a7892a10125fb1 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:458

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: newName, version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d2f7fe876493b5f0 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:462

      fs.writeFileSync(
        path.join(newSourceDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: newSourceDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #99ef22375c63a033 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:482

      fs.writeFileSync(
        path.join(ext1Dir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext1', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0557e74bbbcf56ac — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:486

      fs.writeFileSync(
        path.join(ext1Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext1Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #932980792395161e — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:493

      fs.writeFileSync(
        path.join(ext2Dir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext2', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #09572426e1badb55 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:497

      fs.writeFileSync(
        path.join(ext2Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext2Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5479ab6e1660699e — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:508

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext2', version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d7b17ad1e7e87f9 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:512

      fs.writeFileSync(
        path.join(newSourceDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: newSourceDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d426c363108bdb9 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:532

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'integrity-ext', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c12df6fa9994a66c — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:556

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: extName, version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #55d54d18de179d37 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:560

      fs.writeFileSync(
        path.join(extDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: extDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6fcc8d56f12054e0 — Filesystem access.

repo/packages/cli/src/config/extension-manager.test.ts:580

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: extName, version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b02534bc7bd29333 — Filesystem access.

repo/packages/cli/src/config/extension-manager.ts:442

        await fs.promises.writeFile(metadataPath, metadataString);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18ce36ac1ad9d32d — Filesystem access.

repo/packages/cli/src/config/extension-manager.ts:1023

      const configContent = await fs.promises.readFile(configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebbf160301284e27 — Filesystem access.

repo/packages/cli/src/config/extension-manager.ts:1061

      const hooksContent = await fs.promises.readFile(hooksFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9a80365838e46d5 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:373

      fs.writeFileSync(path.join(sourceExtDir, 'context.md'), 'linked context');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #06f183a0fe34af58 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:419

      fs.writeFileSync(
        path.join(policiesDir, 'policies.toml'),
        policiesContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01b5036f3c7d55ff — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:473

      fs.writeFileSync(
        path.join(policiesDir, 'policies.toml'),
        policiesContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ebac04d1480019c3 — Environment-variable access.

repo/packages/cli/src/config/extension.test.ts:536

      process.env['TEST_API_KEY'] = 'test-api-key-123';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f473fc76cee291a — Environment-variable access.

repo/packages/cli/src/config/extension.test.ts:537

      process.env['TEST_DB_URL'] = 'postgresql://localhost:5432/testdb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #464364775f0a5699 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:566

        fs.writeFileSync(configPath, JSON.stringify(extensionConfig));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3517566d92ef7e8c — Environment-variable access.

repo/packages/cli/src/config/extension.test.ts:584

        delete process.env['TEST_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cc209f23de39433 — Environment-variable access.

repo/packages/cli/src/config/extension.test.ts:585

        delete process.env['TEST_DB_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c99c24d0ff4e122c — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:614

      fs.writeFileSync(envFilePath, 'MY_API_KEY=test-key-from-file\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0fb3362deb8426a — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:651

      fs.writeFileSync(
        path.join(extDir, EXTENSIONS_CONFIG_FILENAME),
        JSON.stringify(extensionConfig),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a3ae17130c2390a8 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:682

      fs.writeFileSync(badConfigPath, '{ "name": "bad-ext"'); // Malformed

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b9fcaf9b52973276 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:713

      fs.writeFileSync(badConfigPath, JSON.stringify({ version: '1.0.0' }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7014d15ef2111249 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1052

        fs.writeFileSync(
          path.join(hooksDir, 'hooks.json'),
          JSON.stringify(hooksConfig),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ce442347d7370da — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1088

        fs.writeFileSync(
          path.join(hooksDir, 'hooks.json'),
          JSON.stringify({ hooks: { BeforeTool: [] }, enabled: false }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #db9517e9a991d8d1 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1121

        fs.writeFileSync(
          path.join(hooksDir, 'hooks.json'),
          JSON.stringify({ hooks: {} }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #51c40ec2604c1b39 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1126

        fs.writeFileSync(
          path.join(sourceExtDir, 'gemini-extension.json'),
          JSON.stringify({
            name: 'hook-extension-install',
            version: '1.0.0',
          }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dd2a0764edb7df8f — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1167

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e3e2eed9ad66627 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1216

      fs.writeFileSync(configPath, '{ "name": "bad-json", "version": "1.0.0"'); // Malformed JSON

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a36c76b3aa21dab2 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1236

      fs.writeFileSync(configPath, JSON.stringify({ version: '1.0.0' }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92cc0af45c991183 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1258

        fs.writeFileSync(
          path.join(mockGit.path(), destination, EXTENSIONS_CONFIG_FILENAME),
          JSON.stringify({ name: extensionName, version: '1.0.0' }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6cbcb1b4cd9a7528 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1278

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22fea397ac425e0a — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1308

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f3118f72496150d — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1441

        fs.readFileSync(trustedFoldersPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9dca31e0da071820 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1617

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #43c38ceb3f888321 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1739

      let envContent = fs.readFileSync(envPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab693ccc285a8826 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1780

      envContent = fs.readFileSync(envPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #594cc450a4f09222 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1864

          fs.writeFileSync(
            path.join(mockGit.path(), destination, EXTENSIONS_CONFIG_FILENAME),
            JSON.stringify({ name: extensionName, version: '1.0.0' }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #039faf8833ee6742 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1904

        const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10a17484d071bc1c — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1939

        const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4aeeea8af0e61f88 — Filesystem access.

repo/packages/cli/src/config/extension.test.ts:1995

        const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46c2f4baf6636eb9 — Filesystem access.

repo/packages/cli/src/config/extension.ts:62

    const configContent = fs.readFileSync(metadataFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef5acf75042b5264 — Filesystem access.

repo/packages/cli/src/config/extensionRegistryClient.ts:135

          const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #83e7abc246ccceab — Filesystem access.

repo/packages/cli/src/config/extensions/consent.test.ts:344

        await fs.writeFile(path.join(skill1Dir, 'SKILL.md'), 'body1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #49d01bf17ce224f2 — Filesystem access.

repo/packages/cli/src/config/extensions/consent.test.ts:345

        await fs.writeFile(path.join(skill1Dir, 'extra.txt'), 'extra');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #abc6634c9ddecfe5 — Filesystem access.

repo/packages/cli/src/config/extensions/consent.test.ts:346

        await fs.writeFile(path.join(skill2Dir, 'SKILL.md'), 'body2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c5d9e8783ccc115 — Filesystem access.

repo/packages/cli/src/config/extensions/consent.test.ts:427

      await fs.writeFile(path.join(skill1Dir, 'SKILL.md'), 'body1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #326120f954db4813 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionEnablement.test.ts:185

      fs.writeFileSync(configPath, 'not a json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5219469c8774e3b1 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionEnablement.ts:182

      const content = fs.readFileSync(this.configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da6a55e7a28ed15a — Filesystem access.

repo/packages/cli/src/config/extensions/extensionEnablement.ts:208

    fs.writeFileSync(this.configFilePath, JSON.stringify(config, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #939527d2469efb1c — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:190

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ad0cb3d8cb7add4 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:223

      await fsPromises.writeFile(envPath, 'VAR1=previous-VAR1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #35220902536bc24e — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:234

      const actualContent = await fsPromises.readFile(envPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #19138758c1ac34b7 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:304

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea11509df3855e29 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:339

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #064e344940a41302 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:375

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3883f9f578ca8484 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:397

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #671bdf7dc1f6d278 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:551

      await fsPromises.writeFile(userEnvPath, 'VAR1=user-value1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c9af2ceaeb167398 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:575

      await fsPromises.writeFile(workspaceEnvPath, 'VAR1=workspace-value1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cbb8bfb702aca18a — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:633

      await fsPromises.writeFile(
        userEnvPath,
        'VAR1=user-value1\nVAR3=user-value3',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0bdee91f0e9e26e5 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:647

      await fsPromises.writeFile(workspaceEnvPath, 'VAR1=workspace-value1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c84ee1539c023a23 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:680

      await fsPromises.writeFile(userEnvPath, 'VAR1=value1\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0053a26de7fc1812 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:701

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52ff47e36d0fb989 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:718

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #012c75709e6d84e9 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:785

      await fsPromises.writeFile(workspaceEnvPath, originalEnvContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a718493b88d8fa1 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:799

      const actualContent = await fsPromises.readFile(
        workspaceEnvPath,
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6f014c4bc76faf02 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:845

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b36643de8e828e03 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:916

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #afa47fac8f40074a — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.test.ts:933

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d4983fd17fd170c — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.ts:138

  await fs.writeFile(envFilePath, envContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12512d8cc43333f9 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.ts:188

      const envFile = fsSync.readFileSync(envFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f9305fdc765bb2a — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.ts:286

    envContent = await fs.readFile(envFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e70d4e367236d2a2 — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.ts:308

  await fs.writeFile(envFilePath, newEnvContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #261f72a5a7adc78f — Filesystem access.

repo/packages/cli/src/config/extensions/extensionSettings.ts:352

      await fs.writeFile(envFilePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #800f5ab05d87fbeb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/cli/src/config/extensions/github.ts:534

    https
      .get(url, { headers }, (res) => {
        if (res.statusCode === 302 || res.statusCode === 301) {
          if (redirectCount >= 10) {
            return reject(new Error('Too many redirects'));
          }

          if (!res.headers.location) {
            return reject(
              new Error('Redirect response missing Location header'),
            );
          }
          downloadFile(res.headers.location, dest, options, redirectCount + 1)
            .then(resolve)
            .catch(reject);
          return;
        }
        if (res.statusCode !== 200) {
          return reject(
            new Error(`Request failed with status code ${res.statusCode}`),
          );
        }
        const file = fs.createWriteStream(dest);
        res.pipe(file);
        file.on('finish', () => file.close(resolve as () => void));
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #8d0218ba60612721 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:16

  const originalToken = process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ba6f834e5a49ba8 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:20

      process.env['GITHUB_TOKEN'] = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #396bda3b280372c0 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:22

      delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d0dc15cbe9bb1b9a — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:27

    process.env['GITHUB_TOKEN'] = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9e71bb199618b8fe — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:32

    delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a5c182f94def24e — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:137

    const originalToken = process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #450cec048f289ac1 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:140

      process.env['GITHUB_TOKEN'] = 'my-secret-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93b5103d9fedc5ba — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:145

        process.env['GITHUB_TOKEN'] = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78b4a34a50103ac0 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:147

        delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c69e9fa2c90b5179 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:171

    const originalToken = process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5f0abfe03faa395 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:174

      delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce89da1b11928d25 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.test.ts:179

        process.env['GITHUB_TOKEN'] = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e4858f574ba80c7 — Environment-variable access.

repo/packages/cli/src/config/extensions/github_fetch.ts:10

  return process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #cbd1040db4a5bf6d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/cli/src/config/extensions/github_fetch.ts:25

    https
      .get(url, { headers }, (res) => {
        if (res.statusCode === 302 || res.statusCode === 301) {
          if (redirectCount >= 10) {
            return reject(new Error('Too many redirects'));
          }
          if (!res.headers.location) {
            return reject(new Error('No location header in redirect response'));
          }
          res.resume();
          fetchJson<T>(
            new URL(res.headers.location, url).toString(),
            redirectCount + 1,
          )
            .then(resolve)
            .catch(reject);
          return;
        }
        if (res.statusCode !== 200) {
          return reject(
            new Error(`Request failed with status code ${res.statusCode}`),
          );
        }
        const chunks: Buffer[] = [];
        res.on('data', (chunk) => chunks.push(chunk));
        res.on('end', () => {
          const data = Buffer.concat(chunks).toString();
          // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
          resolve(JSON.parse(data) as T);
        });
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #7d8f4b6266567546 — Filesystem access.

repo/packages/cli/src/config/mcp/mcpServerEnablement.ts:360

      const content = await fs.readFile(this.configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #678fa2dda9bc84b6 — Filesystem access.

repo/packages/cli/src/config/mcp/mcpServerEnablement.ts:385

    await fs.writeFile(this.configFilePath, JSON.stringify(config, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea7faec8e302ceb4 — Filesystem access.

repo/packages/cli/src/config/policy.test.ts:85

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1c0b57a83f5d6552 — Filesystem access.

repo/packages/cli/src/config/policy.test.ts:126

      fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e64945f46c9e59bc — Filesystem access.

repo/packages/cli/src/config/policy.test.ts:148

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cbc4fc4bf7728ad — Filesystem access.

repo/packages/cli/src/config/policy.test.ts:169

      fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1eb4559d751a6524 — Filesystem access.

repo/packages/cli/src/config/policy.test.ts:189

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0082770c8b7e3d3 — Filesystem access.

repo/packages/cli/src/config/policy.test.ts:207

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6b0759cf6eec138f — Filesystem access.

repo/packages/cli/src/config/policy.test.ts:224

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e4a3250f9ecbc214 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:56

    delete process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b1bd95b5b8427c70 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:57

    delete process.env['GEMINI_SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b03076fd05ba7835 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:83

    process.env['SANDBOX'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7480dfa274fd64a8 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:90

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a76ee7185d8d859 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:104

      process.env['GEMINI_SANDBOX'] = 'invalid-command';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9f9b3c06cc758cc3 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:111

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e086b4250a15210 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:119

      process.env['GEMINI_SANDBOX'] = 'lxc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1cf928498c1c343c — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:133

      process.env['GEMINI_SANDBOX'] = 'lxc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d07b98b960f85af — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:240

      process.env['GEMINI_SANDBOX_IMAGE'] = 'env/image';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e0a286ca1fb7fbb5 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:241

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e33fcd2d93cf7b7a — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:254

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f843a487880b5098 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:268

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3728121da2617487 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:422

      process.env['GEMINI_SANDBOX'] = 'runsc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a5f5ffc372b62d4 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.test.ts:454

      process.env['GEMINI_SANDBOX'] = 'runsc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #631d7005abcdeb0d — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.ts:47

  if (process.env['SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80c19f2ea25a149e — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.ts:53

    process.env['GEMINI_SANDBOX']?.toLowerCase().trim() ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4c185f83e43774e — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.ts:155

    process.env['GEMINI_SANDBOX_IMAGE'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a631344d3d602486 — Environment-variable access.

repo/packages/cli/src/config/sandboxConfig.ts:156

    process.env['GEMINI_SANDBOX_IMAGE_DEFAULT'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0738dae8c4821ae3 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:51

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #37b65f2e512905a1 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:52

    delete process.env['OTHER_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4d299deec632aac5 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:73

    expect(process.env['GEMINI_API_KEY']).toBe('local');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cfc8d034913dd45b — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:74

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22ff25ea779ff2be — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:99

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cd11a7776baf3a60 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:100

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d38ffea021bf8d5 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:116

    expect(process.env['GEMINI_API_KEY']).toBe('gemini-local');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ba1f91f4b6ee710f — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:117

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #474b2060d285571e — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:134

    expect(process.env['GEMINI_API_KEY']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a139f95fa69f787a — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:151

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e62508ef83ebb37 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:152

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #71670a87a7bee8e0 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:179

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78186f866029191e — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:180

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0dd96607520abe3 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:200

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9f24bfda7b0dc622 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:201

    expect(process.env['OTHER_VAR']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4908b7915cbb5ef — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:202

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c3e2baa8337eab45 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:219

    expect(process.env['GEMINI_API_KEY']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f8694a2a3bc3a092 — Environment-variable access.

repo/packages/cli/src/config/settings-env-isolation.test.ts:236

    expect(process.env['GEMINI_API_KEY']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ebcb001d8f6c47b4 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:515

      delete process.env['TEST_AUTO_THEME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e138b6e13e99a4af — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1351

      process.env['TEST_API_KEY'] = 'user_api_key_from_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #732bdcdffe7033be — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1378

      delete process.env['TEST_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dffc7307d0bb4c77 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1382

      process.env['WORKSPACE_ENDPOINT'] = 'workspace_endpoint_from_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8209866f4d9d02b2 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1410

      delete process.env['WORKSPACE_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb401370cbe3d70b — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1414

      process.env['SYSTEM_VAR'] = 'system_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a6c9e4e5aa11a0be — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1415

      process.env['USER_VAR'] = 'user_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #021fbcaea7a8474d — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1416

      process.env['WORKSPACE_VAR'] = 'workspace_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0e595fa76ae2af9 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1417

      process.env['SHARED_VAR'] = 'final_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab3aeb2b9ab3b3bc — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1491

      delete process.env['SYSTEM_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3a1e4fd3419d48c5 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1492

      delete process.env['USER_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #02305715e37fe260 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1493

      delete process.env['WORKSPACE_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f6eee8bf4d484a39 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1494

      delete process.env['SHARED_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf00e842833034c6 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1564

      process.env['VAR_A'] = 'valueA';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cacc99598036439e — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1565

      process.env['VAR_B'] = 'valueB';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb5f6635973d6fac — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1584

      delete process.env['VAR_A'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #817b11ab6b5a0d25 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1585

      delete process.env['VAR_B'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18190fa45f021a1f — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1589

      process.env['ITEM_1'] = 'item1_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fae1888b9cc2dcaa — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1590

      process.env['ITEM_2'] = 'item2_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #205cfc7e48d93a52 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1611

      delete process.env['ITEM_1'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #870d9ff87c649ba5 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1612

      delete process.env['ITEM_2'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0d3af3d53a8e55d8 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1616

      process.env['MY_ENV_STRING'] = 'env_string_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b7d2800acafcaa8f — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1617

      process.env['MY_ENV_STRING_NESTED'] = 'env_string_nested_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1d20c4d5b10100e3 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1670

      delete process.env['MY_ENV_STRING'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d29cba121fe0f70a — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1671

      delete process.env['MY_ENV_STRING_NESTED'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7efb11999520811d — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1675

      process.env['TEST_HOST'] = 'myhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #51deb7012b67b803 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1676

      process.env['TEST_PORT'] = '9090';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5171c5c8689f6980 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1697

      delete process.env['TEST_HOST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b5be19895500f118 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1698

      delete process.env['TEST_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #40aa8706e413b23b — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1707

        process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e64809c40f17031c — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:1712

        delete process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d33056a675ab822 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2114

      delete process.env['GEMINI_API_KEY']; // reset

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bc1b6163f15733ed — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2115

      delete process.env['TESTTEST']; // reset

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d5238dc141f02f1 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2167

      expect(process.env['TESTTEST']).toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9783500df27f6a5 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2168

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d85c90a3dc3a9022 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2179

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e7c1cfe82e8672c7 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2190

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #222f799b63c1d2ad — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2191

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5e5e794a184d3516 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2195

      delete process.env['TESTTEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a0d58a192f46d397 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2206

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d677a8a00311b78 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2207

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #26a9d9d78f85301e — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2218

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7def937a6cd277fe — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2220

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #39ea1415ade2cef2 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2233

        expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef3171eeb5ebbd19 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:2234

        expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e64a198188d8d78 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3143

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2ccbe177beae4b4 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3144

      delete process.env['GOOGLE_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #70e136168fe91d0f — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3145

      delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c02926adf4853c53 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3146

      delete process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b99bbbb9689aa6b2 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3147

      delete process.env['CLOUD_SHELL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #439486844f843050 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3148

      delete process.env['MALICIOUS_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e230154662410df — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3149

      delete process.env['FOO'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #57cfd4307992ad51 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3150

      delete process.env['_GEMINI_USER_GCP_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #631f41fd911408c0 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3178

        expect(process.env['FOO']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e73b3ad866832573 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3179

        expect(process.env['GEMINI_API_KEY']).toBe('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #de6a9ba6293454dd — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3196

        expect(process.env['GEMINI_API_KEY']).toBe('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8970ac648909c0d5 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3215

        expect(process.env['GEMINI_API_KEY']).toEqual('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d2ea37a528126115 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3234

        expect(process.env['GEMINI_API_KEY']).toEqual('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0f5379e0e8b9707 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3259

        expect(process.env['GEMINI_API_KEY']).toBe('secret-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b70c2f4353edb1db — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3260

        expect(process.env['GOOGLE_API_KEY']).toBe('another-secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4b464fe52f6ddc7 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3261

        expect(process.env['MALICIOUS_VAR']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #328998f3c73f79a4 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3285

        expect(process.env['GEMINI_API_KEY']).toBe('key-whoami-id-');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b8119f6fe390332c — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3308

        expect(process.env['GEMINI_API_KEY']).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c2f57517cfbde09c — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3329

        expect(process.env['FOO']).toBe('$(bar)');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8aa349f486bcc8da — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3351

        expect(process.env['GEMINI_API_KEY']).toBe('un-sanitized;key!');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d9d8f5c0affd5ba8 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3352

        expect(process.env['MALICIOUS_VAR']).toBe('allowed-because-trusted');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f08d055c48a13475 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3365

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #152c1bd790cf9209 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3380

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('cloudshell-gca');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00dab39d32abfb8d — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3403

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('my-vertex-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #21a0c55a5c22cb15 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3429

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('env-vertex-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1fbe12ddc92b10b — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3433

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5aa831220e125cf7 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3446

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('cloudshell-gca');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d53602fc30353b2 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3456

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7338f87d6aff64a2 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3460

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #602f3b9ed8404fb3 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3461

        process.env['GOOGLE_CLOUD_PROJECT'] = 'my-real-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3105d7190fdd642f — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3474

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('cloudshell-gca');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0bef6976a81063e4 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3475

        expect(process.env['_GEMINI_USER_GCP_PROJECT']).toBe('my-real-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #813007ff9f60d94a — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3485

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('my-real-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #df00b94bc0ba50fb — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3491

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #611e4e2f63dd9ea6 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3492

        process.env['GOOGLE_CLOUD_PROJECT'] = 'cloudshell-gca';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ae9dc90e42538da — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3493

        process.env['_GEMINI_USER_GCP_PROJECT'] = 'my-real-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d84ca07ee5845dff — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3508

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('my-real-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #279e6ee42779edb8 — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3512

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88784b54b76f7baa — Environment-variable access.

repo/packages/cli/src/config/settings.test.ts:3528

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f780c0f34fd92b2 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:105

  if (process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4069f0a36a013a4e — Environment-variable access.

repo/packages/cli/src/config/settings.ts:106

    return process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5708c9e67f9b97b7 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:118

  if (process.env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7ec5389eb1a2e41 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:119

    return process.env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4462b61c377602df — Environment-variable access.

repo/packages/cli/src/config/settings.ts:621

  if (!process.env[USER_GCP_PROJECT]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c5c778d5b4fc5bf — Environment-variable access.

repo/packages/cli/src/config/settings.ts:622

    const current = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b94b97656d3bb36 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:624

      process.env[USER_GCP_PROJECT] = current;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa0f5fbbf4acb75c — Environment-variable access.

repo/packages/cli/src/config/settings.ts:631

    value = process.env[USER_GCP_PROJECT];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e9a37aac34d9260 — Filesystem access.

repo/packages/cli/src/config/settings.ts:635

    const envFileContent = fs.readFileSync(envFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2488b8e98836896 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:647

    process.env['GOOGLE_CLOUD_PROJECT'] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d88a153ae4d5efd5 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:648

  } else if (process.env['GOOGLE_CLOUD_PROJECT'] === 'cloudshell-gca') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #786f34bd6c4a1f30 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:649

    delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ec0a16e3073db35 — Environment-variable access.

repo/packages/cli/src/config/settings.ts:683

  if (process.env['CLOUD_SHELL'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bee286af4210af98 — Filesystem access.

repo/packages/cli/src/config/settings.ts:697

      const envFileContent = fs.readFileSync(envFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cedf5e4228427ba — Environment-variable access.

repo/packages/cli/src/config/settings.ts:723

            process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b945eae2920b6f01 — Filesystem access.

repo/packages/cli/src/config/settings.ts:784

        const content = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f9da700cbf5d353e — Environment-variable access.

repo/packages/cli/src/config/trustedFolders.test.ts:61

    delete process.env['GEMINI_CLI_TRUST_WORKSPACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cb5794b8397d6c5 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:73

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3584245b4c768e1f — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:91

      const content = fs.readFileSync(trustedFoldersPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe465641178b5d95 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:112

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #54108b19931542fa — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:125

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5938d9a95819c451 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:135

      fs.writeFileSync(trustedFoldersPath, 'null', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56967b5b72b2aefe — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:147

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #16877aa300ecc951 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:164

      fs.writeFileSync(trustedFoldersPath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #408e4a25eabd0782 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:176

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #13c96d3ad2ef9fad — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:231

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #61a3a356361e694e — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:243

      const content = fs.readFileSync(trustedFoldersPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #32b2e105bd7b0108 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:249

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46682cbfdaaea597 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:271

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e585737a1d74ca46 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:281

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f379e0f4f1f81a7f — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:291

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5995a8d4a1006ed4 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:301

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #13c587a3fd1e736a — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:311

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ee0ffc81efb99fbb — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:319

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d0fcff1907090ee — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:330

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #228477948b44c577 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:343

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #de61677e15c0310a — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:356

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cbfb401dd26160b1 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:368

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #63c4cb32054224bc — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:384

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2c0b707ba12668ef — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:399

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fa319a1e9e512d77 — Environment-variable access.

repo/packages/cli/src/config/trustedFolders.test.ts:437

      process.env['GEMINI_CLI_TRUST_WORKSPACE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ac35ffd595f57e0a — Environment-variable access.

repo/packages/cli/src/config/trustedFolders.test.ts:444

        delete process.env['GEMINI_CLI_TRUST_WORKSPACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4d3544dc02be6b29 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:453

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #58e56618ca42c207 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:490

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f570073f5a509211 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:520

        fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d8a9d24910488dd3 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:536

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a6e8b0270e228a8 — Filesystem access.

repo/packages/cli/src/config/trustedFolders.test.ts:539

      fs.writeFileSync(envPath, 'GEMINI_API_KEY=secret', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b76f4bc3d6a1cba5 — Environment-variable access.

repo/packages/cli/src/config/trustedFolders.test.ts:549

      expect(process.env['GEMINI_API_KEY']).toBe('');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8b12771f9c8cebb6 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:417

    delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78392f77d2e677de — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:438

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0db44608dddf96ce — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:491

    originalEnvNoRelaunch = process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3945c317abdd9065 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:492

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a29e8bebc452ea19 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:512

      process.env['GEMINI_CLI_NO_RELAUNCH'] = originalEnvNoRelaunch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0dc366c747349bf9 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:514

      delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #096a5270e65a59d9 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:701

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cdd49717b5cdca38 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:707

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe93379eaca34edf — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:766

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #05179d2341c011bb — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:772

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #de1ec0abf9e4032a — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:820

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a071ff6d415c6e22 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:826

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5933b1b17ea5f7a6 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1041

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9da57d07dc4d9e4c — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1047

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #09c2b7336a396a87 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1236

    originalEnvNoRelaunch = process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fcedce1710608880 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1237

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #737f73cc8d051727 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1249

      process.env['GEMINI_CLI_NO_RELAUNCH'] = originalEnvNoRelaunch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d637e63bc2a2bfc — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1251

      delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #785fcf5783fb2fdd — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1387

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f11b227cbb206837 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1395

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4eb35793c9c1139b — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1420

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b3c8186e4b2fdbf — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1428

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9beb5536fbc57c8 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1465

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b4d773e61ac3a15 — Environment-variable access.

repo/packages/cli/src/gemini.test.tsx:1471

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3f485128d19b5bb — Environment-variable access.

repo/packages/cli/src/gemini.tsx:138

  if (process.env['GEMINI_CLI_NO_RELAUNCH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a56dff1d74c018e — Filesystem access.

repo/packages/cli/src/gemini.tsx:271

      await fsPromises.writeFile(
        newSessionPath,
        lines.join('\n') + '\n',
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5a69f9ae695b203 — Environment-variable access.

repo/packages/cli/src/gemini.tsx:488

      process.env['CLOUD_SHELL'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e2181288055fe8a — Environment-variable access.

repo/packages/cli/src/gemini.tsx:489

      process.env['GEMINI_CLI_USE_COMPUTE_ADC'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ceae0a48d470bf1 — Environment-variable access.

repo/packages/cli/src/gemini.tsx:569

  if (!process.env['SANDBOX'] && !argv.isCommand) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #521231f469cc9e73 — Environment-variable access.

repo/packages/cli/src/gemini_cleanup.test.tsx:194

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a8db38274a40c669 — Environment-variable access.

repo/packages/cli/src/gemini_cleanup.test.tsx:199

    delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e876d6d01454ef0 — Environment-variable access.

repo/packages/cli/src/interactiveCli.tsx:99

  const isShpool = !!process.env['SHPOOL_SESSION_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b11c78a82e8fa8c5 — Environment-variable access.

repo/packages/cli/src/interactiveCli.tsx:139

    process.env['DEBUG'] ? (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70575649c021568c — Environment-variable access.

repo/packages/cli/src/nonInteractiveCli.ts:89

    if (process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15f857cca3bdcf2e — Environment-variable access.

repo/packages/cli/src/nonInteractiveCliAgentSession.ts:86

    if (process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #352ebdf88192349f — Environment-variable access.

repo/packages/cli/src/services/BuiltinCommandLoader.test.ts:413

    process.env['NODE_ENV'] = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3df25026074486d3 — Environment-variable access.

repo/packages/cli/src/services/BuiltinCommandLoader.test.ts:422

    process.env['NODE_ENV'] = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7d151a560680cc3 — Filesystem access.

repo/packages/cli/src/services/FileCommandLoader.ts:267

      fileContent = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19c0de6867c0a057 — Filesystem access.

repo/packages/cli/src/test-utils/AppRig.tsx:190

    fs.writeFileSync(
      path.join(geminiDir, 'state.json'),
      JSON.stringify({ terminalSetupPromptShown: true }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93b2af258b493d15 — Environment-variable access.

repo/packages/cli/src/test-utils/AppRig.tsx:254

      if (!process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4294c3e8b5ec19cc — Environment-variable access.

repo/packages/cli/src/test-utils/AppRig.tsx:316

        apiKey: process.env['GEMINI_API_KEY'] || 'test-api-key',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7079b140d8645429 — Filesystem access.

repo/packages/cli/src/test-utils/createExtension.ts:33

  fs.writeFileSync(
    path.join(extDir, EXTENSIONS_CONFIG_FILENAME),
    JSON.stringify({
      name,
      version,
      contextFileName,
      mcpServers,
      settings,
      themes,
    }),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7937698396fb2584 — Filesystem access.

repo/packages/cli/src/test-utils/createExtension.ts:46

    fs.writeFileSync(path.join(extDir, 'GEMINI.md'), 'context');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fbbf04e56366013 — Filesystem access.

repo/packages/cli/src/test-utils/createExtension.ts:50

    fs.writeFileSync(path.join(extDir, contextFileName), 'context');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8fd0390536af9036 — Filesystem access.

repo/packages/cli/src/test-utils/createExtension.ts:54

    fs.writeFileSync(
      path.join(extDir, INSTALL_METADATA_FILENAME),
      JSON.stringify(installMetadata),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9384fc5007b98d1e — Environment-variable access.

repo/packages/cli/src/test-utils/render.tsx:58

if (process.env['NODE_ENV'] === 'test') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e172e602036792ec — Environment-variable access.

repo/packages/cli/src/test-utils/render.tsx:64

  process.env['NODE_ENV'] = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf4936f4259cda74 — Environment-variable access.

repo/packages/cli/src/ui/IdeIntegrationNudge.tsx:47

    !!process.env['GEMINI_CLI_IDE_SERVER_PORT'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5c5bb0b28f7b6f8 — Environment-variable access.

repo/packages/cli/src/ui/IdeIntegrationNudge.tsx:48

    !!process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #740b6e0d796029bc — Environment-variable access.

repo/packages/cli/src/ui/auth/AuthDialog.tsx:51

    ...(process.env['CLOUD_SHELL'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #164a82e950a2d076 — Environment-variable access.

repo/packages/cli/src/ui/auth/AuthDialog.tsx:59

      : process.env['GEMINI_CLI_USE_COMPUTE_ADC'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6a9b067611c1afe — Environment-variable access.

repo/packages/cli/src/ui/auth/AuthDialog.tsx:87

  const defaultAuthTypeEnv = process.env['GEMINI_DEFAULT_AUTH_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #185507839087b2eb — Environment-variable access.

repo/packages/cli/src/ui/auth/AuthDialog.tsx:106

    if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #786b68e3776ce4ee — Environment-variable access.

repo/packages/cli/src/ui/auth/AuthDialog.tsx:125

            process.env['CLOUD_SHELL'] === 'true');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e9bd24fc9005e43b — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.test.tsx:39

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1c8acfebfabb10f — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.test.tsx:40

    delete process.env['GEMINI_DEFAULT_AUTH_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ba505058fc5f908 — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.test.tsx:178

      process.env['GEMINI_API_KEY'] = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b6acac51f382d59 — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.test.tsx:236

      process.env['GEMINI_API_KEY'] = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c050345d79487061 — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.test.tsx:252

      process.env['GEMINI_API_KEY'] = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #40616752be12f2be — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.test.tsx:278

      process.env['GEMINI_DEFAULT_AUTH_TYPE'] = 'INVALID_TYPE';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7b894bc1215a756 — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.ts:69

    const envKey = process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81dd0685d73a850e — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.ts:96

        if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ae56d5fcf7f0ab6 — Environment-variable access.

repo/packages/cli/src/ui/auth/useAuth.ts:124

      const defaultAuthType = process.env['GEMINI_DEFAULT_AUTH_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a72d6670c0a7ea48 — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.test.ts:66

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-gcp-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #862780702b158fc7 — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.test.ts:87

    process.env['SANDBOX'] = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e90e09835deef5de — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.test.ts:109

    process.env['SANDBOX'] = 'gemini-sandbox';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c27a8417c7bef7aa — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.test.ts:124

    process.env['SANDBOX'] = 'sandbox-exec';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65d26c7dcc65348e — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.test.ts:125

    process.env['SEATBELT_PROFILE'] = 'test-profile';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f5b8c6fed6dcf35f — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.test.ts:144

    process.env['SANDBOX'] = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd7497c7bd36f599 — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.ts:30

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d066128bd3995e3 — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.ts:31

      sandboxEnv = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb0e511011ebfd36 — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.ts:32

    } else if (process.env['SANDBOX'] === 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a1ab98b2c455ced — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.ts:34

        process.env['SEATBELT_PROFILE'] || 'unknown'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c907840bdfd074c — Environment-variable access.

repo/packages/cli/src/ui/commands/aboutCommand.ts:42

    const gcpProject = process.env['GOOGLE_CLOUD_PROJECT'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c18065d6b05867d — Environment-variable access.

repo/packages/cli/src/ui/commands/bugCommand.ts:43

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6af49392c17fdc0b — Environment-variable access.

repo/packages/cli/src/ui/commands/bugCommand.ts:44

      sandboxEnv = process.env['SANDBOX'].replace(/^gemini-(?:code-)?/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f13f619ad87084d2 — Environment-variable access.

repo/packages/cli/src/ui/commands/bugCommand.ts:45

    } else if (process.env['SANDBOX'] === 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0ef35bbcfc22ff5 — Environment-variable access.

repo/packages/cli/src/ui/commands/bugCommand.ts:47

        process.env['SEATBELT_PROFILE'] || 'unknown'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70ed9d198607bfae — Filesystem access.

repo/packages/cli/src/ui/commands/chatCommand.ts:364

      await fsPromises.writeFile(
        filePath,
        JSON.stringify(restPayload, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca26b4cc25cdfaf2 — Environment-variable access.

repo/packages/cli/src/ui/commands/docsCommand.ts:24

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73ad65111deabcf0 — Filesystem access.

repo/packages/cli/src/ui/commands/exportSessionCommand.ts:72

      await fs.writeFile(
        targetPath,
        JSON.stringify(sessionData, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1298ac27d5e820f7 — Environment-variable access.

repo/packages/cli/src/ui/commands/extensionsCommand.ts:304

  if (process.env['NODE_ENV'] === 'test') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9af2605c9c81837d — Environment-variable access.

repo/packages/cli/src/ui/commands/extensionsCommand.ts:310

    process.env['SANDBOX'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3113c82511317175 — Environment-variable access.

repo/packages/cli/src/ui/commands/extensionsCommand.ts:311

    process.env['SANDBOX'] !== 'sandbox-exec'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #854b1bdc684d3dd5 — Filesystem access.

repo/packages/cli/src/ui/commands/initCommand.ts:40

      fs.writeFileSync(geminiMdPath, '', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #34f1d8ac5e316fbf — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:118

      await fs.writeFile(path.join(checkpointsDir, 'test1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d1aa925ef7c8b6fe — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:119

      await fs.writeFile(path.join(checkpointsDir, 'test2.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0f79db52a35e48c — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:130

      await fs.writeFile(path.join(checkpointsDir, 'test1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04d20de50c35181f — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:166

      await fs.writeFile(
        path.join(checkpointsDir, 'my-checkpoint.json'),
        JSON.stringify(toolCallData),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7db7f34cc4a4a8b — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:197

      await fs.writeFile(
        path.join(checkpointsDir, 'my-checkpoint.json'),
        JSON.stringify(toolCallData),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #308a6e31d1d0943a — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:218

    await fs.writeFile(
      path.join(checkpointsDir, `${checkpointName}.json`),
      JSON.stringify({ history: [] }), // An object that is valid JSON but missing the 'toolCall' property
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3924d2b331cbf9e6 — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:248

      await fs.writeFile(path.join(checkpointsDir, 'test1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #40418ea5c2c573db — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:249

      await fs.writeFile(path.join(checkpointsDir, 'test2.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8506ec2d7ae00fed — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.test.ts:250

      await fs.writeFile(
        path.join(checkpointsDir, 'not-a-checkpoint.txt'),
        '{}',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #413138e40c145e6d — Filesystem access.

repo/packages/cli/src/ui/commands/restoreCommand.ts:91

    const data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #efa11a5efe68694e — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:105

      const contents = await fs.readFile(workflowFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bcb350cdb7db72c — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:118

      const gitignoreContent = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dd0c72b5679dc75d — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:175

      const contents = await fs.readFile(workflowFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #14d8781d1ad6c974 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:188

      const gitignoreContent = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c0ae8b919198c37d — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:236

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1a143c38cc4c5f85 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:244

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #24478bd15aca0804 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:248

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d5eb59994d0b0df0 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:258

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5ecdf6d5cebb2de0 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:262

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be37c61475b92033 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:270

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aaea3c6d6555f701 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:274

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c7e4a22f26fe4d6f — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:292

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5b31bc7b3e10a250 — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.test.ts:296

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c806179780ad62c — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.ts:78

      existingContent = await fs.promises.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e20f92ed6d0d47a — Filesystem access.

repo/packages/cli/src/ui/commands/setupGithubCommand.ts:87

      await fs.promises.writeFile(gitignorePath, contentToWrite);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #3e72a248b6a94364 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/cli/src/ui/commands/setupGithubCommand.ts:126

        const response = await fetch(endpoint, {
          method: 'GET',
          dispatcher: proxy ? new ProxyAgent(proxy) : undefined,
          /* eslint-disable @typescript-eslint/no-unsafe-type-assertion */
          signal: (
            AbortSignal as unknown as {
              any: (signals: AbortSignal[]) => AbortSignal;
            }
          ).any([AbortSignal.timeout(30_000), abortController.signal]),
          /* eslint-enable @typescript-eslint/no-unsafe-type-assertion */
        } as RequestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #069584afd6c36d23 — Environment-variable access.

repo/packages/cli/src/ui/components/Footer.tsx:81

  const sandbox = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61c12ae115a27be6 — Environment-variable access.

repo/packages/cli/src/ui/components/Footer.tsx:312

        const sandbox = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #620b49c40471f263 — Environment-variable access.

repo/packages/cli/src/ui/components/InboxDialog.tsx:186

    const homeDirs = [process.env['HOME'], process.env['USERPROFILE']]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a423d1cf8ad6a793 — Environment-variable access.

repo/packages/cli/src/ui/components/InputPrompt.tsx:1735

  const useLineFallback = !!process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed88e5bee0ea156d — Environment-variable access.

repo/packages/cli/src/ui/components/StatusDisplay.tsx:26

  if (process.env['GEMINI_SYSTEM_MD']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f3b1811c171b3d3 — Environment-variable access.

repo/packages/cli/src/ui/components/shared/ScrollableList.tsx:115

      duration: number = process.env['NODE_ENV'] === 'test' ? 0 : 200,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43591f336b937ccd — Environment-variable access.

repo/packages/cli/src/ui/components/shared/VirtualizedList.tsx:547

    process.env['NODE_ENV'] === 'test' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c20726e3e3f19127 — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.test.ts:1175

      fs.writeFileSync(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0a3d4d0b2dc3137 — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.test.ts:1193

      fs.writeFileSync(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0e8d45646e65aed5 — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.test.ts:1215

      fs.writeFileSync(file1, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9b704753e72f47bd — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.test.ts:1216

      fs.writeFileSync(file2, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a28805226593b4b0 — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.test.ts:1231

      fs.writeFileSync(file1, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f9987f81b3cab69 — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.test.ts:1232

      fs.writeFileSync(file2, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #43bc764e20cbf984 — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.test.ts:1249

      fs.writeFileSync(validFile, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4824d857ac06e45f — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.ts:3321

    fs.writeFileSync(filePath, expandedText, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ef60284c4afa0f7 — Filesystem access.

repo/packages/cli/src/ui/components/shared/text-buffer.ts:3334

      let newText = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6547ba17d808827f — Environment-variable access.

repo/packages/cli/src/ui/contexts/KeypressContext.tsx:383

  const lang = process.env['LANG'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #443f98e0f10fa38e — Environment-variable access.

repo/packages/cli/src/ui/contexts/KeypressContext.tsx:384

  const lcAll = process.env['LC_ALL'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1ea351f712716bb5 — Filesystem access.

repo/packages/cli/src/ui/hooks/atCommandProcessor.test.ts:54

    await fsPromises.writeFile(fullPath, fileContents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f910200cd08124c8 — Filesystem access.

repo/packages/cli/src/ui/hooks/atCommandProcessor.test.ts:1478

      await fsPromises.writeFile(filePath, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #829903bbbc7d3fd5 — Filesystem access.

repo/packages/cli/src/ui/hooks/atCommandProcessor.test.ts:1692

    await fsPromises.writeFile(realFile, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf7510e5a29af0e6 — Filesystem access.

repo/packages/cli/src/ui/hooks/shell-completions/npmProvider.ts:51

        const content = await fs.readFile(pkgJsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1130faed54a4bd90 — Environment-variable access.

repo/packages/cli/src/ui/hooks/useAnimatedScrollbar.ts:45

      typeof process !== 'undefined' && process.env['NODE_ENV'] === 'test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e54a6b23780fe31 — Filesystem access.

repo/packages/cli/src/ui/hooks/useExecutionLifecycle.ts:595

            const finalPwd = fs.readFileSync(pwdFilePath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9cb77927d4461f9 — Filesystem access.

repo/packages/cli/src/ui/hooks/useGeminiStream.ts:2118

              await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a312ae07a9baa552 — Filesystem access.

repo/packages/cli/src/ui/hooks/useGitBranchName.test.tsx:277

      fs.writeFileSync(GIT_HEAD_PATH, 'ref: refs/heads/develop');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18122c6531e4a396 — Environment-variable access.

repo/packages/cli/src/ui/hooks/useQuotaAndFallback.ts:143

            process.env['GOOGLE_CLOUD_LOCATION'] || 'your configured region';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #474e2a297991107d — Environment-variable access.

repo/packages/cli/src/ui/hooks/useShellCompletion.ts:186

  const pathEnv = process.env['PATH'] ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb382c6e74889812 — Environment-variable access.

repo/packages/cli/src/ui/hooks/useShellCompletion.ts:190

    ? (process.env['PATHEXT'] ?? '.EXE;.CMD;.BAT;.COM')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8febf94af479a7a5 — Environment-variable access.

repo/packages/cli/src/ui/hooks/useShellCompletion.ts:452

  const pathEnvRef = useRef<string>(process.env['PATH'] ?? '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9e0704cf1cebba3 — Environment-variable access.

repo/packages/cli/src/ui/hooks/useShellCompletion.ts:482

    const currentPath = process.env['PATH'] ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ac061ed6976368e — Filesystem access.

repo/packages/cli/src/ui/hooks/useShellHistory.ts:34

    const text = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c8f50f9b707e6ad — Filesystem access.

repo/packages/cli/src/ui/hooks/useShellHistory.ts:67

    await fs.writeFile(filePath, history.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #788f36aafca5bf06 — Environment-variable access.

repo/packages/cli/src/ui/hooks/useThemeCommand.ts:41

    if (process.env['NO_COLOR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce50c206e04f8e4f — Environment-variable access.

repo/packages/cli/src/ui/hooks/useVoiceMode.ts:128

      process.env['GEMINI_API_KEY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6bd5422f49977034 — Filesystem access.

repo/packages/cli/src/ui/key/keyBindings.test.ts:196

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c88ea512701af2ee — Filesystem access.

repo/packages/cli/src/ui/key/keyBindings.test.ts:214

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b75d4197ac6548f2 — Filesystem access.

repo/packages/cli/src/ui/key/keyBindings.test.ts:227

    await fs.writeFile(tempFilePath, invalidJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2471f2840fbfe70 — Filesystem access.

repo/packages/cli/src/ui/key/keyBindings.test.ts:243

    await fs.writeFile(tempFilePath, mixedJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #470cb1332dcb579f — Filesystem access.

repo/packages/cli/src/ui/key/keyBindings.test.ts:260

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93df5eb5dfe16155 — Filesystem access.

repo/packages/cli/src/ui/key/keyBindings.test.ts:273

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0683d802fb810582 — Filesystem access.

repo/packages/cli/src/ui/key/keyBindings.ts:727

    const content = await fs.readFile(userKeybindingsPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #40695a3ae7d15448 — Filesystem access.

repo/packages/cli/src/ui/key/keyMatchers.test.ts:561

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b6f2996cc3ae6790 — Filesystem access.

repo/packages/cli/src/ui/key/keyMatchers.test.ts:573

    await fs.writeFile(tempFilePath, 'invalid json {', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5fad19195152852 — Environment-variable access.

repo/packages/cli/src/ui/key/keybindingUtils.ts:78

    (process.env['FORCE_GENERIC_KEYBINDING_HINTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e003c95382f6a7d — Environment-variable access.

repo/packages/cli/src/ui/themes/theme-manager.test.ts:8

if (process.env['NO_COLOR'] !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d5073eca94c23ab — Environment-variable access.

repo/packages/cli/src/ui/themes/theme-manager.test.ts:9

  delete process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #74018660ae130336 — Environment-variable access.

repo/packages/cli/src/ui/themes/theme-manager.test.ts:118

    const original = process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ccc9ac3dfc33280 — Environment-variable access.

repo/packages/cli/src/ui/themes/theme-manager.test.ts:119

    process.env['NO_COLOR'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf5e440c4ecbdebe — Environment-variable access.

repo/packages/cli/src/ui/themes/theme-manager.test.ts:122

      delete process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3465d2b74d5f06ba — Environment-variable access.

repo/packages/cli/src/ui/themes/theme-manager.test.ts:124

      process.env['NO_COLOR'] = original;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8097823d645955ad — Environment-variable access.

repo/packages/cli/src/ui/themes/theme-manager.ts:317

    if (process.env['NO_COLOR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6fa4ea740a31747f — Filesystem access.

repo/packages/cli/src/ui/themes/theme-manager.ts:584

      const themeContent = this.fs.readFileSync(canonicalPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b3c75dc4be64700 — Environment-variable access.

repo/packages/cli/src/ui/utils/antigravityUtils.ts:23

    if (process.env['PSModulePath']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #477ead7f31387d1e — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.test.ts:113

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #86de208b5e893cc6 — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.test.ts:132

      process.env['XDG_SESSION_TYPE'] = 'x11';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0c7f3790025740a — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.test.ts:157

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aefd2f3371ac12e3 — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.test.ts:168

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c9ebe75eebf9a64a — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.test.ts:182

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b9f3789057d07a7d — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.test.ts:230

      process.env['XDG_SESSION_TYPE'] = type;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bd1a07a67f6ffc97 — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.test.ts:340

      delete process.env['XDG_SESSION_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f49b40034423c210 — Environment-variable access.

repo/packages/cli/src/ui/utils/clipboardUtils.ts:44

  const displayServer = process.env['XDG_SESSION_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #da8eb458d8281e68 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:87

  delete process.env['TMUX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c7613f64a431fdc — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:88

  delete process.env['STY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5848905a65f01960 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:89

  delete process.env['SSH_TTY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f764f932e3e24e6 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:90

  delete process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f9f24ca952e3d76c — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:91

  delete process.env['SSH_CLIENT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #490fac5c72fcddc9 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:92

  delete process.env['WSL_DISTRO_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6227c71cd6ff7ff6 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:93

  delete process.env['WSLENV'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #354fe191ed8751e2 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:94

  delete process.env['WSL_INTEROP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #03cf38fc2267c138 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:95

  delete process.env['TERM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dda934bf97ce73ee — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:96

  delete process.env['WT_SESSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6ebfdcebbded278b — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:265

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aa4a5918372d83aa — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:309

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d6290960d6f0de3 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:310

      process.env['TMUX'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b7db21e675bb0e05 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:332

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d13e23ab050f5918 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:333

      process.env['STY'] = 'screen-session';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f51d6253ed41f218 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:356

      process.env['SSH_TTY'] = '/dev/pts/1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #28d36dfc13005658 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:383

      process.env['SSH_CLIENT'] = 'client';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #048a1d68ce8f9351 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:396

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #391d5406411659f6 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:411

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #59673195953bf4a6 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:450

      process.env['SSH_CONNECTION'] = '1'; // normally would trigger OSC52 on TTY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5c1a0b28e822f235 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:476

      process.env['TMUX'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ed2e9a063a6273e — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:487

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c0b064d9fa50752a — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:512

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf4f912e0087823b — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:545

      process.env['WT_SESSION'] = 'some-uuid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d740970e95fffee8 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:569

      process.env['WT_SESSION'] = 'some-uuid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d2b853e87e2db203 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.test.ts:598

      process.env['WT_SESSION'] = 'some-uuid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1139066e7c064c4d — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:145

    process.env['TMUX'] || (process.env['TERM'] ?? '').startsWith('tmux'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25c89fa61e638b0e — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:150

    process.env['STY'] || (process.env['TERM'] ?? '').startsWith('screen'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7986aaaaa745186b — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:155

    process.env['SSH_TTY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f362d124b37896d8 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:156

      process.env['SSH_CONNECTION'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c84a21336e9ec5f — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:157

      process.env['SSH_CLIENT'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b507d79468f6716 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:162

    process.env['WSL_DISTRO_NAME'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80f972ef2abafe5c — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:163

      process.env['WSLENV'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb0fbe026def4718 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:164

      process.env['WSL_INTEROP'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4cc58f97bbaa85e — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:168

  process.platform === 'win32' && Boolean(process.env['WT_SESSION']);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7750f9f70417409 — Environment-variable access.

repo/packages/cli/src/ui/utils/commandUtils.ts:170

const isDumbTerm = (): boolean => (process.env['TERM'] ?? '') === 'dumb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3681132216193fd — Environment-variable access.

repo/packages/cli/src/ui/utils/editorUtils.ts:81

    const envCommand = process.env['VISUAL'] ?? process.env['EDITOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f24e0ee095f5ce68 — Filesystem access.

repo/packages/cli/src/ui/utils/historyExportUtils.ts:80

  await fsPromises.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35aab4bdfe6bc2e6 — Filesystem access.

repo/packages/cli/src/ui/utils/rewindFileOps.ts:175

              currentContent = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2dcab5f95304300 — Filesystem access.

repo/packages/cli/src/ui/utils/rewindFileOps.ts:198

                await fs.writeFile(filePath, originalContent ?? '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd1b36fbeb05c384 — Filesystem access.

repo/packages/cli/src/ui/utils/rewindFileOps.ts:223

                  await fs.writeFile(filePath, patchedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4bad0f13585f5d6c — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:87

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9194076edf243774 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:93

      process.env['CURSOR_TRACE_ID'] = 'some-id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #80c25cb15abf3a32 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:99

      process.env['VSCODE_GIT_ASKPASS_MAIN'] = '/path/to/windsurf/askpass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e5a4282629d900bd — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:117

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e0c8bdc747a900b9 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:130

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f7e7212b7a108c2e — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:141

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #20f31ea742d728b9 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:183

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c9e806e9ba59de2f — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:193

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ffdf693fd79f766d — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:218

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #784240a9a9007513 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.test.ts:242

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1078d749baabcce9 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:115

  const termProgram = process.env['TERM_PROGRAM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #414b836443c9973f — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:120

    process.env['CURSOR_TRACE_ID'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fb4fca34ee2dbe8 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:121

    process.env['VSCODE_GIT_ASKPASS_MAIN']?.toLowerCase().includes('cursor')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #888bbe1347fe86a6 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:127

    process.env['VSCODE_GIT_ASKPASS_MAIN']?.toLowerCase().includes('windsurf')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2738d7b4b748896 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:133

    process.env['VSCODE_GIT_ASKPASS_MAIN']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38dcbde63aac8ef5 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:140

  if (termProgram === 'vscode' || process.env['VSCODE_GIT_IPC_HANDLE']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf96fed8b6a54b67 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:205

    if (!process.env['APPDATA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb5994b69d1bb05d — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:208

    return path.join(process.env['APPDATA'], appName, 'User');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #260fd59627ead98a — Filesystem access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:235

      const content = await fs.readFile(keybindingsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4910e88b19388e8b — Filesystem access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:352

    await fs.writeFile(keybindingsFile, JSON.stringify(keybindings, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf9d75902761dedb — Filesystem access.

repo/packages/cli/src/ui/utils/terminalSetup.ts:403

    const content = await fs.readFile(keybindingsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #179783746442a944 — Environment-variable access.

repo/packages/cli/src/ui/utils/terminalUtils.ts:34

  cachedIsITerm2 = process.env['TERM_PROGRAM'] === 'iTerm.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00c4a59d9927ff43 — Environment-variable access.

repo/packages/cli/src/ui/utils/updateCheck.test.ts:51

    delete process.env['DEV'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c24e716210ed90e — Environment-variable access.

repo/packages/cli/src/ui/utils/updateCheck.test.ts:76

    process.env['DEV'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #204fa1844e56c0aa — Environment-variable access.

repo/packages/cli/src/ui/utils/updateCheck.ts:64

    if (process.env['DEV'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #dc85e5fa6bcac9bd — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/cli/src/ui/utils/urlSecurityUtils.test.ts:19

      const urlObj = new URL('https://xn--tst-qla.com/path');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #acb6be503dc95a0d — Environment-variable access.

repo/packages/cli/src/utils/cleanup.test.ts:298

      const originalSandbox = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a946d6bc386f0d1c — Environment-variable access.

repo/packages/cli/src/utils/cleanup.test.ts:299

      process.env['SANDBOX'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #55dd0a12ea77ced3 — Environment-variable access.

repo/packages/cli/src/utils/cleanup.test.ts:316

      process.env['SANDBOX'] = originalSandbox;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5562ecfff0a94ed — Environment-variable access.

repo/packages/cli/src/utils/cleanup.ts:160

    if (process.env['SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc4b570d057031c1 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:48

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #32319f6a0dca083b — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:57

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #009526b7488b4ecc — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:73

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73b0531b5e5951f8 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:82

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e46112827f430326 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:93

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e69778d4c810bee0 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:100

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #decadbff599c50bd — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:111

      const content = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #57f2f45d34d743d7 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:129

      fs.writeFileSync(testFilePath, complexContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1669d625f65296cd — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:145

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7a945406e65acbf1 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:166

      fs.writeFileSync(testFilePath, corruptedContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe7b5898017bc9bd — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:180

      const unchangedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ca02a96397c0928c — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:194

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9686360d52f83f76 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:200

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a58350a491763fe8 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:218

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e7717f551fdf151a — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:228

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a179bc31ea29c912 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:253

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d33aec4d661e44d — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:265

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #86bde738a4a07e0a — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:294

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f729bc4e1ec0e2bb — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:300

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #32f90d6182518e08 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:313

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aecb4da5eb71aa35 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:319

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4c7640f1dc9ff3f3 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:346

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #55d257bfb7b531c4 — Filesystem access.

repo/packages/cli/src/utils/commentJson.test.ts:357

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #037aea0a0176e013 — Filesystem access.

repo/packages/cli/src/utils/commentJson.ts:24

    fs.writeFileSync(filePath, JSON.stringify(updates, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3a5b330b473346e — Filesystem access.

repo/packages/cli/src/utils/commentJson.ts:28

  const originalContent = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #facc11188291eac2 — Filesystem access.

repo/packages/cli/src/utils/commentJson.ts:46

  fs.writeFileSync(filePath, updatedContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #843ccd8edc759e0e — Environment-variable access.

repo/packages/cli/src/utils/devtoolsService.test.ts:122

    delete process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b22c766f6d1c1027 — Environment-variable access.

repo/packages/cli/src/utils/devtoolsService.test.ts:139

      process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'] = '/tmp/test.jsonl';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc87ee211ff593c8 — Environment-variable access.

repo/packages/cli/src/utils/devtoolsService.test.ts:152

      process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'] = '/tmp/test.jsonl';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cec45aae6b9d570f — Environment-variable access.

repo/packages/cli/src/utils/devtoolsService.ts:122

  const target = process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f74f2c274a2ea57d — Environment-variable access.

repo/packages/cli/src/utils/envVarResolver.ts:48

        const val = process.env[varName];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #153ecae268f84029 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/cli/src/utils/gitUtils.ts:64

    const response = await fetch(endpoint, {
      method: 'GET',
      headers: {
        Accept: 'application/vnd.github+json',
        'Content-Type': 'application/json',
        'X-GitHub-Api-Version': '2022-11-28',
      },
      dispatcher: proxy ? new ProxyAgent(proxy) : undefined,
      /* eslint-disable @typescript-eslint/no-unsafe-type-assertion */
      signal: (
        AbortSignal as unknown as {
          any: (signals: AbortSignal[]) => AbortSignal;
        }
      ).any([AbortSignal.timeout(30_000), controller.signal]),
      /* eslint-enable @typescript-eslint/no-unsafe-type-assertion */
    } as RequestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3f1f2154681ea501 — Environment-variable access.

repo/packages/cli/src/utils/installationInfo.ts:13

export const isDevelopment = process.env['NODE_ENV'] === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a883ec944f9c056 — Environment-variable access.

repo/packages/cli/src/utils/installationInfo.ts:47

    if (process.env['IS_BINARY'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e562fcf0cf3ecab — Filesystem access.

repo/packages/cli/src/utils/persistentState.ts:41

        const content = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4e92b98c9b3dc7e — Filesystem access.

repo/packages/cli/src/utils/persistentState.ts:63

      fs.writeFileSync(filePath, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50f1c16ff86c38b6 — Environment-variable access.

repo/packages/cli/src/utils/processUtils.ts:46

    (process.env['IS_BINARY'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16454c5b565ec8cb — Environment-variable access.

repo/packages/cli/src/utils/processUtils.ts:65

    process.env['IS_BINARY'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae8384cac5a3699a — Environment-variable access.

repo/packages/cli/src/utils/processUtils.ts:103

      const existingNodeOptions = process.env['NODE_OPTIONS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bd774b6e16ded27 — Environment-variable access.

repo/packages/cli/src/utils/relaunch.ts:43

  if (process.env['GEMINI_CLI_NO_RELAUNCH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d94d1bb62fefd0f — Filesystem access.

repo/packages/cli/src/utils/sandbox-macos-profiles.test.ts:20

  return readFileSync(path.join(utilsDir, profile), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #45ddbcad8d923984 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:66

            const output = process.env['TEST_LXC_LIST_OUTPUT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #339fd0892ad8d3f5 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:375

      process.env['GEMINI_CLI_INTEGRATION_TEST'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #652f378d974252a3 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:534

      process.env['SANDBOX_MOUNTS'] = '/host/path:/container/path:ro';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1e08420adf38fd8b — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:710

      process.env['GOOGLE_GEMINI_BASE_URL'] = 'http://gemini.proxy';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b5d68e57ecea4da3 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:711

      process.env['GOOGLE_VERTEX_BASE_URL'] = 'http://vertex.proxy';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #199bf6453624448f — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:757

      process.env['SANDBOX_SET_UID_GID'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7779a513d017419f — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:818

      process.env['SANDBOX_SET_UID_GID'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a3f66370aac8ab1a — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:928

        delete process.env['TEST_LXC_LIST_OUTPUT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5fbf854fb5ec5aaf — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:932

        process.env['TEST_LXC_LIST_OUTPUT'] = LXC_RUNNING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8201430b4a1f822a — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:966

        process.env['TEST_LXC_LIST_OUTPUT'] = 'throw';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5ce98d445fffe896 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:978

        process.env['TEST_LXC_LIST_OUTPUT'] = LXC_STOPPED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9ad1c5063bf5a09f — Environment-variable access.

repo/packages/cli/src/utils/sandbox.test.ts:988

        process.env['TEST_LXC_LIST_OUTPUT'] = '[]';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2400a7216112e24c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:53

    debugMode: cliConfig?.getDebugMode() || !!process.env['DEBUG'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #166d2265bbae0c1f — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:63

      if (process.env['BUILD_SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9957d892fc4e3f8 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:69

      const profile = (process.env['SEATBELT_PROFILE'] ??= 'permissive-open');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4a593ab24a9054c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:93

        ...(process.env['DEBUG'] ? ['--inspect-brk'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bbdc9009ab78e39b — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:167

      const proxyCommand = process.env['GEMINI_SANDBOX_PROXY_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bafbe6c1fac11cd — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:173

          process.env['HTTPS_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d44e79c221721734 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:174

          process.env['https_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67d711e6ec29ce00 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:175

          process.env['HTTP_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7d3f1a66bcc236b — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:176

          process.env['http_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99ccaca5a8678626 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:182

        const noProxy = process.env['NO_PROXY'] || process.env['no_proxy'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd1b0bb5a766ee65 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:270

    if (process.env['BUILD_SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7365f7858ac766f3 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:327

    if (process.env['SANDBOX_FLAGS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc82177901c563f4 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:328

      const flags = parse(process.env['SANDBOX_FLAGS'], process.env).filter(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee53c3999dcb37ac — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:392

    if (process.env['GOOGLE_APPLICATION_CREDENTIALS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa08eac6087afa84 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:393

      const adcFile = process.env['GOOGLE_APPLICATION_CREDENTIALS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aecde6800212bee8 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:404

    if (process.env['SANDBOX_MOUNTS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eeec9a7206b7dcab — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:405

      for (let mount of process.env['SANDBOX_MOUNTS'].split(',')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea08245a1f89c3f0 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:447

    if (process.env['DEBUG']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acc9b06e7e5b74d2 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:448

      const debugPort = process.env['DEBUG_PORT'] || '9229';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a288510a3af3cdd — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:455

    const proxyCommand = process.env['GEMINI_SANDBOX_PROXY_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47f3046b894f8503 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:459

        process.env['HTTPS_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #380729359027f30c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:460

        process.env['https_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9221a7143417b03c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:461

        process.env['HTTP_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f7e30245632e3f4 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:462

        process.env['http_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e64e51d5855250b — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:471

      const noProxy = process.env['NO_PROXY'] || process.env['no_proxy'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c3cc02baacd6838 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:504

      process.env['GEMINI_CLI_INTEGRATION_TEST'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #527aa5915145b8bc — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:515

    if (process.env['GEMINI_CLI_TEST_VAR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc5ab7d35bb282e3 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:518

        `GEMINI_CLI_TEST_VAR=${process.env['GEMINI_CLI_TEST_VAR']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff1a3c641298e81c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:523

    if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3da0ec04fd99b62c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:524

      args.push('--env', `GEMINI_API_KEY=${process.env['GEMINI_API_KEY']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd498ef7ea96a5f1 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:526

    if (process.env['GOOGLE_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #443ff29769811212 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:527

      args.push('--env', `GOOGLE_API_KEY=${process.env['GOOGLE_API_KEY']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05a7556c52eab4b2 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:531

    if (process.env['GOOGLE_GEMINI_BASE_URL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #208029abad5d7375 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:534

        `GOOGLE_GEMINI_BASE_URL=${process.env['GOOGLE_GEMINI_BASE_URL']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8566649914b6b877 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:537

    if (process.env['GOOGLE_VERTEX_BASE_URL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3c1cb9b588c62f2 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:540

        `GOOGLE_VERTEX_BASE_URL=${process.env['GOOGLE_VERTEX_BASE_URL']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ba64a66b25c0860 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:545

    if (process.env['GOOGLE_GENAI_USE_VERTEXAI']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b8c356dbbf0c49e — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:548

        `GOOGLE_GENAI_USE_VERTEXAI=${process.env['GOOGLE_GENAI_USE_VERTEXAI']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #997aec9fd1dac9ef — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:553

    if (process.env['GOOGLE_GENAI_USE_GCA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7af7b5b543d594a — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:556

        `GOOGLE_GENAI_USE_GCA=${process.env['GOOGLE_GENAI_USE_GCA']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85e167478428b2b0 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:561

    if (process.env['GOOGLE_CLOUD_PROJECT']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2f546b80703d038 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:564

        `GOOGLE_CLOUD_PROJECT=${process.env['GOOGLE_CLOUD_PROJECT']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #010c6b68ebcdc515 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:569

    if (process.env['GOOGLE_CLOUD_LOCATION']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c9bd2c75e5acd5c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:572

        `GOOGLE_CLOUD_LOCATION=${process.env['GOOGLE_CLOUD_LOCATION']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8ac9ce1d5a0ae16 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:577

    if (process.env['GEMINI_MODEL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fde251408bcad7b — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:578

      args.push('--env', `GEMINI_MODEL=${process.env['GEMINI_MODEL']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #492e7bd65f1afe18 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:582

    if (process.env['TERM']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24c16d0e402b9ec0 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:583

      args.push('--env', `TERM=${process.env['TERM']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #440bba1a5a809235 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:585

    if (process.env['COLORTERM']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8eec88ff1bfb86b9 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:586

      args.push('--env', `COLORTERM=${process.env['COLORTERM']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #062c8a99fd059d2a — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:595

      if (process.env[envVar]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8bd6fbc065cda1e9 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:596

        args.push('--env', `${envVar}=${process.env[envVar]}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca73f594bcf726aa — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:605

      process.env['VIRTUAL_ENV']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e295a7e1bd10e702 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:615

        `${sandboxVenvPath}:${getContainerPath(process.env['VIRTUAL_ENV'])}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94b11e179b4318a4 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:619

        `VIRTUAL_ENV=${getContainerPath(process.env['VIRTUAL_ENV'])}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #665ac82db4f88852 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:624

    if (process.env['SANDBOX_ENV']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be5a51704786f590 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:625

      for (let env of process.env['SANDBOX_ENV'].split(',')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7e1dc74b6222a72 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:640

    const existingNodeOptions = process.env['NODE_OPTIONS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a1440038e2680f0 — Filesystem access.

repo/packages/cli/src/utils/sandbox.ts:656

      fs.writeFileSync(emptyAuthFilePath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a53f3c632e5513f7 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:665

    if (process.env['GEMINI_CLI_INTEGRATION_TEST'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2df5efb142eef5d4 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:987

      GEMINI_API_KEY: process.env['GEMINI_API_KEY'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #263661cfb4f7ff1f — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:988

      GOOGLE_API_KEY: process.env['GOOGLE_API_KEY'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5be4ece71210bf0d — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:989

      GOOGLE_GEMINI_BASE_URL: process.env['GOOGLE_GEMINI_BASE_URL'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81fc0e3711bcf889 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:990

      GOOGLE_VERTEX_BASE_URL: process.env['GOOGLE_VERTEX_BASE_URL'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f22324db56ff6069 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:991

      GOOGLE_GENAI_USE_VERTEXAI: process.env['GOOGLE_GENAI_USE_VERTEXAI'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c777e177e9bfa11 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:992

      GOOGLE_GENAI_USE_GCA: process.env['GOOGLE_GENAI_USE_GCA'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d52e1f0b5bc6bc9c — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:993

      GOOGLE_CLOUD_PROJECT: process.env['GOOGLE_CLOUD_PROJECT'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8fdf8cac58a86a77 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:994

      GOOGLE_CLOUD_LOCATION: process.env['GOOGLE_CLOUD_LOCATION'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eda525ce3bc87ca4 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:995

      GEMINI_MODEL: process.env['GEMINI_MODEL'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a96fa867f20ebaba — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:996

      TERM: process.env['TERM'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60f7dbd639c8c987 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:997

      COLORTERM: process.env['COLORTERM'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ae411f8714d83f6 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:998

      GEMINI_CLI_IDE_SERVER_PORT: process.env['GEMINI_CLI_IDE_SERVER_PORT'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ac90ed2208d0991 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:1000

        process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5865ca2cdd5ea6fb — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:1001

      TERM_PROGRAM: process.env['TERM_PROGRAM'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8dfcc36336ee7637 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:1010

    if (process.env['SANDBOX_ENV']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fa6d6f2fcbdee68 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:1011

      for (let env of process.env['SANDBOX_ENV'].split(',')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83434b1cabdac4b5 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:1025

    const existingNodeOptions = process.env['NODE_OPTIONS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e78fa25a10e407b4 — Environment-variable access.

repo/packages/cli/src/utils/sandbox.ts:1124

      if (cliConfig?.getDebugMode() || process.env['DEBUG']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52f719168309c5c2 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:37

    delete process.env['NODE_ENV'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d0c7d3fb69c739f — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:38

    delete process.env['DEBUG'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #61a89b0d7636acab — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:80

      delete process.env['SANDBOX_PORTS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a2fff0b10654afd — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:85

      process.env['SANDBOX_PORTS'] = '8080, 3000 , 9000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7fd1adca1c9dbe01 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:102

      process.env['PATH'] = '/work/bin:/usr/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab19b48bcfeb3143 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:103

      process.env['PYTHONPATH'] = '/work/lib';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d9f973b778f75246 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:116

      process.env['SANDBOX_PORTS'] = '8080';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84bb6a86ce64d72e — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:122

      process.env['NODE_ENV'] = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01d9ab658945b0b8 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:130

      process.env['SANDBOX_SET_UID_GID'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0e9492324071ca66 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:135

      process.env['SANDBOX_SET_UID_GID'] = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9521f62b0bd965f — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:140

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b4232ae67b3468d0 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:147

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3264756640bbeb3f — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:154

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9640e37d31fd2fe — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:161

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a78b8daa27281dc0 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:168

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ac3ee26c5854f16 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:175

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d2b16b2b202eb09 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:196

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6358787213f8ea64 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:205

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #044fd57f18cdfc64 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:224

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb469b784c1b07f7 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.test.ts:236

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #093777672a0b14ff — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:39

  const envVar = process.env['SANDBOX_SET_UID_GID']?.toLowerCase().trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7611f081a3a168e1 — Filesystem access.

repo/packages/cli/src/utils/sandboxUtils.ts:51

      const osReleaseContent = await readFile('/etc/os-release', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78dca36206e9bac1 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:94

  return (process.env['SANDBOX_PORTS'] ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0aa56c0475fd400 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:107

  if (process.env['PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9276569bbff6f1a — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:108

    const paths = process.env['PATH'].split(pathSeparator);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c166512634442269 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:123

  if (process.env['PYTHONPATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06731362e0987ddc — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:124

    const paths = process.env['PYTHONPATH'].split(pathSeparator);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7252a367af66fb07 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:151

    process.env['DEBUG'] === 'true' || process.env['DEBUG'] === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #713e15e42ccff7b6 — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:153

    process.env['NODE_ENV'] === 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b928c2f00e398ed — Environment-variable access.

repo/packages/cli/src/utils/sandboxUtils.ts:158

        ? `node --inspect-brk=0.0.0.0:${process.env['DEBUG_PORT'] || '9229'} $(which gemini)`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6506887e878a67e1 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:85

    await fs.writeFile(
      sessionFile,
      JSON.stringify({
        sessionId: 'test123',
        messages: [],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #db912c85e70e3a1f — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:169

    await fs.writeFile(
      oldSessionFile,
      JSON.stringify({
        sessionId: 'old12345',
        messages: [{ type: 'user', content: 'test message' }],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9a020cd8dd564b16 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:184

    await fs.writeFile(
      recentSessionFile,
      JSON.stringify({
        sessionId: 'recent789',
        messages: [{ type: 'user', content: 'test message' }],
        startTime: recentDate.toISOString(),
        lastUpdated: recentDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7161e63c03921e83 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:199

    await fs.writeFile(
      currentSessionFile,
      JSON.stringify({
        sessionId: 'current123',
        messages: [{ type: 'user', content: 'test message' }],
        startTime: now.toISOString(),
        lastUpdated: now.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #511018ea431ebc3b — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:282

    await fs.writeFile(
      parentFile,
      JSON.stringify({
        sessionId: parentSessionId,
        messages: [],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22a8b0bd6978f913 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:297

    await fs.writeFile(
      subagentFile,
      JSON.stringify({
        sessionId: subagentSessionId,
        messages: [],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a1434de545ec72c3 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:311

    await fs.writeFile(parentLogFile, '{"log": "parent"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #558d48753997e89b — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:318

    await fs.writeFile(
      path.join(parentToolOutputsDir, 'some-output.txt'),
      'data',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #36a6228f3f6604e8 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:327

    await fs.writeFile(subagentLogFile, '{"log": "subagent"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #790de57615e7913c — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:334

    await fs.writeFile(
      path.join(subagentToolOutputsDir, 'some-output.txt'),
      'data',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #caae838b7b410e97 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.integration.test.ts:344

    await fs.writeFile(
      currentFile,
      JSON.stringify({
        sessionId: 'current-session',
        messages: [
          {
            type: 'user',
            content: [{ type: 'text', text: 'hello' }],
            timestamp: now.toISOString(),
          },
        ],
        startTime: now.toISOString(),
        lastUpdated: now.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #980606d6cf068286 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:84

    await fs.writeFile(
      filePath,
      JSON.stringify({
        sessionId: session.id,
        lastUpdated: session.lastUpdated,
        startTime: session.lastUpdated,
        messages: [{ type: 'user', content: 'hello' }],
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d221e6dcb39d954 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:97

    await fs.writeFile(
      path.join(logsDir, `session-${sessionId}.jsonl`),
      'log content',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #715a7202e3967087 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:104

    await fs.writeFile(
      path.join(sessionOutputDir, 'output.txt'),
      'tool output',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e6c55c0b013ed150 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:291

      await fs.writeFile(
        filePath,
        JSON.stringify(
          {
            sessionId,
            lastUpdated: twoWeeksAgo.toISOString(),
            startTime: twoWeeksAgo.toISOString(),
            messages: [{ type: 'user', content: 'hello legacy' }],
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d715348fe30a1022 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:337

      await fs.writeFile(
        filePath,
        JSON.stringify(metadata) + '\n' + JSON.stringify(message) + '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce2c6de3c66b1176 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:364

      await fs.writeFile(filePath, 'completely invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9dbe31dccd13dd3c — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:495

      await fs.writeFile(corruptPath, 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7116ebeb71443b64 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:515

      await fs.writeFile(badJsonPath, 'This is raw text, not JSON');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e1a40578b068809 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:532

      await fs.writeFile(
        legacyPath,
        JSON.stringify({
          sessionId: 'legacy-session-id',
          lastUpdated: '2024-12-25T00:00:00.000Z',
          messages: [],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e764f4460373b24 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:735

      await fs.writeFile(targetFile, JSON.stringify({ sessionId: '../../..' }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8787d3a0fb5c9550 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:964

      await fs.writeFile(file1, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46773ec057793c43 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.test.ts:967

      await fs.writeFile(file2, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6920f79b96c3da6 — Filesystem access.

repo/packages/cli/src/utils/sessionCleanup.ts:206

                  const fileContent = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0345c69b51e009d3 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:54

      await fs.writeFile(
        path.join(
          chatsDir,
          `session-20240101T000000-${sessionId.slice(0, 8)}.jsonl`,
        ),
        JSON.stringify({ sessionId }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e6ff04d0fe3f62b — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:71

      await fs.writeFile(
        path.join(chatsDir, `session-different-uuid-20240101.jsonl`),
        '{}',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ba751d41c7b5afc7 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:128

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #86869c9a8169b364 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:136

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId2.slice(0, 8)}.json`,
      ),
      JSON.stringify(session2, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8bb1f7f26f290490 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:194

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #74b2150aaad35c77 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:202

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId2.slice(0, 8)}.json`,
      ),
      JSON.stringify(session2, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a5cb99a6e089229c — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:258

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cd8a29d77686d3b7 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:266

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId2.slice(0, 8)}.json`,
      ),
      JSON.stringify(session2, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #27804e0639a8c4f3 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:303

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(session, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a9246a9521aaf08 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:357

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionOriginal, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0912481afde112c5 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:366

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionDuplicate, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #47ab94161630955a — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:405

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b067b8c4dab0b10 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:490

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionIdWithUser.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionWithUser, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #28c9425c7e587ad5 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:498

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionIdSystemOnly.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionSystemOnly, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d79179b9b2765ba — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:533

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${commandOnlySessionId.slice(0, 8)}.jsonl`,
      ),
      `${JSON.stringify(metadata)}\n${JSON.stringify(commandMessage)}\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #67f042c6da9f52de — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:572

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId.slice(0, 8)}.jsonl`,
      ),
      `${JSON.stringify(metadata)}\n${JSON.stringify(commandMessage)}\n${JSON.stringify(realMessage)}\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15ff2948d1791bbc — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:611

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionIdGeminiOnly.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionGeminiOnly, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e692e4b901c1e646 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:669

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${mainSessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(mainSession, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe9c2a68a9a29cb4 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:677

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${subagentSessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(subagentSession, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e6616772b0b6e4b7 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:716

    await fs.writeFile(filePath, JSON.stringify(session, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e72594aa9ce5b015 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:752

    await fs.writeFile(filePath, JSON.stringify(session, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #428ee9433c10f347 — Filesystem access.

repo/packages/cli/src/utils/sessionUtils.test.ts:788

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${existingSessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(session, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3a849c4b1c4c3f79 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:35

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d4d251e2206e8e4d — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:56

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #44e14b52fec407cd — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:77

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #922794a932e98abc — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:102

      await fs.writeFile(
        path.join(skillDir1, 'SKILL.md'),
        '---\nname: duplicate-skill\ndescription: desc1\n---\nbody1',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #41447887ddf811fb — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:106

      await fs.writeFile(
        path.join(skillDir2, 'SKILL.md'),
        '---\nname: duplicate-skill\ndescription: desc2\n---\nbody2',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04b31ed452d2070c — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:153

    await fs.writeFile(
      path.join(skillSubDir, 'SKILL.md'),
      '---\nname: test-skill\ndescription: test\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4193e14824cc77ff — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:176

    await fs.writeFile(
      path.join(skillSubDir, 'SKILL.md'),
      '---\nname: test-skill\ndescription: test\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b8013e817c7319d4 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:206

      await fs.writeFile(
        path.join(skillDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #409f17301ee106a2 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:228

      await fs.writeFile(
        skillMdPath,
        '---\nname: original-name\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #90881293e97a73a6 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:244

      await fs.writeFile(
        skillMdPath,
        '---\nname: updated-name\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cfeaad686e5364c6 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:299

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: ..\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #266d4acde368add4 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:313

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: ..\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bd18e16cc21af380 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:337

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: /tmp/exploit\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d019a08e53062a45 — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:360

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: " ../../exploit "\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bdfec478d00f8c1d — Filesystem access.

repo/packages/cli/src/utils/skillUtils.test.ts:383

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: ..-foo\ndescription: safe skill name starting with double dots\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4b1bf9ee95bc981 — Filesystem access.

repo/packages/cli/src/utils/startupWarnings.ts:17

    const warningsContent = await fs.readFile(warningsFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #35077bda031f6c79 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:101

      await fs.writeFile(recentFile, 'recent content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dfd4aa455bad5a5a — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:102

      await fs.writeFile(oldFile, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1bc15166b38c0275 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:145

      await fs.writeFile(file1, 'content 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #36f7dfe1dde08424 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:146

      await fs.writeFile(file2, 'content 2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c2448a0ed9e0f86b — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:147

      await fs.writeFile(file3, 'content 3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10b99e1868a7ba05 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:218

      await fs.writeFile(file1, 'content 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f5ec62357242e97 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:219

      await fs.writeFile(file2, 'content 2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4e5cdad49827fff — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:220

      await fs.writeFile(file3, 'content 3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c12c8797c591a856 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:221

      await fs.writeFile(file4, 'content 4');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ae1a22d4eca698e7 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:222

      await fs.writeFile(file5, 'content 5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50e731cf478d86e2 — Filesystem access.

repo/packages/cli/src/utils/toolOutputCleanup.test.ts:269

      await fs.writeFile(oldFile, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6cdf482d79f546d3 — Environment-variable access.

repo/packages/cli/src/utils/windowTitle.ts:44

  let displayContext = process.env['CLI_TITLE'] || folderName;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #472ab724e89e59c0 — Environment-variable access.

repo/packages/cli/src/utils/worktreeSetup.test.ts:82

    expect(process.env['GEMINI_CLI_WORKTREE_HANDLED']).toBe('1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #535795ff1197469f — Environment-variable access.

repo/packages/cli/src/utils/worktreeSetup.test.ts:98

    process.env['GEMINI_CLI_WORKTREE_HANDLED'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #740a6afe44cc1066 — Environment-variable access.

repo/packages/cli/src/utils/worktreeSetup.ts:24

  if (process.env['GEMINI_CLI_WORKTREE_HANDLED'] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8204a0514f42d9d1 — Environment-variable access.

repo/packages/cli/src/utils/worktreeSetup.ts:35

    process.env['GEMINI_CLI_WORKTREE_HANDLED'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a5f3e32dd398ffd — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:45

    originalEnvGeminiApiKey = process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #44901148e126b172 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:46

    originalEnvVertexAi = process.env['GOOGLE_GENAI_USE_VERTEXAI'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bb4ae9e7a9e00f34 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:47

    originalEnvGcp = process.env['GOOGLE_GENAI_USE_GCA'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6fb6eef04d8bec08 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:48

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #09b2b912b0249564 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:49

    delete process.env['GOOGLE_GENAI_USE_VERTEXAI'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a304b2f870d6553c — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:50

    delete process.env['GOOGLE_GENAI_USE_GCA'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aff8268a8adf0c21 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:86

      process.env['GEMINI_API_KEY'] = originalEnvGeminiApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f2d4499100ef022 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:88

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d5bcb8d3fd177bf2 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:91

      process.env['GOOGLE_GENAI_USE_VERTEXAI'] = originalEnvVertexAi;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #47aa5cdd777b98d8 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:93

      delete process.env['GOOGLE_GENAI_USE_VERTEXAI'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1cba675bd587f557 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:96

      process.env['GOOGLE_GENAI_USE_GCA'] = originalEnvGcp;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ed7f059605e1c39 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:98

      delete process.env['GOOGLE_GENAI_USE_GCA'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ea81a648f144524 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:132

    process.env['GOOGLE_GENAI_USE_GCA'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #052fd50635ddefdd — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:145

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cdea8a54e4417546 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:158

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a0689aa868f317f — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:159

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1812c9c2825f3ae2 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:160

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1d81fbf3b6b30df3 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:173

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76ee1f3c37a66775 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:174

    process.env['GOOGLE_API_KEY'] = 'vertex-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f7d8a03dc9f1da42 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:187

    process.env['GOOGLE_GENAI_USE_GCA'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6f7bb70f457eb49e — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:188

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c499652e9eeeb77 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:189

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a8e9a5ac3eda1a67 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:190

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f42d9a84a3bff56 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:191

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #97d000191943ade3 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:204

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3746ce912c84873e — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:205

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0b784cce4c216e0a — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:206

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1c571a7df37573e6 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:207

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5087d82698e6c48a — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:220

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #11ad9cebc8ab657d — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:221

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cede66b32a39fc11 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:222

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #00b003c6d067ac08 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:223

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #69230cdb65e63b12 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:236

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c67eb3de45ac9ee3 — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:299

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8acb902031e7f8ec — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:339

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6789e877b3696ceb — Environment-variable access.

repo/packages/cli/src/validateNonInterActiveAuth.test.ts:436

      process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #869ad3f70d7eea0a — Environment-variable access.

repo/packages/cli/test-setup.ts:17

if (process.env.CI !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f56a06fb577fe10 — Environment-variable access.

repo/packages/cli/test-setup.ts:18

  delete process.env.CI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59d355e0cd9aef50 — Environment-variable access.

repo/packages/cli/test-setup.ts:27

if (process.env.NO_COLOR !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c82d5384bb038e9 — Environment-variable access.

repo/packages/cli/test-setup.ts:28

  delete process.env.NO_COLOR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5117322573d3d19 — Environment-variable access.

repo/packages/cli/test-setup.ts:32

process.env.FORCE_COLOR = '3';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87fe1225b2dcba47 — Environment-variable access.

repo/packages/cli/test-setup.ts:35

process.env.FORCE_GENERIC_KEYBINDING_HINTS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #679b315c58affe23 — Environment-variable access.

repo/packages/cli/test-setup.ts:38

process.env.TERM_PROGRAM = 'generic';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57b20bf17dc6dd85 — Environment-variable access.

repo/packages/cli/test-setup.ts:41

process.env.COLORTERM = 'truecolor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/devtools

npm first-party

expand_more 3 low-confidence finding(s)

low env_fs production #ac6c6b5be038e7ff — Filesystem access.

repo/packages/devtools/esbuild.client.js:27

const indexHtml = readFileSync('client/index.html', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #261d4ed84975fe0e — Filesystem access.

repo/packages/devtools/esbuild.client.js:28

const clientJs = readFileSync('dist/client/main.js', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52c2eacd206c471e — Filesystem access.

repo/packages/devtools/esbuild.client.js:30

writeFileSync(
  'src/_client-assets.ts',
  `/**\n * @license\n * Copyright 2025 Google LLC\n * SPDX-License-Identifier: Apache-2.0\n */\n\n// Auto-generated by esbuild.client.js — do not edit\nexport const INDEX_HTML = ${JSON.stringify(indexHtml)};\nexport const CLIENT_JS = ${JSON.stringify(clientJs)};\n`,
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/sdk

npm first-party

expand_more 6 low-confidence finding(s)

low env_fs test-only Excluded from app score #da2aff2c0ad2f5ea — Filesystem access.

repo/packages/sdk/examples/session-context.ts:30

        fileContent = await context.fs.readFile('package.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6cb9393f83104d16 — Environment-variable access.

repo/packages/sdk/src/agent.integration.test.ts:16

const RECORD_MODE = process.env['RECORD_NEW_RESPONSES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29fb2c1171c87711 — Filesystem access.

repo/packages/sdk/src/fs.ts:29

      return await fs.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c345df29cfa60143 — Filesystem access.

repo/packages/sdk/src/fs.ts:40

    await fs.writeFile(path, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7023019972870e8a — Environment-variable access.

repo/packages/sdk/src/skills.integration.test.ts:17

const RECORD_MODE = process.env['RECORD_NEW_RESPONSES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #31a732f0a51fb819 — Environment-variable access.

repo/packages/sdk/src/tool.integration.test.ts:18

const RECORD_MODE = process.env['RECORD_NEW_RESPONSES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/test-utils

npm first-party

expand_more 32 low-confidence finding(s)

low env_fs production #2c65617fe1e5a70f — Environment-variable access.

repo/packages/test-utils/src/env-setup.ts:18

  process.env['HOME'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a363318be5974a8e — Environment-variable access.

repo/packages/test-utils/src/env-setup.ts:20

    process.env['USERPROFILE'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #faa488bc8306a855 — Environment-variable access.

repo/packages/test-utils/src/env-setup.ts:25

  process.env['GEMINI_CONFIG_DIR'] = join(runDir, '.gemini');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32586a6cc5b2c1a6 — Environment-variable access.

repo/packages/test-utils/src/env-setup.ts:28

  process.env['GEMINI_FORCE_FILE_STORAGE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c486f901b09a6a2f — Environment-variable access.

repo/packages/test-utils/src/env-setup.ts:31

  process.env['GEMINI_CLI_INTEGRATION_TEST'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06471d3eca905678 — Environment-variable access.

repo/packages/test-utils/src/env-setup.ts:34

  process.env['TELEMETRY_LOG_FILE'] = join(runDir, 'telemetry.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0868770a2fa1531e — Filesystem access.

repo/packages/test-utils/src/file-system-test-helpers.ts:62

      await fs.writeFile(newPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6364c1dfa031ad5f — Filesystem access.

repo/packages/test-utils/src/file-system-test-helpers.ts:67

          await fs.writeFile(path.join(newPath, item), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc70f948f9cd91d3 — Filesystem access.

repo/packages/test-utils/src/memory-baselines.ts:42

  const content = readFileSync(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f67956f1301fa444 — Filesystem access.

repo/packages/test-utils/src/memory-baselines.ts:54

  writeFileSync(path, JSON.stringify(baselines, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16b31a7bc2f2d570 — Filesystem access.

repo/packages/test-utils/src/perf-test-harness.ts:503

  const content = readFileSync(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e34bb13365047ef — Filesystem access.

repo/packages/test-utils/src/perf-test-harness.ts:515

  writeFileSync(path, JSON.stringify(baselines, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #766cf8da407ce596 — Filesystem access.

repo/packages/test-utils/src/test-mcp-server-template.mjs:13

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d4dda9df3226172 — Filesystem access.

repo/packages/test-utils/src/test-mcp-server-template.mjs:21

const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76a737bc9aac7aaf — Environment-variable access.

repo/packages/test-utils/src/test-rig.ts:405

      if (process.env['REGENERATE_MODEL_GOLDENS'] !== 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52da875e3d87e88d — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:496

    writeFileSync(
      join(projectGeminiDir, 'settings.json'),
      JSON.stringify(settings, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bce4a5f4c321b51e — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:500

    writeFileSync(
      join(userGeminiDir, 'settings.json'),
      JSON.stringify(settings, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f77b856c3bae752d — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:518

    writeFileSync(
      join(userGeminiDir, 'state.json'),
      JSON.stringify(state, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f16c04261b5645b — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:526

    writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a31f6db6bf7c00f — Environment-variable access.

repo/packages/test-utils/src/test-rig.ts:563

      if (process.env['REGENERATE_MODEL_GOLDENS'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea947b0f8aa672a4 — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:581

    writeFileSync(scriptPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cedd6a39a0fd717e — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:606

      testConfig = JSON.parse(fs.readFileSync(configPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #265dcb1ea3b49982 — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:619

    fs.writeFileSync(configFilePath, JSON.stringify(testConfig, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee533215b4fc08c4 — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:649

        settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96bc8f1837a48f03 — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:664

      fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29b409d9610f2ffd — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:989

    const content = readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b62d0e3d71dd40d9 — Environment-variable access.

repo/packages/test-utils/src/test-rig.ts:1039

      process.env['REGENERATE_MODEL_GOLDENS'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30f900da1009468a — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:1078

          const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3a37067caf881d9 — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:1340

    const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3dba2a60cdd3fd6 — Filesystem access.

repo/packages/test-utils/src/test-rig.ts:1380

          const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #032176aee1c88a09 — Environment-variable access.

repo/packages/test-utils/src/test-rig.ts:1652

        if (process.env[v] && !envVars[v]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c01056d8b666543 — Environment-variable access.

repo/packages/test-utils/src/test-rig.ts:1653

          envVars[v] = process.env[v]!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/vscode-ide-companion

npm first-party

expand_more 12 low-confidence finding(s)

low env_fs test-only Excluded from app score #c31228e38788f142 — Filesystem access.

repo/packages/vscode-ide-companion/scripts/generate-notices.js:44

    const depPackageJsonContent = await fs.readFile(
      depPackageJsonPath,
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4fc124efdaa7bf73 — Filesystem access.

repo/packages/vscode-ide-companion/scripts/generate-notices.js:74

        licenseContent = await fs.readFile(licenseFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c88c06fbe16f00a1 — Filesystem access.

repo/packages/vscode-ide-companion/scripts/generate-notices.js:140

    const packageJsonContent = await fs.readFile(packageJsonPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #828f692113b7fe3f — Filesystem access.

repo/packages/vscode-ide-companion/scripts/generate-notices.js:144

    const packageLockJsonContent = await fs.readFile(
      packageLockJsonPath,
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dfd41d84c8bc3aa2 — Filesystem access.

repo/packages/vscode-ide-companion/scripts/generate-notices.js:182

    await fs.writeFile(noticeFilePath, noticeText);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #a1f200e22698dc38 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/vscode-ide-companion/src/extension.ts:45

    const response = await fetch(
      'https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery',
      {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          Accept: 'application/json;api-version=7.1-preview.1',
        },
        body: JSON.stringify({
          filters: [
            {
              criteria: [
                {
                  filterType: 7, // Corresponds to ExtensionName
                  value: CLI_IDE_COMPANION_IDENTIFIER,
                },
              ],
            },
          ],
          // See: https://learn.microsoft.com/en-us/azure/devops/extend/gallery/apis/hyper-linking?view=azure-devops
          // 946 = IncludeVersions | IncludeFiles | IncludeCategoryAndTags |
          //       IncludeShortDescription | IncludePublisher | IncludeStatistics
          flags: 946,
        }),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #3ff83222ba612287 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/vscode-ide-companion/src/ide-server.test.ts:359

      const response = await fetch(`http://localhost:${port}/mcp`, {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({
          jsonrpc: '2.0',
          method: 'initialize',
          params: {},
          id: 1,
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #171bd8bd3b7b7137 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/vscode-ide-companion/src/ide-server.test.ts:373

      const response = await fetch(`http://localhost:${port}/mcp`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          Authorization: `Bearer test-auth-token`,
        },
        body: JSON.stringify({
          jsonrpc: '2.0',
          method: 'initialize',
          params: {},
          id: 1,
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #43afd5d2981671e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/vscode-ide-companion/src/ide-server.test.ts:390

      const response = await fetch(`http://localhost:${port}/mcp`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          Authorization: 'Bearer invalid-token',
        },
        body: JSON.stringify({
          jsonrpc: '2.0',
          method: 'initialize',
          params: {},
          id: 1,
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #b6cae0b92168dbb7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/vscode-ide-companion/src/ide-server.test.ts:416

        const response = await fetch(`http://localhost:${port}/mcp`, {
          method: 'POST',
          headers: {
            'Content-Type': 'application/json',
            Authorization: header,
          },
          body: JSON.stringify({
            jsonrpc: '2.0',
            method: 'initialize',
            params: {},
            id: 1,
          }),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #87c398233786131d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/vscode-ide-companion/src/ide-server.test.ts:443

    const req = http.request(
      {
        hostname: '127.0.0.1',
        port,
        ...options,
      },
      (res) => {
        res.resume(); // Consume response data to free up memory
        resolve(res);
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #c7ec639aadaee4f1 — Filesystem access.

repo/packages/vscode-ide-companion/src/ide-server.ts:91

    await fs.writeFile(portFile, content).then(() => fs.chmod(portFile, 0o600));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@a2a-js/sdk

npm dependency

high pii_flow dependency Excluded from app score #7d10b86cb68c614c — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:85 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:82 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:85

      const response = await fetch(url, {
        method: 'POST',
        headers,
        body: JSON.stringify(task),
        signal: controller.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium pii_flow dependency Excluded from app score #1de9b2744003abd3 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:87 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:82 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:87

        headers,

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 18 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #6e782b448be89635 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generateTypes.js:2

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ada50336bbb3babf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generateTypes.js:5

const typeSchemaContents = fs.readFileSync(path.join(process.cwd(), 'spec.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74af3b127e4ee180 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generateTypes.js:13

}).then((ts) => fs.writeFileSync('src/types.ts', ts));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #e736ee2544785803 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/card-resolver.ts:42

    return fetch(...args);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f6c3ca4f6319e9f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/client.ts:90

      return fetch(...args);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ac09fe750309d5b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/client.ts:119

      response = await fetch(agentCardUrl, requestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ae87b18fe7905ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/transports/json_rpc_transport.ts:183

      return fetch(...args);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5db5a4f6253554a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/transports/rest_transport.ts:203

      return fetch(...args);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #c8201c6c454f2bdf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/samples/agents/movie-agent/index.ts:29

if (!process.env.GEMINI_API_KEY || !process.env.TMDB_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #580e2c43b5e5560b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/samples/agents/movie-agent/index.ts:328

  const PORT = process.env.PORT || 41241;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7f977f7cefc0224 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/samples/agents/movie-agent/tmdb.ts:9

  const apiKey = process.env.TMDB_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #87435c9a457f536a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/samples/agents/movie-agent/tmdb.ts:23

    const response = await fetch(url.toString());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d6f964cc4a0a5c32 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/samples/agents/sample-agent/index.ts:63

  const PORT = process.env.PORT || 41241;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8105b6ef924fe488 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/samples/authentication/index.ts:73

  const PORT = process.env.PORT || 41241;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa99355f03cc22e3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/samples/extensions/index.ts:73

  const PORT = process.env.PORT || 41241;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #59d441177a4c38a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/push_notification/default_push_notification_sender.ts:85

      const response = await fetch(url, {
        method: 'POST',
        headers,
        body: JSON.stringify(task),
        signal: controller.signal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f8fcd152cae83209 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tck/agent/index.ts:224

  const HTTP_PORT = process.env.HTTP_PORT || 41241;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #171921f72c61eecc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tck/agent/index.ts:235

  const GRPC_PORT = process.env.GRPC_PORT || 41242;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@google/genai

npm dependency

medium pii_flow dependency Excluded from app score #aa826a5271b21835 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27

    console.debug(text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a8fed5523e24d080 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19

  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #238ab17bd3a959c6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19

  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e4279cf22306739a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83

    console.log(`Uploaded file as: ${uploadedFile.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #89800202de55d71b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103

  console.log(`Creating batch embedding job with file: ${inputFile}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c2019ab3d0e539bd — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109

  console.log(`Created batch job: ${batchJob.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #30e5ac1fade9da22 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117

  console.log('result: ', result);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7b88b33c9a927f58 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124

    console.log(
      `Batch job not done yet, current state: ${
        result.state
      }. Waiting 60 seconds...`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4245b21313a95603 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133

  console.log(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d7ab7a655b807732 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161

    console.error('Batch job failed:', result.error);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #edb2c9e24e8f8592 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163

    console.warn(`Batch job finished with unexpected state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #046cf5d2ca52acd6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52

  console.log(`Created batch job: ${batchJob.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e9729f11c30b43b2 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66

    console.log(
      `Batch job not done yet, current state: ${
        result.state
      }. Waiting 10 seconds...`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a1b98b810e0750df — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76

  console.log(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8dfed0199de5fc04 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80

    console.log(result.dest?.inlinedEmbedContentResponses);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0af3ef7e4215550c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82

    console.error('Batch job failed:', result.error);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4a505e3d989194d3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84

    console.warn(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d736711558b7ec2f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76

      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #91fff8eda2ea806f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84

      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0e04df9a1db96ff3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87

  console.log('History: ', JSON.stringify(chat.getHistory(), null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c9118170ed355def — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19

  console.debug('chat response 1: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f533859e8e914784 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21

  console.debug('chat response 2: ', response2.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #150689e519e4cf55 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25

    console.debug('chat history: ', JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e737182daac00819 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36

    console.debug('chat response 1 chunk: ', chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #cdbad8956503cd54 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42

    console.debug('chat response 2 chunk: ', chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #42ca47b809bd42de — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46

    console.debug('chat history: ', JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #661e18594bf39512 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21

  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6780409b1daf6a57 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21

  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #602338bea14233aa — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25

    console.log('list file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2280a24f22b33aa0 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34

  console.log('get file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6f32f1fd03a46eb3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40

  console.log('create file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #106eb5497cc90d2e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47

  console.log('uploaded file: ', file.name);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c7c50c81bbc268f6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59

    console.log('operation: ', op);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #57fa3229fd2d596d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:75 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:75

    console.log('operation: ', op);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #dcb938a9f5c911ab — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:95 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:95

  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ffafb976a34ff3d5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96

  console.log(
    'grounding metadata: ',
    JSON.stringify(response.candidates?.[0]?.groundingMetadata, null, 2),
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c897fd2a60f306fa — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:117 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:117

    console.log('list documents: ', document);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e2d10eef0b1cb2e9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:130 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:130

  console.log('get document: ', document);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b75ace962e380741 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80

      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9b8b10457f7d0513 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31

      console.debug(text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2b184d1ec944e704 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25

  console.debug(response.executableCode);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f8748ad553731e70 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26

  console.debug(response.codeExecutionResult);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d9050f30bd15bd54 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32

    console.log(`current file status: ${getFile.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2797fe10e0cc4897 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #eabd3f2a9f62e20a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55

  console.debug(response.functionCalls);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3426871778413e5c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52

  console.debug(response.functionCalls);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0d7f2de5b797ccdf — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29

  console.debug(response!.candidates![0]!.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #834545abeb2a3712 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:25 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:25

  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2aa79c2ffcfb3a53 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6170260786744aa6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ae27789cf795d8e4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #17d55dfe99f9c17f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36

  console.debug(JSON.stringify(response?.candidates?.[0]?.safetyRatings));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #258528cf461996b8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23

  console.debug(JSON.stringify(response?.candidates?.[0]?.groundingMetadata));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #138f903cd3e9df33 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d6f27bb5e3327b6c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2b398794c8150fa5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #828e0772a53e0889 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #65859d787f5f4e0a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26

    console.debug(response.candidates[0].urlContextMetadata);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9c6a13e2caaf4b4b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24

  console.debug(response?.generatedImages?.[0]?.image?.imageBytes);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #075f4fdebc744a92 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36

    console.log(
      `No videos generated due to: ${JSON.stringify(
        operation.response?.raiMediaFilteredReasons,
        null,
        2,
      )}`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0aa7ebc702dd86ea — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184

    console.log('Token:', JSON.stringify(token));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #51051bafa8465cd1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:147 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:147

  console.log('Token:', JSON.stringify(token));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 282 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #2a0b97732ebf925a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/rollup.config.mjs:2

import {readFileSync} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e9295250bb784a29 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/rollup.config.mjs:6

  readFileSync(new URL('./package.json', import.meta.url), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e958c936cf866556 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:7

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dbf42429c12fc0f9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:20

  const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bda6a9bcae2826c6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:24

  fs.writeFileSync(filePath, header + content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b150d07186e01b6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:8

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c32644705688f35 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:39

  const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa5b1b96b8b61d53 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:43

  fs.writeFileSync(filePath, HEADER + content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #92ce8e92767a8839 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:87

    const manifestContent = fs.readFileSync(manifestPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #916f5ac4a1f635a0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:7

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a9e68dbe97051c02 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:64

    const fileContent = fs.readFileSync(absolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6cb9342b9cd073ee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:74

      fs.writeFileSync(absolutePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e185007e215cb3a0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b6a2c6ebbfebe0e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de1577296ce914b4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a83414fd86a1bcfd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91b97350706ae8f8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad56894c3571f4f7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd5618263ecb7905 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed85d02c0d0ea69d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b966218cc8d1cd7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0788536f43fdc2fb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #407b5f59f17c3180 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeba833a7fd94c3b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5bffa90793a618e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:10

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ded1f2b382e7528 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17

  apiKey: process.env.GEMINI_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #218c460b91e7627a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:28

  if (process.env.GOOGLE_GENAI_USE_VERTEXAI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6598309f548aa399 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:71

    await fs.writeFile(tempFilePath, jsonlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf370447c75a64ad — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:148

      const contentString = await fs.readFile(tempFilePath, {encoding: 'utf8'});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34a439dc86adf30a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14

  apiKey: process.env.GEMINI_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f70359c1b7b3165 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:25

  if (process.env.GOOGLE_GENAI_USE_VERTEXAI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0856d795be95f242 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5467395e25986a42 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f60dc5091a0afe8d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40f3da38ed01e273 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:12

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #148167f37023547d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96effc35452b9789 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bee706024cfdf496 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48ba0fed000a28dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f77d2c5ba308f4dc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:16

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #343c0f58d006d972 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:17

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bca08d0579a2f87a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:18

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aedf74620b3ed91f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:15

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ca848e926ababf7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:16

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c110ba2f5c428b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:17

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8d6e0874c12a44e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2f6e27f8d786c21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8a7a4841af93c03 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18feb14aa7cd0e6a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9c6b7dba1af9b91 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #390f0933d4d0cc5c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #977f679c6ef9aa00 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #090f279483d325e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d64f7b2ddf1df0cf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cd8dd4c48f06b90 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2627aca963b5f617 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5bea98c54c85111 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c7b6259da329406 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff19e3b462de9c06 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c46f590396f65873 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #141625538e7cb71b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc01549e89dcf4ea — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6a8fc8d7ec13f6e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bd30ba40f148c39 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5f152232837e92f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35bbcfaf67946eac — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fcf7b07bf6e7d31 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9cab838039134bc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e123f97a3ad7dbb5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3050204b735e736 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #639f98baeb4e5316 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c133bd0d57883b52 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f6c3b3b7163b64e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8c6603b3b0bec20 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a7613544aea3391 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:17

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90dab255d605a38d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:18

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d3fd3c29ae1b66c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:19

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f264a50147c98da — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:7

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2ecdeb25ab8bcc6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71a1e7c6d1202f5f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:10

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1aadcba89da0595 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:11

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ced30dbb5b78744 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:12

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f953f05b67b80f3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:35

      fs.writeFileSync(fileName, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2dad80f9b4ee9a9f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:65

      fs.writeFileSync(fileName, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a642d19dfde90354 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16e16dbb429d08f9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faf320019d8d73be — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbf50ae971b1beb2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1eff8144b2d489c4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d345157877cde043 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f24cebdd23020d68 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85926e25f16607e9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4888fae18cd2412 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87141daf5a73d722 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb731e99db923ff6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:14

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32f5dbb06e755975 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:15

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f216d6646dd2a85b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:16

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51251374fd8e326b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #059756a203d98149 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:11

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2bfb9318f8a03b2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:12

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebe6f2abc5da34cf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:13

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d0d1768dff2bc18 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c173e999ea9b97e3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ede4158f265694c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc41af49d9a43c12 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b06c16cf3bbe3771 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7e77a23b82319e2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53d5ff7ed97857e1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9fb5830c1eff0a2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f7531e311c7217b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #072456a45c28ebbf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5ab9cf92f527e2d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb1d35e0c0f823b2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9fd774cb6a64c0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d9de568f3ef4ec0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #743e729ed9770b89 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37cd00fcb546a719 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #561bd8e1aeef1726 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fef31c3023c93e71 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:10

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7d5748a6c78bcec — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:11

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3a507312196572e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:12

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c44b728574946d7a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb3732eb93461000 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:14

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f2759109b0e455a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:15

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #665f122362519663 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:16

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42804c983c96c724 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eefb28e690eb4769 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c3a3fab4ea97152 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61f5d77942c6ae62 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8d7006b70db3ed5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47fc6b363c4be355 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc8c456cacb8bd41 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb870b8c2e3dfd65 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d861e206924a408 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36d6bd5aa072ad77 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b46c01f725719c6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53483c2f362b8ea0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #160183c5b516ef34 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2387c584cc8c9bf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83a5ed096e6d283f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c276162e444609a3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7009988af18ab39f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cff18d468da067f9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #282f1d3e0ec1efa7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9349f7178994d91d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f476805aecc62f37 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e24d70feafcb0dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e71af9d351658e58 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f896b34d8ddc76e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4ab2408c4ded31a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fae635f034ffb28 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62ba611a07e3e4f8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c3134d9826c5796 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f741b65f1664dd8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4012030162f4ca9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4385d66e14269898 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2db1fbb7ffc177f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19a4945c86699c7e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e7879705c0a46c2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0efac860c2678149 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2c9d5dd1ba094f9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b93439ddb76b165 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33d5a7e5729ec70e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #309bd54306132e21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14223a1a142ca894 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c0035525c8e7006 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f119d8417649535 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #223ba3e1e96cc9fb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f97c1f81556c3232 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c5468ceaa0177df — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:14

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8e73908f7d206c1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:15

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4517d2f850fc78c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:16

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e8fac8df3ed687b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:18

  process.env.GOOGLE_GENAI_MLDEV_USE_EPHEMERAL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef67e07c88cfc55d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content_with_url_context.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ed93043025aa959 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content_with_url_context.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05b030e6b887a9a6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abc99dd5ac635413 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_music.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #363e00f1139a59d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_music.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7d3026ef42f9843 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:25

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7efb80820ec81db1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:26

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ea2ad569c3c3e55 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:27

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee7df765c5977486 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:28

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30dda1cef2ee055e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:12

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #259d4880ff95b421 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f453027dcdc6a70 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89246fa012fa5c5f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42bc8b18f6775f7c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:12

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d570062c7a5fbcc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bf3d82f29a54160 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #512392d9f7aeec0c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eaeb1dfcef8696b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_product_recontext.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2c9680d01f28d8d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_product_recontext.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3869c3c170286e3c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_product_recontext.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91340ce892e110f4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #944d3b2dc2885cc9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96fbb614ce49b6e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13f557253a190ee1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1334939e2178c77d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5353fb1183ba9cfb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe1ad3cc81ed456a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a84f343e4f904aa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f774e07cf40fa38f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59b9680ffc62e932 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84ac79029901d8f9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #131b95c00f3acbfc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c1165fef2e84f5ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/_api_client.ts:596

    return fetch(url, requestInit).catch((e) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3142c74deb2402b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:238

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #32568ffe4328e58c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:269

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f445c71274d12dcb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:321

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c447e5e7ccf6012d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:371

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7738e3a85ba4f626 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:402

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #946b1cfc07a01524 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:450

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2a6f0752f4d318f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:471

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d980660a776da81b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:499

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3f3ad060b4c4c630 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:534

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1435247c364bb676 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:593

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3fa37d8ff773b0e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:630

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f743cc4fa8c5c01d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:92

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6dec7042c651ee36 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:121

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dfaddb83f31dd632 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:171

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4ca5230706cdb6c4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:200

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6807674629063682 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:250

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dcdf4617a1db5dbc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:289

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b49077b348e69217 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:352

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #97d4ac8e1e6d5c52 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:381

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2f1242b9a4ba2aac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:417

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c0ab8242fe9ff75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:453

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #030d91f3efc4c705 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/cross/_cross_uploader.ts:109

      response = await apiClient.request({
        path: '',
        body: chunk,
        httpMethod: 'POST',
        httpOptions: {
          apiVersion: '',
          baseUrl: uploadUrl,
          headers: {
            'X-Goog-Upload-Command': uploadCommand,
            'X-Goog-Upload-Offset': String(offset),
            'Content-Length': String(chunkSize),
          },
        },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7560ad8698441bbb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/documents.ts:76

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #07b149eea9ed379f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/documents.ts:118

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'DELETE',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4b6dc2f7fced8a04 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/documents.ts:157

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #715e2bb5f93445b4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:145

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4e70afdd4a867e90 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:194

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e546e9b25c95bfd8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:250

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6fc00f6deb87d319 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:303

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5e502c14aaf18373 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:130

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6de3dab4ad1fee36 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:177

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5f5d58c6fdade42b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:219

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'DELETE',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c1b3a114f61ae683 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:258

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8d74d784fb834684 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:302

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #84d4e2d1f8a851ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:357

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56458fc8151beb20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:640

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #298aeccae42c49ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:678

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4ab9710a740fae3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:837

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #95409b782c081a24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:875

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8998711aca86f8c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:926

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70fee48396aac6b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:964

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #33f769c8acbbbcf1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1015

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #729aa6f37b3249d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1068

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6e92510302c4a6cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1156

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22ff70ff6be2bd14 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1220

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #494a6638cdaf0987 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1270

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cdf097b216b75c05 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1298

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2bb9a960b6a82083 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1339

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d0712f6214db50aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1377

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8b86eb8359d3e2ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1440

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ba4b9c651c5bb37b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1471

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0dca34af2da3d329 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1523

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #30a3d5eab3968d0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1561

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5705b5a2d46af080 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1625

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b31ec29d20898f84 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1663

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #98dcdf8756a2c4f0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1729

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5dddd7aa2007fbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1782

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fd603c1a818f5d71 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1814

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #a404d9882aff2017 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:7

import {createWriteStream} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bebaf7315a8259a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:8

import {writeFile} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38502db8c2f0b67e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:39

          await writeFile(params.downloadPath, response as string, {
            encoding: 'base64',
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c8fba7fcf6562d26 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:58

    return await apiClient.request({
      path: `files/${name}:download`,
      httpMethod: 'GET',
      queryParams: {
        'alt': 'media',
      },
      httpOptions: params.config?.httpOptions,
      abortSignal: params.config?.abortSignal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #b43f98be9941e134 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_uploader.ts:6

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3cec32a434ece4a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/node/_node_uploader.ts:251

          response = await apiClient.request({
            path: '',
            body: chunk,
            httpMethod: 'POST',
            httpOptions: {
              apiVersion: '',
              baseUrl: uploadUrl,
              headers: {
                'X-Goog-Upload-Command': uploadCommand,
                'X-Goog-Upload-Offset': String(offset),
                'Content-Length': String(bytesRead),
                'X-Goog-Upload-File-Name': fileName,
              },
            },
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #289ed18256e26872 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/operations.ts:132

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3e1df04f3a310050 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/operations.ts:156

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #631f744f6fa92458 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/operations.ts:190

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cad9716b79c4c360 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tokens.ts:286

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(transformedBody),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dfd97a29560061d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:131

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #781ee9af67e457da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:165

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5b93f1ab3500c5c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:209

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3e0b40d959aba1e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:244

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb0f5f659a50189f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:296

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dc0ce15170a91079 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:314

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e79b99714d1f032d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:345

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8ce8a1668a143152 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:398

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@google/gemini-cli-core

npm dependency

medium pii_flow dependency Excluded from app score #fe0680ed696e9079 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:691 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:676 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:691

      debugLogger.debug(
        `Failed to load credentials from ${keyFile}:`,
        getErrorMessage(error),
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #b250d084abbaedec — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:83 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:83

    console.log(`Found ${issues.length} issues.`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #d9b21b2d6a19a46e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:87 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:87

        console.log(`Skipping canonical issue #${issue.number}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5ff85ad44c6363f9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:91 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:91

      console.log(
        `Processing issue #${issue.number}: ${issue.title} (by @${issue.user?.login})`,
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #66b4819098d24440 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:104 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:104

          console.log(`Skipping issue #${issue.number}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #6cea801458bed896 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:136 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:136

          console.log(`  [DRY RUN] Would close issue #${issue.number}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #2661ff2585fd1300 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:139 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:139

        console.error(
          `  Failed to process issue #${issue.number}:`,
          error.message,
        );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #e85c3d590a664bad — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:170 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:170

        console.log(`Found original PR: #${originalPr}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #4b3cbd7f9f413e49 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:196 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:196

  console.log(`Release ref: ${releaseRef}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #4d3d3fbcf86034f8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:208 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:208

    console.log(`  - Release ref: ${releaseRef}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #2144963e3e35c895 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:241 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:241

      console.log(`Running command: gh ${args.join(' ')}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5e2c5eb75703753f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:254 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:254

    console.log('✅ Would trigger workflow with inputs:', {
      type: channel,
      dry_run: isDryRun.toString(),
      force_skip_tests: forceSkipTests.toString(),
      release_ref: releaseRef,
      original_pr: originalPr ? originalPr.toString() : '',
    });

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #69e45103ef7cb193 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:265 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:265

    console.log(`Commenting on original PR ${originalPr}...`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #8fefec01f7469be5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:324 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163 → /tmp/closeopen-i7n3rxzg/pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:324

      console.log('✅ Would post comment:', commentBody);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 2502 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #cd0bdf6e6f7059e2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/apply-issue-labels.cjs:61

  const effortRaw = process.env.LABELS_OUTPUT_EFFORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #26d141ef0176cd19 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/apply-issue-labels.cjs:62

  const standardRaw = process.env.LABELS_OUTPUT_STANDARD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f75bdd0c436e4ddc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/apply-issue-labels.cjs:63

  const genericRaw = process.env.LABELS_OUTPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cd31ef642ec7a047 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/cleanup-triage-labels.cjs:12

    const fileContent = fs.readFileSync('issues_to_cleanup.json', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e2b095d9c6556b74 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/gemini-lifecycle-manager.cjs:15

  const dryRun = process.env.DRY_RUN === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43c0f872a8a88773 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/sync-issue-types.cjs:88

    fs.writeFileSync(
      'no_type_issues.json',
      JSON.stringify(issuesNeedingAnalysis),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1652ad5d9714ea48 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/sync-maintainer-labels.cjs:32

  process.argv.includes('--dry-run') || process.env.DRY_RUN === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4d4bd619802b5b26 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/.github/scripts/sync-maintainer-labels.cjs:35

  auth: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #82041cabab53fa78 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/esbuild.config.js:97

      process.env.NODE_ENV || 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #89f76c4759079e14 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/esbuild.config.js:99

    'process.env.DEV': JSON.stringify(process.env.DEV || 'false'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f46a4f8594d31ed — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/esbuild.config.js:137

      process.env.NODE_ENV || 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eba4300decd701e3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/esbuild.config.js:156

      process.env.NODE_ENV || 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ad060c1f1efef15 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/esbuild.config.js:158

    'process.env.DEV': JSON.stringify(process.env.DEV || 'false'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f3d10bbbdb0d0259 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/esbuild.config.js:166

    if (process.env.DEV === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c0743b03b24661b4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/esbuild.config.js:167

      writeFileSync('./bundle/esbuild.json', JSON.stringify(metafile, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cbd22bafc152a03c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/answer-vs-act.eval.ts:37

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e4e5e46645156835 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/answer-vs-act.eval.ts:63

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #465dca9c3317190e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/answer-vs-act.eval.ts:88

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b7c7a9476b66c0f6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/answer-vs-act.eval.ts:113

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8da61bff5749a492 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/answer-vs-act.eval.ts:138

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c14120bedec9860 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/answer-vs-act.eval.ts:164

      const content = rig.readFile('app.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #de76ebc70057c3ec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/app-test-helper.ts:95

          await fs.promises.writeFile(logFile, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3c981b916083207 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_contract.eval.ts:112

    await fsp.writeFile(
      path.join(chatsDir, filename),
      JSON.stringify(conversation, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #85d69f5abf308448 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_contract.eval.ts:147

            await fsp.readFile(path.join(dir, fileName), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #88dcda3b589a1fb6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_contract.eval.ts:251

      await fsp.writeFile(
        path.join(inboxPrivate, 'extraction.patch'),
        preExistingPatch,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #feec4df3191e07e0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_modes.eval.ts:171

        const homeDir = process.env['GEMINI_CLI_HOME'] ?? os.homedir();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a317642d3c0216a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_modes.eval.ts:178

        await fs.writeFile(
          path.join(inboxDir, 'private', 'verify-memory.patch'),
          [
            `--- /dev/null`,
            `+++ ${privateTarget}`,
            `@@ -0,0 +1,3 @@`,
            `+# Project Memory Candidate`,
            `+`,
            `+Future agents should remember that this project verifies memory changes with \`npm run verify:memory\`.`,
            ``,
          ].join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa15bd412a2440f6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_modes.eval.ts:192

        await fs.writeFile(
          path.join(inboxDir, 'global', 'reply-style.patch'),
          [
            `--- /dev/null`,
            `+++ ${globalTarget}`,
            `@@ -0,0 +1,1 @@`,
            `+User prefers concise Chinese architecture plans.`,
            ``,
          ].join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7da3ae7f36678435 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_modes.eval.ts:308

  await fs.writeFile(
    sessionFilePath,
    [
      {
        sessionId,
        projectHash: 'auto-memory-eval',
        summary: 'Capture durable auto memory routing behavior',
        startTime: oldTimestamp,
        lastUpdated: oldTimestamp,
        kind: 'main',
      },
      ...messages,
    ]
      .map((record) => JSON.stringify(record))
      .join('\n') + '\n',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e4cd5c2a1122c1bc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_modes.eval.ts:346

    raw = await fs.readFile(statePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2677288d70fc150 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_modes.eval.ts:426

      await expect(fs.readFile(privatePatchPath, 'utf-8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f9082d864d5bc42c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/auto_memory_modes.eval.ts:429

      await expect(fs.readFile(globalPatchPath, 'utf-8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebb9dd0daee32c82 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/file_creation_behavior.eval.ts:37

      const indexContent = rig.readFile('src/index.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e2d1b9dfe5eda26 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/file_creation_behavior.eval.ts:40

      const pkgContent = rig.readFile('package.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8fed380bbb496ab0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/file_creation_behavior.eval.ts:44

      const loggerContent = rig.readFile('src/logger.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #be74fbc730a20a24 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/file_creation_behavior.eval.ts:105

      const configContent = rig.readFile('config.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b45c804b7247c2c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/file_creation_behavior.eval.ts:125

      const validatorContent = rig.readFile('src/auth/validator.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e8c0b4ad92731541 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/file_creation_behavior.eval.ts:126

      const typesContent = rig.readFile('src/auth/types.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1c95a9b2f64effd1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/generalist_agent.eval.ts:50

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #edf9e60ac29d7d14 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/redundant_casts.eval.ts:51

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d7e1ec15d1053c0e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/skill_extraction.eval.ts:320

    await fsp.writeFile(
      path.join(chatsDir, filename),
      JSON.stringify(conversation, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1478ed24bd00a850 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/skill_extraction.eval.ts:336

  const raw = await fsp.readFile(statePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6e84b70e45d26c32 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/skill_extraction.eval.ts:567

  await fsp.writeFile(outputPath, `${JSON.stringify(report, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9a0be437001d6918 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/skill_extraction.eval.ts:583

          await fsp.readFile(
            path.join(skillsDir, entry.name, 'SKILL.md'),
            'utf-8',
          ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3d5812a037332dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/skill_extraction.eval.ts:658

    process.env['SCRATCHPAD_STATS_TRIALS'] ?? '8',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #999eba4ca849b267 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/skill_extraction.eval.ts:860

  if (process.env['RUN_SCRATCHPAD_STATS'] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2a2bda433fb0917f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/subagents.eval.ts:69

  return fs.readFileSync(path.join(rig.testDir!, relativePath), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #63d42e6fc588b784 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/subtask_delegation.eval.ts:79

      const logicFile = rig.readFile('src/logic.ts');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d3b47e9be4ccd8b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/subtask_delegation.eval.ts:80

      const docFile = rig.readFile('docs/logic.md');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eef2eb8d61249f18 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.test.ts:63

    const logContent = fs
      .readFileSync(RELIABILITY_LOG, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c5a7602d8a28cd59 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.test.ts:126

    const logContent = fs
      .readFileSync(RELIABILITY_LOG, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #883db12a6a0ba26e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.test.ts:153

    const logContent = fs
      .readFileSync(RELIABILITY_LOG, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec198020ce27a358 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:30

  process.env['GEMINI_MODEL'] || PREVIEW_GEMINI_FLASH_MODEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bd271d250bb748c1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:129

        const originalGeminiHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e0fd6ce12a1250ef — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:130

        process.env['GEMINI_CLI_HOME'] = rig.homeDir!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #da8b0a712d5a6116 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:150

          fs.writeFileSync(
            path.join(chatsDir, filename),
            JSON.stringify(conversation, null, 2),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3071ceb89c0c2ddf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:160

            delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a1b68f613d52f9a7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:162

            process.env['GEMINI_CLI_HOME'] = originalGeminiHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fb781de22759f740 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:198

        await fs.promises.writeFile(stderrFile, rig._lastRunStderr);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ee2cd2ac3f08169f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:201

      await fs.promises.writeFile(
        logFile,
        JSON.stringify(rig.readToolLogs(), null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8f45d801349ee6a2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:245

    model: process.env['GEMINI_MODEL'] || 'unknown',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #42a3fe892569c691 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:289

    fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d0e6996576835720 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:319

    fs.writeFileSync(ackPath, JSON.stringify(acknowledgedAgents, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3105203b9bc1a3ba — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:348

  const targetSuiteType = process.env['EVAL_SUITE_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1297cf7e73c32c62 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:349

  const targetSuiteName = process.env['EVAL_SUITE_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f3ac86eee859e44c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/evals/test-helper.ts:363

    !process.env['RUN_EVALS'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ccfa43f3401413eb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tool_output_masking.eval.ts:65

      fs.writeFileSync(
        outputFilePath,
        `Some padding...\nThe secret key is: ${secretValue}\nMore padding...`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f4c4a5ed6347f9a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tool_output_masking.eval.ts:128

      fs.writeFileSync(sessionFile, JSON.stringify(conversation, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb8b8e66c2661847 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tool_output_masking.eval.ts:132

      fs.writeFileSync(
        path.join(settingsDir, 'trustedFolders.json'),
        JSON.stringify(
          {
            [path.resolve(rig.homeDir!)]: 'TRUST_FOLDER',
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e00f1ed5b240f3cd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tool_output_masking.eval.ts:201

      fs.writeFileSync(
        outputFilePath,
        `Full content containing ${secretValue}`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0971b832b043e26b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tool_output_masking.eval.ts:265

      fs.writeFileSync(sessionFile, JSON.stringify(conversation, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #09252e6c7710f973 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tool_output_masking.eval.ts:268

      fs.writeFileSync(
        path.join(settingsDir, 'trustedFolders.json'),
        JSON.stringify(
          {
            [path.resolve(rig.homeDir!)]: 'TRUST_FOLDER',
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #733fb9e577a788b4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tracker.eval.ts:74

      const loginContent = fs.readFileSync(
        path.join(rig.testDir!, 'src/login.js'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #be18735e7bd58de2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/tracker.eval.ts:113

      const loginContent = fs.readFileSync(
        path.join(rig.testDir!, 'src/login.js'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8de31c29cf8dd2c8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/evals/unsafe-cloning.eval.ts:45

    const content = rig.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6333814aa87510a0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/acp-env-auth.test.ts:51

      writeFileSync(
        join(projectDir, '.env'),
        'GEMINI_API_KEY=test-key-from-env\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3739a796325d333f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/acp-telemetry.test.ts:112

    expect(readFileSync(telemetryPath, 'utf-8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b02d8bd6f37fa43 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/browser-agent.test.ts:47

        `${process.env['LOCALAPPDATA'] ?? ''}\\Google\\Chrome\\Application\\chrome.exe`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ded9fcf94e50e227 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/browser-policy.test.ts:41

        `${process.env['LOCALAPPDATA'] ?? ''}\\Google\\Chrome\\Application\\chrome.exe`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d4ecd051179bf86 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/browser-policy.test.ts:97

      writeFileSync(
        trustedFoldersPath,
        JSON.stringify(trustedFolders, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e9ea164035e204c3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/browser-policy.test.ts:110

      writeFileSync(
        policyFile,
        `
[[rule]]
name = "Force confirm browser_agent"
toolName = "invoke_agent"
argsPattern = "\\"agent_name\\":\\\\s*\\"browser_agent\\""
decision = "ask_user"
priority = 200
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b876b5f9775bbf47 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/browser-policy.test.ts:126

          const settings = JSON.parse(readFileSync(settingsPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #68beb44e01530131 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/browser-policy.test.ts:132

          writeFileSync(settingsPath, JSON.stringify(settings, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b6d1784a64570113 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:33

    process.env['HOME'] = fakeHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7773a5ad69567730 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:34

    delete process.env['GIT_CONFIG_GLOBAL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30d928418102f000 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:35

    delete process.env['GIT_CONFIG_SYSTEM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0b401cbf84109a52 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:62

    await fs.writeFile(path.join(projectRoot, 'file1.txt'), 'version 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #87166ffbad3dc683 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:63

    await fs.writeFile(path.join(projectRoot, 'file2.txt'), 'permanent file');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4f562264ea73ce7d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:70

    await fs.writeFile(
      path.join(projectRoot, 'file1.txt'),
      'version 2 (BAD CHANGE)',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #33727d73893834a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:74

    await fs.writeFile(
      path.join(projectRoot, 'file3.txt'),
      'new file (SHOULD BE GONE)',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0ac74f57ab108b1d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:84

    const file1Content = await fs.readFile(
      path.join(projectRoot, 'file1.txt'),
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b61f091958df6b0e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:95

    const file2Content = await fs.readFile(
      path.join(projectRoot, 'file2.txt'),
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2d53da15f0f527ee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:115

    await fs.writeFile(globalConfigPath, globalConfigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c6dafcdf47ec0e4c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:118

    process.env['HOME'] = fakeHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #45d2417f6ab327a8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:121

    delete process.env['GIT_CONFIG_GLOBAL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #753e9ecb5671a386 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/checkpointing.test.ts:129

    await fs.writeFile(path.join(projectRoot, 'test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cff8bdc1e0d4066b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/clipboard-linux.test.ts:29

    fs.writeFileSync(dummyImagePath, Buffer.from(DUMMY_PNG_BASE64, 'base64'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b4ccaeb8a6d118ed — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/clipboard-linux.test.ts:59

        input: fs.readFileSync(dummyImagePath),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0874103a12fca2ec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/context-fidelity.test.ts:90

        fs.writeFileSync(
          filePath,
          mocks.map((m) => JSON.stringify(m)).join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0c02f3bcf5da5e17 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/context-fidelity.test.ts:110

      fs.writeFileSync(
        path.join(rig.testDir!, '.geminiignore'),
        'traces/\nresp*.json\ndebug.log\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #853c18eb1aa8f41f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/context-fidelity.test.ts:201

          return JSON.parse(fs.readFileSync(assetPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3f01fcbd75ae64e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/context-fidelity.test.ts:206

      const log1 = fs.readFileSync(traceLog, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b6887705aea1cff — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/context-fidelity.test.ts:227

      const log2 = fs.readFileSync(traceLog, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46a2df8d216caf11 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/extensions-install.test.ts:34

    writeFileSync(testServerPath, extension);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #49ebbb11b6910ae1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/extensions-install.test.ts:48

      writeFileSync(testServerPath, extensionUpdate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c1a0b9897047ad7d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/extensions-reload.test.ts:48

    writeFileSync(testServerPath, safeJsonStringify(extension, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1cf95fee09363547 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/extensions-reload.test.ts:70

    writeFileSync(testServerPath, safeJsonStringify(extension, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b19a80eeb8045ef3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/file-system.test.ts:88

    const fileContent = rig.readFile('test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7a6025a11c9b68e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/file-system.test.ts:111

    if (process.env['VERBOSE'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ba3d9f6683833e54 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/file-system.test.ts:136

    const newFileContent = rig.readFile(fileName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0a861090157e0e5f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/file-system.test.ts:174

    const newFileContent = rig.readFile(fileName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ec0de9df30e77d2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/file-system.test.ts:218

    const newFileContent = rig.readFile(fileName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b555e0255443aa5c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:8

if (process.env['NO_COLOR'] !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f38bdcd3d1357a6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:9

  delete process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce3d90a815172ea7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:53

        const content = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7844d37bd4e6b516 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:103

  process.env['TEST_FIXTURE_PORT'] = String(port);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffd2c79bf98deb8a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:123

  process.env['INTEGRATION_TEST_FILE_DIR'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08165609384c287f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:125

  if (process.env['KEEP_OUTPUT']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d960968adb8f12a5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:128

  process.env['VERBOSE'] = process.env['VERBOSE'] ?? 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f439608a8c5a5e6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/globalSetup.ts:148

  if (process.env['KEEP_OUTPUT'] !== 'true' && runDir) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b36ef6d721e204ce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-agent-flow.test.ts:52

      writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6925ee08a62a6d5f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-agent-flow.test.ts:255

      const countsRaw = rig.readFile('message-counts.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f8cf803226cbeb21 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:223

        const fileContent = rig.readFile('approved.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fd886674cb7205f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:328

        writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #80a0843300730a4c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:390

        const modifiedContent = rig.readFile('tail-called-file.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #69fe5d4b449ab914 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:1021

        const fileContent = rig.readFile('input-test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #adac5126c86b5130 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:1174

        const fileContent = rig.readFile('multi-event-test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aacb02da7fc587f8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:1226

        writeFileSync(failingPath, 'process.exit(1);');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5a2965f329231e04 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:1228

        writeFileSync(
          workingPath,
          "console.log(JSON.stringify({decision: 'allow', reason: 'Working hook succeeded'}));",
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec7983512da776b9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:1273

        const fileContent = rig.readFile('error-test.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c511c7b29cece2ed — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:1890

        const isCI = process.env['CI'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a4bc2db691f1dd52 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:2175

        const modifiedContent = rig.readFile('modified.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a90a29ad870858bf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:2181

          rig.readFile('original.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #848b950c38eaaa87 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:2299

          writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f87652ac590bb200 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:2338

          writeFileSync(
            join(stateDir, 'state.json'),
            JSON.stringify({
              terminalSetupPromptShown: true,
              hasSeenScreenReaderNudge: true,
              tipsShown: 100,
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #08b864ad27a6d054 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:2376

          const fileContent = rig.readFile('approved.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f2f9f7043d9e5a2d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:2403

          writeFileSync(scriptPath, hookScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2f8074340cea2c55 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/hooks-system.test.ts:2441

          writeFileSync(
            join(stateDir, 'state.json'),
            JSON.stringify({
              terminalSetupPromptShown: true,
              hasSeenScreenReaderNudge: true,
              tipsShown: 100,
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d1d7ebc7e8e90cae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/mcp-resources.test.ts:36

    fs.writeFileSync(join(userGeminiDir, 'projects.json'), '{"projects":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #89cf19f39d1fc01c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/mcp-resources.test.ts:81

    fs.writeFileSync(scriptPath, scriptContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12d2ebd489c1ad36 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/mcp-resources.test.ts:105

    fs.writeFileSync(join(userGeminiDir, 'projects.json'), '{"projects":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #230d85fe504405fa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/mcp-resources.test.ts:167

    fs.writeFileSync(scriptPath, scriptContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #39c24ebb22b0431c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/mcp_server_cyclic_schema.test.ts:192

    writeFileSync(testServerPath, serverScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2bd79cd8e6ad7531 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/parallel-tools.test.ts:59

      fs.writeFileSync('pty_output_failure.txt', run.output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e114ae79cbc59d48 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/parallel-tools.test.ts:79

    expect(fs.readFileSync(join(rig.testDir!, 'output.txt'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5bda48e0a253cba8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/plan-mode.test.ts:258

    writeFileSync(
      join(rig.homeDir!, GEMINI_DIR, 'state.json'),
      JSON.stringify({ terminalSetupPromptShown: true }, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a2a7fec34b8aa31 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/plan-mode.test.ts:265

    writeFileSync(join(fullPlansDir, planFilename), 'Execute echo hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f0dd31e314e867c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/policy-headless.test.ts:209

    process.env['REGENERATE_MODEL_GOLDENS'] === 'true' ? 120000 : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #618bf26e47fe4b34 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/replace.test.ts:36

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ae26e086bba48920 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/replace.test.ts:58

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b9db339c0ff08f85 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/replace.test.ts:78

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f2569c10d5f2e21d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/replace.test.ts:99

    expect(rig.readFile(fileName)).toBe(expectedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cfcf901adf477f83 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/resume-gc.test.ts:74

      fs.writeFileSync(
        filePath,
        mocks.map((m) => JSON.stringify(m)).join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1eae4138a2efa682 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/resume-gc.test.ts:145

    const traces = fs.readFileSync(traceLog, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #06cc5a0cbebb099a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/ripgrep-real.test.ts:68

    await fs.writeFile(path.join(tempDir, 'file1.txt'), 'hello world\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #327bc70d02d60f75 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/ripgrep-real.test.ts:70

    await fs.writeFile(
      path.join(tempDir, 'subdir', 'file2.txt'),
      'hello universe\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #083b0ce09702f9d4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/ripgrep-real.test.ts:74

    await fs.writeFile(path.join(tempDir, 'file3.txt'), 'goodbye moon\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #579e01739e3e53bd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/ripgrep-real.test.ts:111

    await fs.writeFile(
      path.join(tempDir, 'script.js'),
      'console.log("hello");\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #da20d6d13460cd4b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/ripgrep-real.test.ts:131

    await fs.writeFile(
      path.join(tempDir, 'context.txt'),
      'line1\nline2\nline3 match\nline4\nline5\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c3f2e26c073b2df0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/run_shell_command.test.ts:528

    process.env[varName] = varValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bb850e4f0042ebc1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/run_shell_command.test.ts:554

      delete process.env[varName];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5fbd64b6b1cbc15f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/simple-mcp-server.test.ts:197

    writeFileSync(testServerPath, serverScript);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5814b1274a43801f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/skill-creator-scripts.test.ts:68

    let content = fs.readFileSync(path.join(skillDir, 'SKILL.md'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #65f06d3c61a19324 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/skill-creator-scripts.test.ts:72

    fs.writeFileSync(path.join(skillDir, 'SKILL.md'), content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4a62d5b08b66d10c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/skill-creator-scripts.test.ts:76

    let scriptContent = fs.readFileSync(exampleScriptPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #13e9ced5818a5aa2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/skill-creator-scripts.test.ts:78

    fs.writeFileSync(exampleScriptPath, scriptContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e670776928dd6c85 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/skill-creator-vulnerabilities.test.ts:97

    let content = fs.readFileSync(skillMd, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3ae8b9e826f74be0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/skill-creator-vulnerabilities.test.ts:99

    fs.writeFileSync(skillMd, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf96a2039c4a20b3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/symlink-install.test.ts:61

      writeFileSync(join(realExtPath, 'gemini-extension.json'), extension);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ff219a202e60bf69 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/symlink-install.test.ts:68

      writeFileSync(
        join(maliciousExtPath, 'gemini-extension.json'),
        otherExtension,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e082e1269780805b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/symlink-install.test.ts:118

        readFileSync(trustedFoldersPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c9487427dc3bb1b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/test-helper.ts:10

export const skipFlaky = !process.env['RUN_FLAKY_INTEGRATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #35dddb4908a5802d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/test-mcp-support.test.ts:41

    fs.writeFileSync(join(userGeminiDir, 'projects.json'), '{"projects":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca00fc5c165f1bee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/user-policy.test.ts:33

    fs.writeFileSync(
      join(userPoliciesDir, 'allowed-tools.toml'),
      `
[[rule]]
toolName = "run_shell_command"
commandPrefix = "ls -F"
decision = "allow"
priority = 100
      `,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2cc89fd7ba1544c0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/utf-bom-encoding.test.ts:67

    writeFileSync(join(rig.testDir!, filename), content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #16c3dcda8a138d1b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/integration-tests/write_file.test.ts:58

    const newFileContent = rig.readFile(newFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #552d030c2df19f54 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/integration-tests/write_file.test.ts:76

    if (process.env['VERBOSE'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d83222b380dda3c0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:23

  process.env['HOME'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #798942d5a5eed03b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:25

    process.env['USERPROFILE'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1cb46f9f5dbcfa1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:27

  process.env['GEMINI_CONFIG_DIR'] = join(runDir, '.gemini');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ecde577e543bfb3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:53

  process.env['INTEGRATION_TEST_FILE_DIR'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6741cb8cf40a280 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:54

  process.env['GEMINI_CLI_INTEGRATION_TEST'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #365d97c8f00e9b2d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:55

  process.env['GEMINI_FORCE_FILE_STORAGE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bc72b031bc4fa4a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:56

  process.env['TELEMETRY_LOG_FILE'] = join(runDir, 'telemetry.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c0e62cc5cf78cf0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:57

  process.env['VERBOSE'] = process.env['VERBOSE'] ?? 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36f79a721a85e34f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/globalSetup.ts:64

  if (process.env['KEEP_OUTPUT'] !== 'true' && runDir) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c71c33f244ed1853 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/memory-tests/memory-usage.test.ts:23

const UPDATE_BASELINES = process.env['UPDATE_MEMORY_BASELINES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d650b23342e2cda5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/memory-tests/memory-usage.test.ts:372

  const session = JSON.parse(readFileSync(sourceSessionPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1862a819e142336 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:669

      const currentContent = await fs.readFile(resolvedPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efe0c7d99a6f896e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:740

            await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a80ab4341cf49445 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:996

      const gcpProject = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd0ede5d0fd500c4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:997

      const gcpCreds = process.env['GOOGLE_APPLICATION_CREDENTIALS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d01c0df265bdb541 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:999

        delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f225fcf848798ff6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:1000

        delete process.env['GOOGLE_APPLICATION_CREDENTIALS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2ba57a20a6f6051 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:1038

          process.env['GOOGLE_CLOUD_PROJECT'] = gcpProject;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99fc042f0f0e8d7a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/agent/task.ts:1041

          process.env['GOOGLE_APPLICATION_CREDENTIALS'] = gcpCreds;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #48f96f6c5380a069 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/commands/init.test.ts:63

    process.env['CODER_AGENT_WORKSPACE_PATH'] = mockWorkspacePath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a7bd8be7e281fcc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/commands/init.ts:83

    fs.writeFileSync(geminiMdPath, '', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a9da0070cbc12f7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/commands/init.ts:93

      workspacePath: process.env['CODER_AGENT_WORKSPACE_PATH']!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52a9d8921a75e578 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/commands/init.ts:139

      process.env['CODER_AGENT_WORKSPACE_PATH']!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3aa2d1e68ba7301 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/commands/restore.ts:57

        data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fac5e4bf80707a5e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/commands/restore.ts:131

        const data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3255e003827290f2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:37

const INITIAL_FOLDER_TRUST = process.env['GEMINI_FOLDER_TRUST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #696a6e29c3643c28 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:49

    process.env['GEMINI_FOLDER_TRUST'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e05274fa44f4f1df — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:51

  let checkpointing = process.env['CHECKPOINTING']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #835ad3120505b240 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:52

    ? process.env['CHECKPOINTING'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7a870e65c395c78 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:65

    process.env['GEMINI_YOLO_MODE'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98cbf947fe3eb203 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:94

    debugMode: process.env['DEBUG'] === 'true' || false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec21205b989e5eb7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:110

        process.env['OTEL_EXPORTER_OTLP_ENDPOINT'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0df794b9f963753 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:122

        ...(process.env['CUSTOM_IGNORE_FILE_PATHS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2545a0d16ee230d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:123

          ? process.env['CUSTOM_IGNORE_FILE_PATHS'].split(path.delimiter)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a736269ee316d33 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:199

    process.env['CODER_AGENT_WORKSPACE_PATH'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60531003a8d97544 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:264

  if (process.env['USE_CCPA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c65e0d1264fba8a8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:279

        process.env['GEMINI_CLI_USE_COMPUTE_ADC'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70800c1df83fb806 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:308

      `[${logPrefix}] GOOGLE_CLOUD_PROJECT: ${process.env['GOOGLE_CLOUD_PROJECT']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4edaecbdae7fd0c1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/config.ts:310

  } else if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8852576417ef950c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/extension.ts:95

    const configContent = fs.readFileSync(configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #683fdf6b8e2ecbc1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/extension.ts:144

    const configContent = fs.readFileSync(metadataFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #08e2896059af76c8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:110

    fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(settings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a8f677774b8ee04b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:125

    fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(settings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c69c706661a90d4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:139

    fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #06785756a32b88ee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:151

    fs.writeFileSync(workspaceSettingsPath, JSON.stringify(workspaceSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #64e60471f04811cc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:165

      fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #38d4a7439e986930 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:172

      fs.writeFileSync(
        workspaceSettingsPath,
        JSON.stringify(workspaceSettings),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #788f7cc3188a0de3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:188

      fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cab79004d1ba8032 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:195

      fs.writeFileSync(
        workspaceSettingsPath,
        JSON.stringify(workspaceSettings),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e30444259bbf8c6c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:213

      fs.writeFileSync(USER_SETTINGS_PATH, JSON.stringify(userSettings));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e650f1ee873382d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.test.ts:224

      fs.writeFileSync(
        workspaceSettingsPath,
        JSON.stringify(workspaceSettings),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a49aaa126db397e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.ts:85

      const userContent = fs.readFileSync(USER_SETTINGS_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15d96e7c01a1100f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/config/settings.ts:119

        const projectContent = fs.readFileSync(workspaceSettingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #45120b356bf78689 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.test.ts:1062

      delete process.env['CODER_AGENT_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ad50bf25b285988 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.test.ts:1082

      delete process.env['CODER_AGENT_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74c7b6f7777ebc00 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.test.ts:1104

      process.env['CODER_AGENT_WORKSPACE_PATH'] = '/tmp/test-workspace';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f494d63a0663ba92 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.ts:149

      if (!process.env['CODER_AGENT_WORKSPACE_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c668f96dde40eb76 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.ts:228

    const bucketName = process.env['GCS_BUCKET_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db918b99fa818ba7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.ts:388

    const port = Number(process.env['CODER_AGENT_PORT'] || 0);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d139d1f590bb2e83 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.ts:393

      if (process.env['CODER_AGENT_PORT']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe53737ac42f46b2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/app.ts:394

        actualPort = process.env['CODER_AGENT_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #024359ed18b68887 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/http/server.ts:23

  process.env['NODE_ENV'] !== 'test'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c3860eb52f2f66ce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/a2a-server/src/persistence/gcs.test.ts:71

        actualFs.writeFileSync(file, Buffer.from('dummy tar content'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #259cba7608f06d67 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/index.ts:57

      process.env['GEMINI_CLI_HOME'] || join(os.homedir(), '.gemini');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bf52b3c89a55719 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/index.ts:85

  if (!process.env['GEMINI_CLI_NO_RELAUNCH'] && !process.env['SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86877e0e55b9f996 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/index.ts:175

        if (!process.env['NO_COLOR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e08beacd75978f1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/acpSessionManager.ts:73

      (authDetails.baseUrl || process.env['GOOGLE_GEMINI_BASE_URL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce10b98bf5dd48ad — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/acpSessionManager.ts:239

      (authDetails.baseUrl || process.env['GOOGLE_GEMINI_BASE_URL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5118c6fbc2c5a8b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/about.ts:29

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c78b2a53d99ee570 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/about.ts:30

      sandboxEnv = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16241da65d9c8b32 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/about.ts:31

    } else if (process.env['SANDBOX'] === 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b7d07f02f85e62b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/about.ts:33

        process.env['SEATBELT_PROFILE'] || 'unknown'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40ba842dcb24f4d9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/about.ts:40

    const gcpProject = process.env['GOOGLE_CLOUD_PROJECT'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #115739a440190662 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/init.ts:40

        fs.writeFileSync(geminiMdPath, '', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59658d85c8c53d50 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/restore.ts:57

        data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09e34758a467f487 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/acp/commands/restore.ts:147

        const data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #c4afe0ce348518eb — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/extensions/examples/mcp-server/example.js:23

    const apiResponse = await fetch(
      'https://jsonplaceholder.typicode.com/posts',
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #3c76090fb8c22723 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/extensions/new.ts:65

    await writeFile(
      join(args.path, 'gemini-extension.json'),
      JSON.stringify(manifest, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1b98d17d0e9083d4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/logs.test.ts:78

    await fs.promises.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbd218e31d16be48 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/logs.test.ts:91

    await fs.promises.writeFile(filePath, 'line-1\nline-2\n', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1884fcfb495603b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/platform.ts:140

    const response = await fetch(
      `http://localhost:${port}/${LITERT_API_VERSION}/models/${GEMMA_MODEL_NAME}:generateContent`,
      { method: 'POST', signal: controller.signal },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #bff39f1549e97f1b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/platform.ts:191

    const content = fs.readFileSync(pidPath, 'utf-8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc6cdd89cbca6671 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/platform.ts:210

  fs.writeFileSync(getPidFilePath(), JSON.stringify(processInfo), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9393670c580e8a0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/platform.ts:228

      const output = fs.readFileSync(`/proc/${pid}/cmdline`, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fe1ee325bc434f9b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/setup.test.ts:37

    await fs.promises.writeFile(filePath, 'hello world', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #10d74cdefeddb4e3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/setup.test.ts:50

    await fs.promises.writeFile(filePath, 'hello world', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f779e086fdd4037f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/gemma/setup.ts:77

  const response = await fetch(url, { redirect: 'follow' });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #09a349fae5a68249 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/hooks/migrate.ts:188

      const content = fs.readFileSync(claudeLocalSettingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14820868776f3094 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/hooks/migrate.ts:202

      const content = fs.readFileSync(claudeSettingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #01ee305a59f9d32a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:150

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d8ca1562e3fd8d5c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:157

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1e698333a9065ffb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:183

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ed25ec24c2f78ea2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:190

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #71be045a5fc25788 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:208

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e6d0d253e41bbecb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:215

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #15575229c56004d0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:244

      fs.writeFileSync(settingsPath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43862316d753a621 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/commands/mcp/remove.test.ts:251

      const updatedContent = fs.readFileSync(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5befa2174257f46 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/auth.ts:22

    const key = process.env['GEMINI_API_KEY'] || (await loadApiKey());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5c6dea7edcab303 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/auth.ts:34

      !!process.env['GOOGLE_CLOUD_PROJECT'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d82ece8245ed1d9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/auth.ts:35

      !!process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58c14f0e942f181b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/auth.ts:36

    const hasGoogleApiKey = !!process.env['GOOGLE_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #a5d5543cd69279eb — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.integration.test.ts:63

    server.resetHandlers(http.post(CLEARCUT_URL, () => HttpResponse.text()));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #ea0a539e781e1a7b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:140

      if (process.env['VITEST'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #37335954db9911e0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:149

        process.env['CI'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d5a71d399d048d2b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:150

        process.env['GITHUB_ACTIONS'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ee494fbecf90284a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:167

const originalGeminiModel = process.env['GEMINI_MODEL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa666469335560fd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:172

  delete process.env['GEMINI_MODEL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #06b186d4cd3e0696 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:195

    process.env['GEMINI_MODEL'] = originalGeminiModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #98a3a0da7d15d36a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:197

    delete process.env['GEMINI_MODEL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fd442f4136d9d784 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:890

        originalProxyEnv[key] = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #75b1096c911d204b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:891

        delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b51ff94ccd3005b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:898

          process.env[key] = originalProxyEnv[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46c0ae85a505d34c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:900

          delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ce6394c130f55814 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:1952

    originalVitest = process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebb4b85048061b84 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:1953

    originalIntegrationTest = process.env['GEMINI_CLI_INTEGRATION_TEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f5b7614b067bc6b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:1954

    delete process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c835503fa20a99f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:1955

    delete process.env['GEMINI_CLI_INTEGRATION_TEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f5979529928a1b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:1960

      process.env['VITEST'] = originalVitest;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #57e991440634d063 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.test.ts:1963

      process.env['GEMINI_CLI_INTEGRATION_TEST'] = originalIntegrationTest;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d7e4e418163f345 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:516

      process.env['GEMINI_CLI_TRUST_WORKSPACE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27cdaaaa025a7f4d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:566

    [process.env['DEBUG'], process.env['DEBUG_MODE']].some(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2f0e6c1f947db6c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:600

    process.env['GEMINI_SANDBOX'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25bf9f963dbfffe5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:608

    process.env['GEMINI_CLI_INTEGRATION_TEST'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b103aeef2883603 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:609

    process.env['VITEST'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c54bd84a4ed2ec26 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:644

  const ideWorkspacePath = process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac1fcd56ccbb0dae — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:682

    process.env['GEMINI_CLI_EXTENSION_REGISTRY_URI'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60cdfd4e91a1c0fa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:843

    argv.model || process.env['GEMINI_MODEL'] || settings.model?.name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a786564294f9563c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:929

      (ide.name !== 'vscode' || process.env['TERM_PROGRAM'] === 'vscode')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19d731205851dea3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:1028

      process.env['HTTPS_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6cae41d08cac2f1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:1029

      process.env['https_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1aa14c5d1a8fa06d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:1030

      process.env['HTTP_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #264b1cd19e0c50d0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:1031

      process.env['http_proxy'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5de8d7b096b8919e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/config.ts:1063

    noBrowser: !!process.env['NO_BROWSER'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b20a183f4a11a9b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-agents.test.ts:89

    fs.writeFileSync(
      path.join(agentsDir, 'test-agent.md'),
      '---\nname: test-agent\nkind: local\ndescription: test desc\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74b3a92d3388545f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-agents.test.ts:124

    fs.writeFileSync(
      path.join(agentsDir, 'bad-agent.md'),
      '---\nname: bad-agent\nkind: local\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7b0d674a239340fe — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-hydration.test.ts:107

    fs.writeFileSync(
      path.join(skillSubdir, 'SKILL.md'),
      `---
name: my-skill
description: test
---
Use key: \${MY_API_KEY}
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2db419d330b42a9e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-hydration.test.ts:157

    fs.writeFileSync(
      path.join(agentsDir, 'my-agent.md'),
      `---
name: my-agent
description: test
---
System using model: \${MODEL_NAME}
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #091a6f726d9cba40 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-hydration.test.ts:213

    fs.writeFileSync(
      path.join(hooksDir, 'hooks.json'),
      JSON.stringify({
        hooks: {
          BeforeTool: [
            {
              hooks: [
                {
                  type: 'command',
                  command: 'echo $HOOK_CMD',
                },
              ],
            },
          ],
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #623b7adbe3add9d3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-hydration.test.ts:288

    fs.writeFileSync(
      path.join(skillSubdir, 'SKILL.md'),
      '---\nname: my-skill\ndescription: test\n---\nValue is: ${MY_VALUE}',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b7a2ebd4d7258f5e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-permissions.test.ts:50

    fs.writeFileSync(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f84d020756afe182 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-permissions.test.ts:57

    expect(() => fs.writeFileSync(filePath, 'fail')).toThrow();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebe2c41475249378 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-permissions.test.ts:72

    fs.writeFileSync(destFilePath, 'writable');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6b9319c01b741c5d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-permissions.test.ts:73

    expect(fs.readFileSync(destFilePath, 'utf-8')).toBe('writable');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df6f1f20c87f41ab — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-permissions.test.ts:85

    fs.writeFileSync(filePath, 'nested content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b3a5032b6ed4e766 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-permissions.test.ts:109

    fs.writeFileSync(symlinkTarget, 'external content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eb09106041208889 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-scope.test.ts:75

    fs.writeFileSync(
      path.join(extensionDir, 'gemini-extension.json'),
      JSON.stringify(extensionConfig),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4fe4a87cdcac55de — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-scope.test.ts:85

    fs.writeFileSync(
      path.join(extensionDir, 'install-metadata.json'),
      JSON.stringify(installMetadata),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b4845cbc6dfb2501 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-scope.test.ts:100

    fs.writeFileSync(userSettingsPath, 'TEST_SETTING=user-value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d8f6c92da8520cee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-scope.test.ts:104

    fs.writeFileSync(workspaceSettingsPath, 'TEST_SETTING=workspace-value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43437b9f83ad7463 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-scope.test.ts:141

    fs.writeFileSync(userSettingsPath, 'TEST_SETTING=user-value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9943cb3c64de4bec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-skills.test.ts:103

    fs.writeFileSync(path.join(skillsDir, 'not-a-skill.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #11754d668582bfcc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-skills.test.ts:130

    fs.writeFileSync(path.join(skillsDir, 'not-a-skill.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b2e1698d5fb52c8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-skills.test.ts:177

    fs.writeFileSync(
      path.join(skillSubdir, 'SKILL.md'),
      '---\nname: test-skill\ndescription: test desc\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9c85c97dba1ce4b4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-themes.spec.ts:49

    process.env['GEMINI_CLI_HOME'] = tempHomeDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9a0a9322b6c46e89 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager-themes.spec.ts:73

    delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a25abaa6c3919f28 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:171

      fs.writeFileSync(path.join(ext1Dir, 'gemini-extension.json'), config);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #de0eca8e23844de4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:172

      fs.writeFileSync(
        path.join(ext1Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext1Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1c2ffcf999b10f9e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:177

      fs.writeFileSync(path.join(ext2Dir, 'gemini-extension.json'), config);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f34796c73a9fedda — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:178

      fs.writeFileSync(
        path.join(ext2Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext2Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8bb3dafa8a9bf755 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:204

      fs.writeFileSync(
        path.join(externalDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext2', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #deaaf6f5ca14b19e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:208

      fs.writeFileSync(
        path.join(externalDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: externalDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f060e2ebdb02d49a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:239

      fs.writeFileSync(
        path.join(extensionDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'test-ext', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c9e0af9f8f1d677a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:393

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: oldName, version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f2124a031e4288b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:397

      fs.writeFileSync(
        path.join(extDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: extDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9e60b919240bd381 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:408

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: newName, version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2b57e4ef5eea356 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:412

      fs.writeFileSync(
        path.join(newSourceDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: newSourceDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #18e09aefd1505872 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:438

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: oldName, version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6e563aa45f2bf7d5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:442

      fs.writeFileSync(
        path.join(extDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: extDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fae4a2462d7ab790 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:458

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: newName, version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c09204cc5aac2440 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:462

      fs.writeFileSync(
        path.join(newSourceDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: newSourceDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4e81dbae6201c638 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:482

      fs.writeFileSync(
        path.join(ext1Dir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext1', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6bb4350eae01ce82 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:486

      fs.writeFileSync(
        path.join(ext1Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext1Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af3bf1e482bdd165 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:493

      fs.writeFileSync(
        path.join(ext2Dir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext2', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b9f6ecd316043d6a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:497

      fs.writeFileSync(
        path.join(ext2Dir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: ext2Dir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #11da45e983ed1d51 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:508

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'ext2', version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #681f821fc5a524cf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:512

      fs.writeFileSync(
        path.join(newSourceDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: newSourceDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #492200bfc605bc5e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:532

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: 'integrity-ext', version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #396776efb4667f31 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:556

      fs.writeFileSync(
        path.join(extDir, 'gemini-extension.json'),
        JSON.stringify({ name: extName, version: '1.0.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #217f9e0f15b070f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:560

      fs.writeFileSync(
        path.join(extDir, 'metadata.json'),
        JSON.stringify({ type: 'local', source: extDir }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5137b61ec3235b16 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.test.ts:580

      fs.writeFileSync(
        path.join(newSourceDir, 'gemini-extension.json'),
        JSON.stringify({ name: extName, version: '1.1.0' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #169050fe0125983b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.ts:442

        await fs.promises.writeFile(metadataPath, metadataString);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #216db1c43235cdb5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.ts:1023

      const configContent = await fs.promises.readFile(configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a5b583882407d32 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension-manager.ts:1061

      const hooksContent = await fs.promises.readFile(hooksFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d782255e356df8d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:373

      fs.writeFileSync(path.join(sourceExtDir, 'context.md'), 'linked context');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1aeba8890f0ed182 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:419

      fs.writeFileSync(
        path.join(policiesDir, 'policies.toml'),
        policiesContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f9d5c2117443929 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:473

      fs.writeFileSync(
        path.join(policiesDir, 'policies.toml'),
        policiesContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7aafb4f749da81d3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:536

      process.env['TEST_API_KEY'] = 'test-api-key-123';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5ae5119773e170cd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:537

      process.env['TEST_DB_URL'] = 'postgresql://localhost:5432/testdb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27a06d184ba54bc8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:566

        fs.writeFileSync(configPath, JSON.stringify(extensionConfig));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #23ea9219d20521b6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:584

        delete process.env['TEST_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a9ce082a4b29394 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:585

        delete process.env['TEST_DB_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bfdf95a5ab03373d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:614

      fs.writeFileSync(envFilePath, 'MY_API_KEY=test-key-from-file\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ecc0694bf003ee17 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:651

      fs.writeFileSync(
        path.join(extDir, EXTENSIONS_CONFIG_FILENAME),
        JSON.stringify(extensionConfig),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fec0fcfdc9fb7fc5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:682

      fs.writeFileSync(badConfigPath, '{ "name": "bad-ext"'); // Malformed

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f61b15fa4040c5ee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:713

      fs.writeFileSync(badConfigPath, JSON.stringify({ version: '1.0.0' }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a86391ccce6c840f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1052

        fs.writeFileSync(
          path.join(hooksDir, 'hooks.json'),
          JSON.stringify(hooksConfig),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #60b4b400a65c6ab8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1088

        fs.writeFileSync(
          path.join(hooksDir, 'hooks.json'),
          JSON.stringify({ hooks: { BeforeTool: [] }, enabled: false }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #259f02c0be33863e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1121

        fs.writeFileSync(
          path.join(hooksDir, 'hooks.json'),
          JSON.stringify({ hooks: {} }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #17a7572f8585198a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1126

        fs.writeFileSync(
          path.join(sourceExtDir, 'gemini-extension.json'),
          JSON.stringify({
            name: 'hook-extension-install',
            version: '1.0.0',
          }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d385cbd05f6f499c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1167

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a001e38f72094ba — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1216

      fs.writeFileSync(configPath, '{ "name": "bad-json", "version": "1.0.0"'); // Malformed JSON

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b9f65c1cf934d271 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1236

      fs.writeFileSync(configPath, JSON.stringify({ version: '1.0.0' }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3a7abe7cc53e6452 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1258

        fs.writeFileSync(
          path.join(mockGit.path(), destination, EXTENSIONS_CONFIG_FILENAME),
          JSON.stringify({ name: extensionName, version: '1.0.0' }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b8c953ad423c3b8c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1278

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c453146feea4fac — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1308

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7d7eade492d02694 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1441

        fs.readFileSync(trustedFoldersPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0ca311bfa50c1db1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1617

      const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dda0ddbafea443e9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1739

      let envContent = fs.readFileSync(envPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e5e0865096e69383 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1780

      envContent = fs.readFileSync(envPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #25d72c1c32cb2314 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1864

          fs.writeFileSync(
            path.join(mockGit.path(), destination, EXTENSIONS_CONFIG_FILENAME),
            JSON.stringify({ name: extensionName, version: '1.0.0' }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c9007c597dcb0e9b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1904

        const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b47328907ad4ae39 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1939

        const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #73e906ab3caa0939 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.test.ts:1995

        const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dc1ef03b69c7e69 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extension.ts:62

    const configContent = fs.readFileSync(metadataFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8955bb2a5b317e55 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensionRegistryClient.ts:135

          const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #500e39db85606c16 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/consent.test.ts:344

        await fs.writeFile(path.join(skill1Dir, 'SKILL.md'), 'body1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30397c800d283ac4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/consent.test.ts:345

        await fs.writeFile(path.join(skill1Dir, 'extra.txt'), 'extra');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8da02778af519c7f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/consent.test.ts:346

        await fs.writeFile(path.join(skill2Dir, 'SKILL.md'), 'body2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f8e035e4e4182d9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/consent.test.ts:427

      await fs.writeFile(path.join(skill1Dir, 'SKILL.md'), 'body1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cc70294658b7b3d8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionEnablement.test.ts:185

      fs.writeFileSync(configPath, 'not a json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2379cac8d63755f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionEnablement.ts:182

      const content = fs.readFileSync(this.configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfc8ef123c206a77 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionEnablement.ts:208

    fs.writeFileSync(this.configFilePath, JSON.stringify(config, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #527859eceae8cf96 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:190

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #77f282d589bb5470 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:223

      await fsPromises.writeFile(envPath, 'VAR1=previous-VAR1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fd6dfcb82007a81b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:234

      const actualContent = await fsPromises.readFile(envPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bdb4b1d3803afe21 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:304

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5bb9bb91008aef8f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:339

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9d425d519fb71292 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:375

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #56f5a9b65afbc65b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:397

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6821d12dbc2b907e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:551

      await fsPromises.writeFile(userEnvPath, 'VAR1=user-value1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a7cd96e37802ed69 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:575

      await fsPromises.writeFile(workspaceEnvPath, 'VAR1=workspace-value1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #26a2e1f2bf5d1e17 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:633

      await fsPromises.writeFile(
        userEnvPath,
        'VAR1=user-value1\nVAR3=user-value3',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa90b14af4e2a1d0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:647

      await fsPromises.writeFile(workspaceEnvPath, 'VAR1=workspace-value1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #55d55148e292fcc7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:680

      await fsPromises.writeFile(userEnvPath, 'VAR1=value1\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c32a296502cf424a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:701

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #073e60a1a81707c3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:718

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eb6a6dbb3e02e9af — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:785

      await fsPromises.writeFile(workspaceEnvPath, originalEnvContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fc96b7409ddee487 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:799

      const actualContent = await fsPromises.readFile(
        workspaceEnvPath,
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2b07008121d36648 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:845

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f07099e24928a31 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:916

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #281fe66169b9b677 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.test.ts:933

      const actualContent = await fsPromises.readFile(expectedEnvPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #663822e8f584aa30 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.ts:138

  await fs.writeFile(envFilePath, envContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ffef3950f483595 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.ts:188

      const envFile = fsSync.readFileSync(envFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e39739999a88eba — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.ts:286

    envContent = await fs.readFile(envFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed2b71cd347cea18 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.ts:308

  await fs.writeFile(envFilePath, newEnvContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c63a1daec984b0e3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/extensionSettings.ts:352

      await fs.writeFile(envFilePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7082fde13dd365c9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github.ts:534

    https
      .get(url, { headers }, (res) => {
        if (res.statusCode === 302 || res.statusCode === 301) {
          if (redirectCount >= 10) {
            return reject(new Error('Too many redirects'));
          }

          if (!res.headers.location) {
            return reject(
              new Error('Redirect response missing Location header'),
            );
          }
          downloadFile(res.headers.location, dest, options, redirectCount + 1)
            .then(resolve)
            .catch(reject);
          return;
        }
        if (res.statusCode !== 200) {
          return reject(
            new Error(`Request failed with status code ${res.statusCode}`),
          );
        }
        const file = fs.createWriteStream(dest);
        res.pipe(file);
        file.on('finish', () => file.close(resolve as () => void));
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #d65abe25966aab7c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:16

  const originalToken = process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #95d7f87b7ed8d9a0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:20

      process.env['GITHUB_TOKEN'] = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e7344c2485983f08 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:22

      delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e04d221e666063d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:27

    process.env['GITHUB_TOKEN'] = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf663d3c4ca9bd9c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:32

    delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca9b03e50fcf9925 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:137

    const originalToken = process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #72d0625d06aaa946 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:140

      process.env['GITHUB_TOKEN'] = 'my-secret-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ddaaa2c963ba0f6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:145

        process.env['GITHUB_TOKEN'] = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e79dccf7c66da1a6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:147

        delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dd756f794503a032 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:171

    const originalToken = process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5a4fba62faeba3eb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:174

      delete process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0105c68871b6dc38 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.test.ts:179

        process.env['GITHUB_TOKEN'] = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e9063af91cd023d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.ts:10

  return process.env['GITHUB_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #ae3b3cac11b71d5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/extensions/github_fetch.ts:25

    https
      .get(url, { headers }, (res) => {
        if (res.statusCode === 302 || res.statusCode === 301) {
          if (redirectCount >= 10) {
            return reject(new Error('Too many redirects'));
          }
          if (!res.headers.location) {
            return reject(new Error('No location header in redirect response'));
          }
          res.resume();
          fetchJson<T>(
            new URL(res.headers.location, url).toString(),
            redirectCount + 1,
          )
            .then(resolve)
            .catch(reject);
          return;
        }
        if (res.statusCode !== 200) {
          return reject(
            new Error(`Request failed with status code ${res.statusCode}`),
          );
        }
        const chunks: Buffer[] = [];
        res.on('data', (chunk) => chunks.push(chunk));
        res.on('end', () => {
          const data = Buffer.concat(chunks).toString();
          // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
          resolve(JSON.parse(data) as T);
        });
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #07f827f3bfd4ec1c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/mcp/mcpServerEnablement.ts:360

      const content = await fs.readFile(this.configFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0793bb2ba46dcdb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/mcp/mcpServerEnablement.ts:385

    await fs.writeFile(this.configFilePath, JSON.stringify(config, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #60fcbeb8d2419ffd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/policy.test.ts:85

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8afe540dd3552925 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/policy.test.ts:126

      fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3cca866b467652fe — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/policy.test.ts:148

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c048432bac1c5fe1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/policy.test.ts:169

      fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #34b812c70109ff64 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/policy.test.ts:189

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f345ea2f01f03ed — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/policy.test.ts:207

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b3d5f668a75273c2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/policy.test.ts:224

    fs.writeFileSync(path.join(policiesDir, 'policy.toml'), 'rules = []');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #373fb486a5acb498 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:56

    delete process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c8dc4d8db463f560 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:57

    delete process.env['GEMINI_SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c48afdca0f5060a1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:83

    process.env['SANDBOX'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b83e191f4e0c2706 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:90

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #333d5bedc127bb6b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:104

      process.env['GEMINI_SANDBOX'] = 'invalid-command';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #47758dd034fa4093 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:111

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b76ae5e4e021814e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:119

      process.env['GEMINI_SANDBOX'] = 'lxc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #64014b47065dfba7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:133

      process.env['GEMINI_SANDBOX'] = 'lxc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa71c09d824905a4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:240

      process.env['GEMINI_SANDBOX_IMAGE'] = 'env/image';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbe9bbc642265160 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:241

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ff7f892708303ae — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:254

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c50a445ddc9e1048 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:268

      process.env['GEMINI_SANDBOX'] = 'docker';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fe7ede9874c4af2f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:422

      process.env['GEMINI_SANDBOX'] = 'runsc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ef5f05253a9e196f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.test.ts:454

      process.env['GEMINI_SANDBOX'] = 'runsc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c7ad58b8fa25659 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.ts:47

  if (process.env['SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d647f7d93f53b6e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.ts:53

    process.env['GEMINI_SANDBOX']?.toLowerCase().trim() ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f50704d2a156ed7c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.ts:155

    process.env['GEMINI_SANDBOX_IMAGE'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a4e4ea5d3fbfe70 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/sandboxConfig.ts:156

    process.env['GEMINI_SANDBOX_IMAGE_DEFAULT'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ead76f21e7c3f084 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:51

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a57acc388260c976 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:52

    delete process.env['OTHER_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6f0f3995a98a7792 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:73

    expect(process.env['GEMINI_API_KEY']).toBe('local');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ff10255255cba43c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:74

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #041267accbdf1cc8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:99

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #94d5733df21dd3e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:100

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0d52d2d959f835a2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:116

    expect(process.env['GEMINI_API_KEY']).toBe('gemini-local');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3aa5b3344169d75f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:117

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #111ca38c63e60fa8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:134

    expect(process.env['GEMINI_API_KEY']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c1dba06970ba890b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:151

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #40c8744d7cb8136e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:152

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d1b8557397f69256 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:179

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #77929c7f208a0256 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:180

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bdfbd130e1321c4a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:200

    expect(process.env['GEMINI_API_KEY']).toBe('home');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4591336b33b9fab5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:201

    expect(process.env['OTHER_VAR']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b01308a3bd9ae43e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:202

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #811aefc2ce15f5ce — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:219

    expect(process.env['GEMINI_API_KEY']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ba5b2548ee76ac6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings-env-isolation.test.ts:236

    expect(process.env['GEMINI_API_KEY']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a531b35310b81328 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:515

      delete process.env['TEST_AUTO_THEME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e35a4581bdb2ac05 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1351

      process.env['TEST_API_KEY'] = 'user_api_key_from_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fefde203940b285f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1378

      delete process.env['TEST_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bb992c720b5b7df4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1382

      process.env['WORKSPACE_ENDPOINT'] = 'workspace_endpoint_from_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #47f21dd214e42481 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1410

      delete process.env['WORKSPACE_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fdd9aa211d65c19e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1414

      process.env['SYSTEM_VAR'] = 'system_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8f7eed82eecbbdf7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1415

      process.env['USER_VAR'] = 'user_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cf945af28a03622b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1416

      process.env['WORKSPACE_VAR'] = 'workspace_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #00e5b14b7852649f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1417

      process.env['SHARED_VAR'] = 'final_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5f6abb828c2d329f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1491

      delete process.env['SYSTEM_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02630d3ab33ff653 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1492

      delete process.env['USER_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d5325ea5ca8a8ddf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1493

      delete process.env['WORKSPACE_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a702ccd862cb2690 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1494

      delete process.env['SHARED_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #75a4db6cd121d8f9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1564

      process.env['VAR_A'] = 'valueA';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bcec056c03431fc8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1565

      process.env['VAR_B'] = 'valueB';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #562bc0e771bf7a40 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1584

      delete process.env['VAR_A'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4a7ba2fa9ec23768 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1585

      delete process.env['VAR_B'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8104138234cfe2f9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1589

      process.env['ITEM_1'] = 'item1_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #98e35c1682636be3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1590

      process.env['ITEM_2'] = 'item2_env';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cd4aa49673aed2b8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1611

      delete process.env['ITEM_1'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7bc37aa67cc206b4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1612

      delete process.env['ITEM_2'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #85ffb27511cb99e6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1616

      process.env['MY_ENV_STRING'] = 'env_string_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ab880e5e3fe69fbe — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1617

      process.env['MY_ENV_STRING_NESTED'] = 'env_string_nested_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8516f7b5a529123a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1670

      delete process.env['MY_ENV_STRING'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #73c4a956c7ea959b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1671

      delete process.env['MY_ENV_STRING_NESTED'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5eaf0f82f29400a7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1675

      process.env['TEST_HOST'] = 'myhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a7da53163fd6eb3b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1676

      process.env['TEST_PORT'] = '9090';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #804091c849d5e284 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1697

      delete process.env['TEST_HOST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4363cb0d2cc9b5fb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1698

      delete process.env['TEST_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2e52f66e6e182f3e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1707

        process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #693278abbe8e26a8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:1712

        delete process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #efe5d342875d3b22 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2114

      delete process.env['GEMINI_API_KEY']; // reset

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #928dd98e842ed991 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2115

      delete process.env['TESTTEST']; // reset

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #90a1f4721cbeb320 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2167

      expect(process.env['TESTTEST']).toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5fbeac41c1f1d652 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2168

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7c7ed1acf8cd86e8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2179

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #90e043366c8f5cb3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2190

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #321040791964b7bd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2191

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4ede0c2a06d592c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2195

      delete process.env['TESTTEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #311694276d87b574 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2206

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4d55b4217005831d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2207

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4f803cddf985e347 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2218

      expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cf2848a5c9f8ada1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2220

      expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2f6ed0bd0626586c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2233

        expect(process.env['GEMINI_API_KEY']).toEqual('test-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #31db8b26530ed67c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:2234

        expect(process.env['TESTTEST']).not.toEqual('1234');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b1cca8453e5c80d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3143

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f3c87656598c7e13 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3144

      delete process.env['GOOGLE_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6de917edc59eec9e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3145

      delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e7054ad16ab15d3f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3146

      delete process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b933052f07feaf4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3147

      delete process.env['CLOUD_SHELL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6deb77656c20754a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3148

      delete process.env['MALICIOUS_VAR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ebd04fd17d44146 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3149

      delete process.env['FOO'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #498c954dec9b9143 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3150

      delete process.env['_GEMINI_USER_GCP_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #26647662338072af — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3178

        expect(process.env['FOO']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2610fb8c678848d4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3179

        expect(process.env['GEMINI_API_KEY']).toBe('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a7877381d9e9b880 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3196

        expect(process.env['GEMINI_API_KEY']).toBe('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #800daccdcbb80265 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3215

        expect(process.env['GEMINI_API_KEY']).toEqual('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cc2d147362e61179 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3234

        expect(process.env['GEMINI_API_KEY']).toEqual('secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ef48c0f4e13d2ca5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3259

        expect(process.env['GEMINI_API_KEY']).toBe('secret-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5d3c08ae370b7d97 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3260

        expect(process.env['GOOGLE_API_KEY']).toBe('another-secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #70e7b560107fc799 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3261

        expect(process.env['MALICIOUS_VAR']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0d8908e66e074d85 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3285

        expect(process.env['GEMINI_API_KEY']).toBe('key-whoami-id-');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #65425d3ed0e8c74d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3308

        expect(process.env['GEMINI_API_KEY']).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e653854ee28606d4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3329

        expect(process.env['FOO']).toBe('$(bar)');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bba1993752e728b4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3351

        expect(process.env['GEMINI_API_KEY']).toBe('un-sanitized;key!');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #959b3fb4134dbc65 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3352

        expect(process.env['MALICIOUS_VAR']).toBe('allowed-because-trusted');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #01bb69d41a5b611c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3365

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1d162546fed525d1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3380

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('cloudshell-gca');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ff316ef33d3ace91 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3403

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('my-vertex-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a37c4e288ad19c93 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3429

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('env-vertex-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #122e16be5eb45948 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3433

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c2a2d327f6e0331f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3446

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('cloudshell-gca');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #18ff2f8c2777f85a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3456

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBeUndefined();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e71834848e4d530 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3460

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0767ce7d80a82ad3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3461

        process.env['GOOGLE_CLOUD_PROJECT'] = 'my-real-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c7718626430d9a96 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3474

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('cloudshell-gca');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fdbdfe60b3da05e6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3475

        expect(process.env['_GEMINI_USER_GCP_PROJECT']).toBe('my-real-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cd5003f9780bf65f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3485

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('my-real-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebd40a3c2c15ad8a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3491

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a147c1aec6c40ee1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3492

        process.env['GOOGLE_CLOUD_PROJECT'] = 'cloudshell-gca';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af8baaad600ca345 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3493

        process.env['_GEMINI_USER_GCP_PROJECT'] = 'my-real-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #842a890f21b4b7f7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3508

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe('my-real-project');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12800badb826ffc9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3512

        process.env['CLOUD_SHELL'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ad0097b2c13c9e13 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.test.ts:3528

        expect(process.env['GOOGLE_CLOUD_PROJECT']).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7de0b092188af5a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:105

  if (process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96a7e1031a5469c6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:106

    return process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #437735db06cbb5d4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:118

  if (process.env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13bd4cf4b2c852aa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:119

    return process.env['GEMINI_CLI_SYSTEM_DEFAULTS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4feca6920b827f6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:621

  if (!process.env[USER_GCP_PROJECT]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78513aba028b9a53 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:622

    const current = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9532385d96816457 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:624

      process.env[USER_GCP_PROJECT] = current;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c747fbf584319f2e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:631

    value = process.env[USER_GCP_PROJECT];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15aeab06148047f6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:635

    const envFileContent = fs.readFileSync(envFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3c6b158648dfcaa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:647

    process.env['GOOGLE_CLOUD_PROJECT'] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3760f8aa99a4205b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:648

  } else if (process.env['GOOGLE_CLOUD_PROJECT'] === 'cloudshell-gca') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7343bdcbc1820708 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:649

    delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecb9188205903510 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:683

  if (process.env['CLOUD_SHELL'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c8292cf346b1a0a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:697

      const envFileContent = fs.readFileSync(envFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #766b134df54cd2e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:723

            process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e427c63d8629c0c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/settings.ts:784

        const content = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9764f757ac5f6014 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:61

    delete process.env['GEMINI_CLI_TRUST_WORKSPACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3dc62527e7eff4a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:73

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3a1bde031afac612 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:91

      const content = fs.readFileSync(trustedFoldersPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dd846c484bbb1f59 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:112

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #001d4b9953688a4f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:125

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cf06558b0ba083a5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:135

      fs.writeFileSync(trustedFoldersPath, 'null', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #520558c903a8b986 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:147

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b1e0b0b4384b09a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:164

      fs.writeFileSync(trustedFoldersPath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #239a3a31ac5e8cb8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:176

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6cf4212fab06a8fe — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:231

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1784b54f8a2e6a85 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:243

      const content = fs.readFileSync(trustedFoldersPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #209f90208a9088cc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:249

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #525935efd8d936d5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:271

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c959888917c26308 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:281

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #18d92fc24bd3954f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:291

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #855230f0430aaff4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:301

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81d1c78aa82f433b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:311

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c4bc7fcf54f398eb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:319

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #62f06985a3c17248 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:330

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #503ebd053a4fc8bc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:343

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #871b9407e1fec43a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:356

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #908d98843b9bd72b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:368

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3c79bd8c1edd6697 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:384

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #254e293989416fba — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:399

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #acb55f2da6f61b2e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:437

      process.env['GEMINI_CLI_TRUST_WORKSPACE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9387fedfe0ef6146 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:444

        delete process.env['GEMINI_CLI_TRUST_WORKSPACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aa18d8e32b0baa81 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:453

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4a5a20e894d3f12 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:490

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebb726a761b870aa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:520

        fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #de9c9078d3c90bec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:536

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d86897f529e3920e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:539

      fs.writeFileSync(envPath, 'GEMINI_API_KEY=secret', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb9dbc3bc8930abb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/config/trustedFolders.test.ts:549

      expect(process.env['GEMINI_API_KEY']).toBe('');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e6b9f6034fef6168 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:417

    delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2c08251f58b3b22f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:438

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4fb14820a72c87e6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:491

    originalEnvNoRelaunch = process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e40e41858d7c6b0e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:492

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3402a49bec455711 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:512

      process.env['GEMINI_CLI_NO_RELAUNCH'] = originalEnvNoRelaunch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81b6d5d495aa7a7a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:514

      delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5efeb5d11ee1d343 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:701

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3d27b0ad749b12f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:707

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4dc5eb344567f57a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:766

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a43c86d44446fdff — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:772

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #18ac1d845963a358 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:820

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7b0c87acf85dd19e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:826

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7067e6f3b0ab9f72 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1041

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3ffbdaf481a86949 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1047

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #011756c39988e3ad — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1236

    originalEnvNoRelaunch = process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f6441a4dffc9add4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1237

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b50df85959d75a22 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1249

      process.env['GEMINI_CLI_NO_RELAUNCH'] = originalEnvNoRelaunch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ce4d56c014a62b95 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1251

      delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8951eef65fcfca79 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1387

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #744a6917a85def70 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1395

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #10941e30832201b5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1420

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aea543c7a79379bb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1428

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0c0ffd05e950abd1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1465

    process.env['GEMINI_API_KEY'] = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #19ad441062b7fadc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.test.tsx:1471

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4fd37cc0b573b0f2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.tsx:138

  if (process.env['GEMINI_CLI_NO_RELAUNCH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34f20033ef0da949 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.tsx:271

      await fsPromises.writeFile(
        newSessionPath,
        lines.join('\n') + '\n',
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ab7fefe0b57383a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.tsx:488

      process.env['CLOUD_SHELL'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f500e3db136a298c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.tsx:489

      process.env['GEMINI_CLI_USE_COMPUTE_ADC'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bb3a7663b0953c5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini.tsx:569

  if (!process.env['SANDBOX'] && !argv.isCommand) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #091b6aa481da881b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini_cleanup.test.tsx:194

    process.env['GEMINI_CLI_NO_RELAUNCH'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2471c4d9c3076a38 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/gemini_cleanup.test.tsx:199

    delete process.env['GEMINI_CLI_NO_RELAUNCH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fe08773cc512d66 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/interactiveCli.tsx:99

  const isShpool = !!process.env['SHPOOL_SESSION_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ba6123cb6bf9007 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/interactiveCli.tsx:139

    process.env['DEBUG'] ? (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6baf640a040208b7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/nonInteractiveCli.ts:89

    if (process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3aec20cf50fab74 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/nonInteractiveCliAgentSession.ts:86

    if (process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c8e32ee03d288514 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/services/BuiltinCommandLoader.test.ts:413

    process.env['NODE_ENV'] = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #03128335f077b6d5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/services/BuiltinCommandLoader.test.ts:422

    process.env['NODE_ENV'] = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b982176bdbb098f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/services/FileCommandLoader.ts:267

      fileContent = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f87bbbd140f0141 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/AppRig.tsx:190

    fs.writeFileSync(
      path.join(geminiDir, 'state.json'),
      JSON.stringify({ terminalSetupPromptShown: true }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01a489a623bf4d9e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/AppRig.tsx:254

      if (!process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d7797bbcd5c5e3f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/AppRig.tsx:316

        apiKey: process.env['GEMINI_API_KEY'] || 'test-api-key',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7780c3f6ee9102d5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/createExtension.ts:33

  fs.writeFileSync(
    path.join(extDir, EXTENSIONS_CONFIG_FILENAME),
    JSON.stringify({
      name,
      version,
      contextFileName,
      mcpServers,
      settings,
      themes,
    }),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f66d2ab9127d741a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/createExtension.ts:46

    fs.writeFileSync(path.join(extDir, 'GEMINI.md'), 'context');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #845c5caddf510ab4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/createExtension.ts:50

    fs.writeFileSync(path.join(extDir, contextFileName), 'context');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9390e904a41ee7c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/createExtension.ts:54

    fs.writeFileSync(
      path.join(extDir, INSTALL_METADATA_FILENAME),
      JSON.stringify(installMetadata),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8231dd6c884e0ada — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/render.tsx:58

if (process.env['NODE_ENV'] === 'test') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a81c5fe5c3c6ef49 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/test-utils/render.tsx:64

  process.env['NODE_ENV'] = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a17359d46f5cea3d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/IdeIntegrationNudge.tsx:47

    !!process.env['GEMINI_CLI_IDE_SERVER_PORT'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85aa473f77b0863c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/IdeIntegrationNudge.tsx:48

    !!process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15544039b96f1fee — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/AuthDialog.tsx:51

    ...(process.env['CLOUD_SHELL'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36c1adb220e68eba — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/AuthDialog.tsx:59

      : process.env['GEMINI_CLI_USE_COMPUTE_ADC'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d269bc4fbe3c946 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/AuthDialog.tsx:87

  const defaultAuthTypeEnv = process.env['GEMINI_DEFAULT_AUTH_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdcc238766215524 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/AuthDialog.tsx:106

    if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e010cf65d3800ae2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/AuthDialog.tsx:125

            process.env['CLOUD_SHELL'] === 'true');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46acf0d39201c1de — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.test.tsx:39

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b855bbbfdcc2ae4c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.test.tsx:40

    delete process.env['GEMINI_DEFAULT_AUTH_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #04ee34d248bdccd1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.test.tsx:178

      process.env['GEMINI_API_KEY'] = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #967e73380e7118cf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.test.tsx:236

      process.env['GEMINI_API_KEY'] = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c99031af994e4e8f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.test.tsx:252

      process.env['GEMINI_API_KEY'] = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df44334317c8c009 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.test.tsx:278

      process.env['GEMINI_DEFAULT_AUTH_TYPE'] = 'INVALID_TYPE';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d7488c376bd8177 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.ts:69

    const envKey = process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d0afc8b80c20cf4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.ts:96

        if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42a89a2b66e13e55 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/auth/useAuth.ts:124

      const defaultAuthType = process.env['GEMINI_DEFAULT_AUTH_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2e61b5dcf3040d9c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.test.ts:66

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-gcp-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c2061f1ab9bcee9b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.test.ts:87

    process.env['SANDBOX'] = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9c64760291753c7e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.test.ts:109

    process.env['SANDBOX'] = 'gemini-sandbox';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c5c7ae88dc8d6149 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.test.ts:124

    process.env['SANDBOX'] = 'sandbox-exec';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #647c0103bccf381e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.test.ts:125

    process.env['SEATBELT_PROFILE'] = 'test-profile';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12dab0fc83f6c3da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.test.ts:144

    process.env['SANDBOX'] = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ac52a9c39c7221f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.ts:30

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c600c660e540327 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.ts:31

      sandboxEnv = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc818babced3d700 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.ts:32

    } else if (process.env['SANDBOX'] === 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c468c3a55711aa5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.ts:34

        process.env['SEATBELT_PROFILE'] || 'unknown'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b13e3ef4de0a58a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/aboutCommand.ts:42

    const gcpProject = process.env['GOOGLE_CLOUD_PROJECT'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbe708e8fa46530f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/bugCommand.ts:43

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a278446ff6c2c3ff — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/bugCommand.ts:44

      sandboxEnv = process.env['SANDBOX'].replace(/^gemini-(?:code-)?/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #505a08281a68d4c5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/bugCommand.ts:45

    } else if (process.env['SANDBOX'] === 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fd688ec6154ba43 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/bugCommand.ts:47

        process.env['SEATBELT_PROFILE'] || 'unknown'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #453ba69087e77b77 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/chatCommand.ts:364

      await fsPromises.writeFile(
        filePath,
        JSON.stringify(restPayload, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5624fb3efc5e5bb4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/docsCommand.ts:24

    if (process.env['SANDBOX'] && process.env['SANDBOX'] !== 'sandbox-exec') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #417444f6e52f8639 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/exportSessionCommand.ts:72

      await fs.writeFile(
        targetPath,
        JSON.stringify(sessionData, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b5800b8902cd71b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/extensionsCommand.ts:304

  if (process.env['NODE_ENV'] === 'test') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2dfb39cddcfcb5e4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/extensionsCommand.ts:310

    process.env['SANDBOX'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d17971c47b2b2f9e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/extensionsCommand.ts:311

    process.env['SANDBOX'] !== 'sandbox-exec'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c43a822405b9d8b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/initCommand.ts:40

      fs.writeFileSync(geminiMdPath, '', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0d5b019a1f13fb91 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:118

      await fs.writeFile(path.join(checkpointsDir, 'test1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b01d30b5a3582fda — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:119

      await fs.writeFile(path.join(checkpointsDir, 'test2.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4d8e385dc62a3580 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:130

      await fs.writeFile(path.join(checkpointsDir, 'test1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #15f0849adfa669a9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:166

      await fs.writeFile(
        path.join(checkpointsDir, 'my-checkpoint.json'),
        JSON.stringify(toolCallData),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fd1cb364394ade46 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:197

      await fs.writeFile(
        path.join(checkpointsDir, 'my-checkpoint.json'),
        JSON.stringify(toolCallData),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9387702dcb2f2f79 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:218

    await fs.writeFile(
      path.join(checkpointsDir, `${checkpointName}.json`),
      JSON.stringify({ history: [] }), // An object that is valid JSON but missing the 'toolCall' property
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b815e5f33bece7e4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:248

      await fs.writeFile(path.join(checkpointsDir, 'test1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12ef1700279e5baa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:249

      await fs.writeFile(path.join(checkpointsDir, 'test2.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3cade7b464610b47 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.test.ts:250

      await fs.writeFile(
        path.join(checkpointsDir, 'not-a-checkpoint.txt'),
        '{}',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2532ab90ae6e5850 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/restoreCommand.ts:91

    const data = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ea7545e3e1de7a79 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:105

      const contents = await fs.readFile(workflowFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bfb2166ee2702a5a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:118

      const gitignoreContent = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #88fec8d66247c04f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:175

      const contents = await fs.readFile(workflowFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec7a54afa299046a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:188

      const gitignoreContent = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #71c207be0173f36d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:236

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cba9175697a523ff — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:244

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d10442cb2c65760f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:248

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #18f3af98047a8fae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:258

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6d78b32b662ad52c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:262

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3f9ff9b1808f38f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:270

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #61636c3e835aa66a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:274

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ce0022cc6e9a5e23 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:292

    await fs.writeFile(gitignorePath, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c41778ad8427fd15 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.test.ts:296

    const content = await fs.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #391ec87a552ac694 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.ts:78

      existingContent = await fs.promises.readFile(gitignorePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7f765ac3ae181c7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.ts:87

      await fs.promises.writeFile(gitignorePath, contentToWrite);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #6180507dd2b07449 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/commands/setupGithubCommand.ts:126

        const response = await fetch(endpoint, {
          method: 'GET',
          dispatcher: proxy ? new ProxyAgent(proxy) : undefined,
          /* eslint-disable @typescript-eslint/no-unsafe-type-assertion */
          signal: (
            AbortSignal as unknown as {
              any: (signals: AbortSignal[]) => AbortSignal;
            }
          ).any([AbortSignal.timeout(30_000), abortController.signal]),
          /* eslint-enable @typescript-eslint/no-unsafe-type-assertion */
        } as RequestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2801f6dfa664cf52 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/Footer.tsx:81

  const sandbox = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96c48c7a8d8596e0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/Footer.tsx:312

        const sandbox = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfbcb76f9c09dc4a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/InboxDialog.tsx:186

    const homeDirs = [process.env['HOME'], process.env['USERPROFILE']]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c16a7fefbcc926f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/InputPrompt.tsx:1735

  const useLineFallback = !!process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acc2f43cd47f5b2d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/StatusDisplay.tsx:26

  if (process.env['GEMINI_SYSTEM_MD']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9013aa4278de61b5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/ScrollableList.tsx:115

      duration: number = process.env['NODE_ENV'] === 'test' ? 0 : 200,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5efe0b8bb4582e6e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/VirtualizedList.tsx:547

    process.env['NODE_ENV'] === 'test' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #71ec48b34ec9b278 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.test.ts:1175

      fs.writeFileSync(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e74a4f0b36d72a30 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.test.ts:1193

      fs.writeFileSync(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c0ef1c3df2e7d53f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.test.ts:1215

      fs.writeFileSync(file1, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e44b54f8fc8cf30a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.test.ts:1216

      fs.writeFileSync(file2, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b2f02d78f9ab58ff — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.test.ts:1231

      fs.writeFileSync(file1, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #07141e3da137bf6a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.test.ts:1232

      fs.writeFileSync(file2, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #522d9dc8b3a4f7de — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.test.ts:1249

      fs.writeFileSync(validFile, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08469e77332a18f8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.ts:3321

    fs.writeFileSync(filePath, expandedText, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f40b98470221b0a4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/components/shared/text-buffer.ts:3334

      let newText = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b145f768adaf0ad — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/contexts/KeypressContext.tsx:383

  const lang = process.env['LANG'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efc4183b547ffc2b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/contexts/KeypressContext.tsx:384

  const lcAll = process.env['LC_ALL'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e7d30a3c6312904 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/atCommandProcessor.test.ts:54

    await fsPromises.writeFile(fullPath, fileContents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca84749565a5c582 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/atCommandProcessor.test.ts:1478

      await fsPromises.writeFile(filePath, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #16c1eff07a692dc5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/atCommandProcessor.test.ts:1692

    await fsPromises.writeFile(realFile, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78344178dbc7931c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/shell-completions/npmProvider.ts:51

        const content = await fs.readFile(pkgJsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3d7865a82fd5bf6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useAnimatedScrollbar.ts:45

      typeof process !== 'undefined' && process.env['NODE_ENV'] === 'test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0188930b3eb893b4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useExecutionLifecycle.ts:595

            const finalPwd = fs.readFileSync(pwdFilePath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0b2b55b5a30e903 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useGeminiStream.ts:2118

              await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ee0d62205c45884b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useGitBranchName.test.tsx:277

      fs.writeFileSync(GIT_HEAD_PATH, 'ref: refs/heads/develop');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5ad68193e8e658d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useQuotaAndFallback.ts:143

            process.env['GOOGLE_CLOUD_LOCATION'] || 'your configured region';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b77818c89c027df — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useShellCompletion.ts:186

  const pathEnv = process.env['PATH'] ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2366cdbdee43e335 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useShellCompletion.ts:190

    ? (process.env['PATHEXT'] ?? '.EXE;.CMD;.BAT;.COM')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b79e727833fbb05 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useShellCompletion.ts:452

  const pathEnvRef = useRef<string>(process.env['PATH'] ?? '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b784e9b5bd9212dc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useShellCompletion.ts:482

    const currentPath = process.env['PATH'] ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df82ed753b8f436d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useShellHistory.ts:34

    const text = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #408819fde9efc04a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useShellHistory.ts:67

    await fs.writeFile(filePath, history.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ab5f3321206f6df — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useThemeCommand.ts:41

    if (process.env['NO_COLOR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14915ac31662e8d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/hooks/useVoiceMode.ts:128

      process.env['GEMINI_API_KEY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0ea54eda036a8c3d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyBindings.test.ts:196

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #16629eb2d7795de6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyBindings.test.ts:214

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b2624b188ebe1cb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyBindings.test.ts:227

    await fs.writeFile(tempFilePath, invalidJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #934153254f3e7e01 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyBindings.test.ts:243

    await fs.writeFile(tempFilePath, mixedJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c51f16b5e1069941 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyBindings.test.ts:260

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #78005f76928ad658 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyBindings.test.ts:273

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e49c6f92fe4c595 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyBindings.ts:727

    const content = await fs.readFile(userKeybindingsPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a9f3eedd1356af3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyMatchers.test.ts:561

    await fs.writeFile(tempFilePath, customJson, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #94c5e37194aeb779 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keyMatchers.test.ts:573

    await fs.writeFile(tempFilePath, 'invalid json {', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5545c0b150e5049 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/key/keybindingUtils.ts:78

    (process.env['FORCE_GENERIC_KEYBINDING_HINTS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c812d9758e37ddb8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.test.ts:8

if (process.env['NO_COLOR'] !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a02bbf5c11b1e807 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.test.ts:9

  delete process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d23471e7fc67314b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.test.ts:118

    const original = process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fd3da6e0cd3e02d9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.test.ts:119

    process.env['NO_COLOR'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b3ef12013a72bf23 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.test.ts:122

      delete process.env['NO_COLOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbc14644a6db748d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.test.ts:124

      process.env['NO_COLOR'] = original;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2248d835033eebda — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.ts:317

    if (process.env['NO_COLOR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9946b2952f16e01d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/themes/theme-manager.ts:584

      const themeContent = this.fs.readFileSync(canonicalPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f0d6b7b3e01a1b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/antigravityUtils.ts:23

    if (process.env['PSModulePath']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7bcc9894ebbb1676 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.test.ts:113

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b32890ca8ba91811 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.test.ts:132

      process.env['XDG_SESSION_TYPE'] = 'x11';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5e0faf3abdc72525 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.test.ts:157

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf59589768589a8e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.test.ts:168

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d3a73004ebc3eb5c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.test.ts:182

      process.env['XDG_SESSION_TYPE'] = 'wayland';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #85bc98363781cbed — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.test.ts:230

      process.env['XDG_SESSION_TYPE'] = type;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af305f6162c4ef7e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.test.ts:340

      delete process.env['XDG_SESSION_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9af7550f2ba997c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/clipboardUtils.ts:44

  const displayServer = process.env['XDG_SESSION_TYPE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d7c924472800e7a2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:87

  delete process.env['TMUX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b9e46b85adcb790 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:88

  delete process.env['STY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1d7cdabad0a8d931 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:89

  delete process.env['SSH_TTY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #833dc787498d4d21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:90

  delete process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #afbfbbd123340ce5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:91

  delete process.env['SSH_CLIENT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f94651078d5ff96a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:92

  delete process.env['WSL_DISTRO_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #77571f0e82c15f8a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:93

  delete process.env['WSLENV'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #692a7ab5db4a9b52 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:94

  delete process.env['WSL_INTEROP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9d7d234e04f7f2e8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:95

  delete process.env['TERM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81a2e9c7d3f01d21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:96

  delete process.env['WT_SESSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a29eb526a60d633b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:265

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c19d51d3c7cf30f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:309

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ecd7ab05ecea2d3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:310

      process.env['TMUX'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #711ced044d5deb13 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:332

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #31456a5b4f5d4534 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:333

      process.env['STY'] = 'screen-session';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7322e7b6323cdd21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:356

      process.env['SSH_TTY'] = '/dev/pts/1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dedde165abb2dcfc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:383

      process.env['SSH_CLIENT'] = 'client';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6f602fe9453b4e0d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:396

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5538735fc2d29b6f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:411

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2c361b53650a0a0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:450

      process.env['SSH_CONNECTION'] = '1'; // normally would trigger OSC52 on TTY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fe0948fab29b2cd3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:476

      process.env['TMUX'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9599cc10a343db3b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:487

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ac622ea8e98a8fec — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:512

      process.env['SSH_CONNECTION'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f3ea5116bdff1429 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:545

      process.env['WT_SESSION'] = 'some-uuid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9bf0467b63ef0711 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:569

      process.env['WT_SESSION'] = 'some-uuid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f68780c89a1d2e9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.test.ts:598

      process.env['WT_SESSION'] = 'some-uuid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40b5cf90395347e0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:145

    process.env['TMUX'] || (process.env['TERM'] ?? '').startsWith('tmux'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e71b7ff99db4417 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:150

    process.env['STY'] || (process.env['TERM'] ?? '').startsWith('screen'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80bc4e06092ce27d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:155

    process.env['SSH_TTY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f82bac7750b28404 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:156

      process.env['SSH_CONNECTION'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d1d15cc631bab39 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:157

      process.env['SSH_CLIENT'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #807478494cbad0be — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:162

    process.env['WSL_DISTRO_NAME'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9b6bcd24aab1697 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:163

      process.env['WSLENV'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32baae50982b582e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:164

      process.env['WSL_INTEROP'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ed1af4c98d22f5f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:168

  process.platform === 'win32' && Boolean(process.env['WT_SESSION']);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1b1890fc47ef46d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/commandUtils.ts:170

const isDumbTerm = (): boolean => (process.env['TERM'] ?? '') === 'dumb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79065307e7de2a70 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/editorUtils.ts:81

    const envCommand = process.env['VISUAL'] ?? process.env['EDITOR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6a15812fd5e5fc8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/historyExportUtils.ts:80

  await fsPromises.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #739a6c152e2fb3e6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/rewindFileOps.ts:175

              currentContent = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3aea7be69547807d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/rewindFileOps.ts:198

                await fs.writeFile(filePath, originalContent ?? '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a201bd67887b4a9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/rewindFileOps.ts:223

                  await fs.writeFile(filePath, patchedContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5120fb917e7ba6d8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:87

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #affd29fb0c6a57bd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:93

      process.env['CURSOR_TRACE_ID'] = 'some-id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0e9907be830b0b1b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:99

      process.env['VSCODE_GIT_ASKPASS_MAIN'] = '/path/to/windsurf/askpass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e4710652b8d85c40 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:117

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8aefab31c461e8e4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:130

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c8e50ff1160e4a80 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:141

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d14a7d15d2a4c474 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:183

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f267d584ec1dbd6f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:193

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ab23bc45e62966c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:218

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b71958d75888dd23 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.test.ts:242

      process.env['TERM_PROGRAM'] = 'vscode';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa48ccb90251dcc2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:115

  const termProgram = process.env['TERM_PROGRAM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #155c08a90ff7bc25 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:120

    process.env['CURSOR_TRACE_ID'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e797e1ea07ed129 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:121

    process.env['VSCODE_GIT_ASKPASS_MAIN']?.toLowerCase().includes('cursor')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c82b891dd0fcfe1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:127

    process.env['VSCODE_GIT_ASKPASS_MAIN']?.toLowerCase().includes('windsurf')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fba11a10ac2161eb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:133

    process.env['VSCODE_GIT_ASKPASS_MAIN']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a7bc4757b83281b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:140

  if (termProgram === 'vscode' || process.env['VSCODE_GIT_IPC_HANDLE']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af10deb4922af861 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:205

    if (!process.env['APPDATA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1f16301f72e6c13 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:208

    return path.join(process.env['APPDATA'], appName, 'User');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5526318e3f3eef89 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:235

      const content = await fs.readFile(keybindingsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1db091e71a008d36 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:352

    await fs.writeFile(keybindingsFile, JSON.stringify(keybindings, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1215f82f29982af — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalSetup.ts:403

    const content = await fs.readFile(keybindingsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9abea43592593e1c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/terminalUtils.ts:34

  cachedIsITerm2 = process.env['TERM_PROGRAM'] === 'iTerm.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #da33d901a497462e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/updateCheck.test.ts:51

    delete process.env['DEV'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #623e5ea179ca0c08 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/updateCheck.test.ts:76

    process.env['DEV'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5d7c52f80fbd0d1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/updateCheck.ts:64

    if (process.env['DEV'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #6cfa9891decf8ef5 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/ui/utils/urlSecurityUtils.test.ts:19

      const urlObj = new URL('https://xn--tst-qla.com/path');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #b37db8c98dfde7de — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/cleanup.test.ts:298

      const originalSandbox = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fe6b8cb6446b4d77 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/cleanup.test.ts:299

      process.env['SANDBOX'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ddac0fbafa2a2ca — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/cleanup.test.ts:316

      process.env['SANDBOX'] = originalSandbox;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7e09a7ac0a89dcd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/cleanup.ts:160

    if (process.env['SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4f39acc7947f515e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:48

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ea0e163aa56ea464 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:57

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #210f10660711c760 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:73

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a24b6ef83259e4cc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:82

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4bcc070616d0b91d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:93

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6457459925b2947e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:100

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2caf81da8ee95e14 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:111

      const content = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1da56f126c8a52ac — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:129

      fs.writeFileSync(testFilePath, complexContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0700c272330bb7d9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:145

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #77b47b8d3e043bbf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:166

      fs.writeFileSync(testFilePath, corruptedContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b1a9d9000ea0472 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:180

      const unchangedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d7c87f277c2067a4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:194

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #59d0c48756fc99c2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:200

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1f7d3fe53c68c15e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:218

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #172e87f64d5661ec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:228

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d110ce8de9f05282 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:253

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #643f3ea2613b6fcf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:265

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e5ebca7bfa2d146e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:294

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d456358eeff90d06 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:300

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eeb33df9f4a26f6f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:313

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #548769c7fade0ce4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:319

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa7caa31ec4d4574 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:346

      fs.writeFileSync(testFilePath, originalContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b9d37b3a374b93fc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.test.ts:357

      const updatedContent = fs.readFileSync(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0d431ad8ecc1dab — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.ts:24

    fs.writeFileSync(filePath, JSON.stringify(updates, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c50f16e8cb49be1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.ts:28

  const originalContent = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d015aa3b9a18fa88 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/commentJson.ts:46

  fs.writeFileSync(filePath, updatedContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6bdac8822fa48aaf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/devtoolsService.test.ts:122

    delete process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f0be9e5b17982653 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/devtoolsService.test.ts:139

      process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'] = '/tmp/test.jsonl';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #beb8961260266175 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/devtoolsService.test.ts:152

      process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'] = '/tmp/test.jsonl';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0972121ecb0276e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/devtoolsService.ts:122

  const target = process.env['GEMINI_CLI_ACTIVITY_LOG_TARGET'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc5a9abceebf3481 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/envVarResolver.ts:48

        const val = process.env[varName];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3fc74dc583450713 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/gitUtils.ts:64

    const response = await fetch(endpoint, {
      method: 'GET',
      headers: {
        Accept: 'application/vnd.github+json',
        'Content-Type': 'application/json',
        'X-GitHub-Api-Version': '2022-11-28',
      },
      dispatcher: proxy ? new ProxyAgent(proxy) : undefined,
      /* eslint-disable @typescript-eslint/no-unsafe-type-assertion */
      signal: (
        AbortSignal as unknown as {
          any: (signals: AbortSignal[]) => AbortSignal;
        }
      ).any([AbortSignal.timeout(30_000), controller.signal]),
      /* eslint-enable @typescript-eslint/no-unsafe-type-assertion */
    } as RequestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #93e9bcb329e637de — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/installationInfo.ts:13

export const isDevelopment = process.env['NODE_ENV'] === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c704a9f7196f0c10 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/installationInfo.ts:47

    if (process.env['IS_BINARY'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4078179c2ce7e3fe — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/persistentState.ts:41

        const content = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #695b72833430ffdb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/persistentState.ts:63

      fs.writeFileSync(filePath, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd9bfb63b3c2900d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/processUtils.ts:46

    (process.env['IS_BINARY'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18fc915ced342a7b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/processUtils.ts:65

    process.env['IS_BINARY'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d6e723539e5945a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/processUtils.ts:103

      const existingNodeOptions = process.env['NODE_OPTIONS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0596ff1ff0b93d35 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/relaunch.ts:43

  if (process.env['GEMINI_CLI_NO_RELAUNCH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30a20710a57db402 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:66

            const output = process.env['TEST_LXC_LIST_OUTPUT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8094404e8fb91265 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:375

      process.env['GEMINI_CLI_INTEGRATION_TEST'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa5b6ff9fc915f02 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:534

      process.env['SANDBOX_MOUNTS'] = '/host/path:/container/path:ro';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5052345b5b89660e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:710

      process.env['GOOGLE_GEMINI_BASE_URL'] = 'http://gemini.proxy';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #90c6735b03e521da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:711

      process.env['GOOGLE_VERTEX_BASE_URL'] = 'http://vertex.proxy';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #36ec2b0df72bf56e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:757

      process.env['SANDBOX_SET_UID_GID'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8bad11e2cb06648a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:818

      process.env['SANDBOX_SET_UID_GID'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c131136054600129 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:928

        delete process.env['TEST_LXC_LIST_OUTPUT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4800229954d40c13 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:932

        process.env['TEST_LXC_LIST_OUTPUT'] = LXC_RUNNING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a9ac331f43729367 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:966

        process.env['TEST_LXC_LIST_OUTPUT'] = 'throw';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1c3bfcc8ca3a7ea1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:978

        process.env['TEST_LXC_LIST_OUTPUT'] = LXC_STOPPED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #033854d1a9c4c3f2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.test.ts:988

        process.env['TEST_LXC_LIST_OUTPUT'] = '[]';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #757e967f597cd34a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:53

    debugMode: cliConfig?.getDebugMode() || !!process.env['DEBUG'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3dc5cecc24ae8281 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:63

      if (process.env['BUILD_SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc9c35544ecdc1e4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:69

      const profile = (process.env['SEATBELT_PROFILE'] ??= 'permissive-open');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4840f067a328906f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:93

        ...(process.env['DEBUG'] ? ['--inspect-brk'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e55891efa2e3337 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:167

      const proxyCommand = process.env['GEMINI_SANDBOX_PROXY_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c0cf75a550c64d9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:173

          process.env['HTTPS_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eb4c3c5451839b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:174

          process.env['https_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5ae04513deacafa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:175

          process.env['HTTP_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61f8bfe1e24f8f63 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:176

          process.env['http_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d63d003588351a11 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:182

        const noProxy = process.env['NO_PROXY'] || process.env['no_proxy'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efa9eeda88bca206 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:270

    if (process.env['BUILD_SANDBOX']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4fcb0eec2d5af87d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:327

    if (process.env['SANDBOX_FLAGS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2852b111eab0c9ef — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:328

      const flags = parse(process.env['SANDBOX_FLAGS'], process.env).filter(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a4258f3435f5497 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:392

    if (process.env['GOOGLE_APPLICATION_CREDENTIALS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb1b6c9c310f87a8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:393

      const adcFile = process.env['GOOGLE_APPLICATION_CREDENTIALS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2b069772ba531e0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:404

    if (process.env['SANDBOX_MOUNTS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a932347e2ed8582 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:405

      for (let mount of process.env['SANDBOX_MOUNTS'].split(',')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cecd43d01da445b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:447

    if (process.env['DEBUG']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8eb45e0c85821f36 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:448

      const debugPort = process.env['DEBUG_PORT'] || '9229';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1aef0e30768e97e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:455

    const proxyCommand = process.env['GEMINI_SANDBOX_PROXY_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf41c22ef033f0da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:459

        process.env['HTTPS_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90140bc3d2e2b8a9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:460

        process.env['https_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d46e8e5aabc0b4f2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:461

        process.env['HTTP_PROXY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6bac08994003a82 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:462

        process.env['http_proxy'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a976b8f6225c1e9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:471

      const noProxy = process.env['NO_PROXY'] || process.env['no_proxy'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a75e818d8e4298a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:504

      process.env['GEMINI_CLI_INTEGRATION_TEST'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15bfbb99ed273db6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:515

    if (process.env['GEMINI_CLI_TEST_VAR']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc5938ea16518d92 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:518

        `GEMINI_CLI_TEST_VAR=${process.env['GEMINI_CLI_TEST_VAR']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c4cd42e3388753a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:523

    if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b04a6724e7d798cd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:524

      args.push('--env', `GEMINI_API_KEY=${process.env['GEMINI_API_KEY']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b735c3312d9f7abc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:526

    if (process.env['GOOGLE_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #220a871887c8f70c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:527

      args.push('--env', `GOOGLE_API_KEY=${process.env['GOOGLE_API_KEY']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a84d72ccd282fffb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:531

    if (process.env['GOOGLE_GEMINI_BASE_URL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0c804600b41f76d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:534

        `GOOGLE_GEMINI_BASE_URL=${process.env['GOOGLE_GEMINI_BASE_URL']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1034008ee7637397 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:537

    if (process.env['GOOGLE_VERTEX_BASE_URL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8065f9e8b29cb7ae — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:540

        `GOOGLE_VERTEX_BASE_URL=${process.env['GOOGLE_VERTEX_BASE_URL']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5d841936294b1dc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:545

    if (process.env['GOOGLE_GENAI_USE_VERTEXAI']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #424fdaadbfa1acfb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:548

        `GOOGLE_GENAI_USE_VERTEXAI=${process.env['GOOGLE_GENAI_USE_VERTEXAI']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d3fc20431be0ae3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:553

    if (process.env['GOOGLE_GENAI_USE_GCA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf78ac43ee84d0da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:556

        `GOOGLE_GENAI_USE_GCA=${process.env['GOOGLE_GENAI_USE_GCA']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3e5ad0e66500d56 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:561

    if (process.env['GOOGLE_CLOUD_PROJECT']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb5982a00eaebe58 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:564

        `GOOGLE_CLOUD_PROJECT=${process.env['GOOGLE_CLOUD_PROJECT']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9315ba6cfe43ce4b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:569

    if (process.env['GOOGLE_CLOUD_LOCATION']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d5a58c5cfea7b7e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:572

        `GOOGLE_CLOUD_LOCATION=${process.env['GOOGLE_CLOUD_LOCATION']}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #729dbc5fa0016606 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:577

    if (process.env['GEMINI_MODEL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3abf4e30abcab37b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:578

      args.push('--env', `GEMINI_MODEL=${process.env['GEMINI_MODEL']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b19dca44c6294e07 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:582

    if (process.env['TERM']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd7ca8944fe355ec — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:583

      args.push('--env', `TERM=${process.env['TERM']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f54967d53e80a3ca — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:585

    if (process.env['COLORTERM']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6844f6628300ed4d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:586

      args.push('--env', `COLORTERM=${process.env['COLORTERM']}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6eb3934c53106dfd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:595

      if (process.env[envVar]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1da28c7e4e17538 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:596

        args.push('--env', `${envVar}=${process.env[envVar]}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be6755c49be2449d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:605

      process.env['VIRTUAL_ENV']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #674c66290ea1a47d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:615

        `${sandboxVenvPath}:${getContainerPath(process.env['VIRTUAL_ENV'])}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc77564ad59d190d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:619

        `VIRTUAL_ENV=${getContainerPath(process.env['VIRTUAL_ENV'])}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77175a38896af7da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:624

    if (process.env['SANDBOX_ENV']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa950794618b5d1d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:625

      for (let env of process.env['SANDBOX_ENV'].split(',')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d20330a87c0b52b9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:640

    const existingNodeOptions = process.env['NODE_OPTIONS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a17b7bba0591efd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:656

      fs.writeFileSync(emptyAuthFilePath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3626260cfe1bfa7e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:665

    if (process.env['GEMINI_CLI_INTEGRATION_TEST'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06a0c7e23a4b1845 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:987

      GEMINI_API_KEY: process.env['GEMINI_API_KEY'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e036d96742f3243 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:988

      GOOGLE_API_KEY: process.env['GOOGLE_API_KEY'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e8beecebf1daddb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:989

      GOOGLE_GEMINI_BASE_URL: process.env['GOOGLE_GEMINI_BASE_URL'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5364adb7eaa97a2e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:990

      GOOGLE_VERTEX_BASE_URL: process.env['GOOGLE_VERTEX_BASE_URL'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32c7fd216bef7cef — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:991

      GOOGLE_GENAI_USE_VERTEXAI: process.env['GOOGLE_GENAI_USE_VERTEXAI'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2840bb26cd8ddfa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:992

      GOOGLE_GENAI_USE_GCA: process.env['GOOGLE_GENAI_USE_GCA'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecd05da93e5c4fd8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:993

      GOOGLE_CLOUD_PROJECT: process.env['GOOGLE_CLOUD_PROJECT'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c83a55c214e9b889 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:994

      GOOGLE_CLOUD_LOCATION: process.env['GOOGLE_CLOUD_LOCATION'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #021d271154de394a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:995

      GEMINI_MODEL: process.env['GEMINI_MODEL'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c717f9ca1d2719b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:996

      TERM: process.env['TERM'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d27cef293394866 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:997

      COLORTERM: process.env['COLORTERM'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2206b0676cd0b26c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:998

      GEMINI_CLI_IDE_SERVER_PORT: process.env['GEMINI_CLI_IDE_SERVER_PORT'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48d5a7bdc88cacaf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:1000

        process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23939d1671c66334 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:1001

      TERM_PROGRAM: process.env['TERM_PROGRAM'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d08736e715fc722d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:1010

    if (process.env['SANDBOX_ENV']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #213cd5b5e78411f7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:1011

      for (let env of process.env['SANDBOX_ENV'].split(',')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #712ded31f1f6e528 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:1025

    const existingNodeOptions = process.env['NODE_OPTIONS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56c5ac3907f6f854 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandbox.ts:1124

      if (cliConfig?.getDebugMode() || process.env['DEBUG']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #04bc07f668dee899 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:37

    delete process.env['NODE_ENV'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9c6056c721cdf35b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:38

    delete process.env['DEBUG'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43e7d24a9e020e04 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:80

      delete process.env['SANDBOX_PORTS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d8f3b186dc8f49bd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:85

      process.env['SANDBOX_PORTS'] = '8080, 3000 , 9000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81513c231543fe68 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:102

      process.env['PATH'] = '/work/bin:/usr/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3b0670266e4c9749 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:103

      process.env['PYTHONPATH'] = '/work/lib';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d6a862f8e1fb1592 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:116

      process.env['SANDBOX_PORTS'] = '8080';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #03160b917712b368 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:122

      process.env['NODE_ENV'] = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #057c6504f6c34821 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:130

      process.env['SANDBOX_SET_UID_GID'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f5db2de4e27aa185 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:135

      process.env['SANDBOX_SET_UID_GID'] = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cd853ef316448f7d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:140

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1aa90fe8e6e755a5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:147

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f71e6a7ea0ae25a6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:154

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4a9a65ed19df4d9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:161

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #da8daa9df5243906 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:168

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f26171bcb99ca7ae — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:175

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #25c4b8cbdfb5a415 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:196

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4a14939c8fed5830 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:205

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eaa5dd9983e02a98 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:224

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2fbfeeab60340f93 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.test.ts:236

      delete process.env['SANDBOX_SET_UID_GID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eff2c32f5ff8f0c8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:39

  const envVar = process.env['SANDBOX_SET_UID_GID']?.toLowerCase().trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6d261b3d7740378 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:51

      const osReleaseContent = await readFile('/etc/os-release', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c72eb4fdb5c0298 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:94

  return (process.env['SANDBOX_PORTS'] ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b764327ff51ae57e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:107

  if (process.env['PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f97b3cc7733fb094 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:108

    const paths = process.env['PATH'].split(pathSeparator);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a1fa1b8240933f1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:123

  if (process.env['PYTHONPATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #475ea1873c305854 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:124

    const paths = process.env['PYTHONPATH'].split(pathSeparator);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef7e6aeb944e2057 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:151

    process.env['DEBUG'] === 'true' || process.env['DEBUG'] === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e281b4bb27e066f0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:153

    process.env['NODE_ENV'] === 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2520ed94d505695 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sandboxUtils.ts:158

        ? `node --inspect-brk=0.0.0.0:${process.env['DEBUG_PORT'] || '9229'} $(which gemini)`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a06735cab7b1b704 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:85

    await fs.writeFile(
      sessionFile,
      JSON.stringify({
        sessionId: 'test123',
        messages: [],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #63def6603fde9718 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:169

    await fs.writeFile(
      oldSessionFile,
      JSON.stringify({
        sessionId: 'old12345',
        messages: [{ type: 'user', content: 'test message' }],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #be7bc047b033e97c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:184

    await fs.writeFile(
      recentSessionFile,
      JSON.stringify({
        sessionId: 'recent789',
        messages: [{ type: 'user', content: 'test message' }],
        startTime: recentDate.toISOString(),
        lastUpdated: recentDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #acbc08eb192fcd98 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:199

    await fs.writeFile(
      currentSessionFile,
      JSON.stringify({
        sessionId: 'current123',
        messages: [{ type: 'user', content: 'test message' }],
        startTime: now.toISOString(),
        lastUpdated: now.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ca333f30814ac6a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:282

    await fs.writeFile(
      parentFile,
      JSON.stringify({
        sessionId: parentSessionId,
        messages: [],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1331e3b40de27b58 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:297

    await fs.writeFile(
      subagentFile,
      JSON.stringify({
        sessionId: subagentSessionId,
        messages: [],
        startTime: oldDate.toISOString(),
        lastUpdated: oldDate.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #32a0c8c70a13e0ec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:311

    await fs.writeFile(parentLogFile, '{"log": "parent"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e2ef142ef228f896 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:318

    await fs.writeFile(
      path.join(parentToolOutputsDir, 'some-output.txt'),
      'data',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #148b63ccdb91fb8e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:327

    await fs.writeFile(subagentLogFile, '{"log": "subagent"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6604d202ad11e455 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:334

    await fs.writeFile(
      path.join(subagentToolOutputsDir, 'some-output.txt'),
      'data',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6064d9d12a0128fb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.integration.test.ts:344

    await fs.writeFile(
      currentFile,
      JSON.stringify({
        sessionId: 'current-session',
        messages: [
          {
            type: 'user',
            content: [{ type: 'text', text: 'hello' }],
            timestamp: now.toISOString(),
          },
        ],
        startTime: now.toISOString(),
        lastUpdated: now.toISOString(),
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2e87b679b25d48e9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:84

    await fs.writeFile(
      filePath,
      JSON.stringify({
        sessionId: session.id,
        lastUpdated: session.lastUpdated,
        startTime: session.lastUpdated,
        messages: [{ type: 'user', content: 'hello' }],
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #247e1b9efb888766 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:97

    await fs.writeFile(
      path.join(logsDir, `session-${sessionId}.jsonl`),
      'log content',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #92f8b3627f8bfbdd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:104

    await fs.writeFile(
      path.join(sessionOutputDir, 'output.txt'),
      'tool output',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #220540b9abc98ce7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:291

      await fs.writeFile(
        filePath,
        JSON.stringify(
          {
            sessionId,
            lastUpdated: twoWeeksAgo.toISOString(),
            startTime: twoWeeksAgo.toISOString(),
            messages: [{ type: 'user', content: 'hello legacy' }],
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e1c576066e69a62 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:337

      await fs.writeFile(
        filePath,
        JSON.stringify(metadata) + '\n' + JSON.stringify(message) + '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f94a3452c272753b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:364

      await fs.writeFile(filePath, 'completely invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #333c89a38bc4ec29 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:495

      await fs.writeFile(corruptPath, 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #21f0a11b7e826473 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:515

      await fs.writeFile(badJsonPath, 'This is raw text, not JSON');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #087b8fdca7a8eeca — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:532

      await fs.writeFile(
        legacyPath,
        JSON.stringify({
          sessionId: 'legacy-session-id',
          lastUpdated: '2024-12-25T00:00:00.000Z',
          messages: [],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b1fdf608fb981016 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:735

      await fs.writeFile(targetFile, JSON.stringify({ sessionId: '../../..' }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b344da6e68052de8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:964

      await fs.writeFile(file1, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #90455cd3737e9c30 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.test.ts:967

      await fs.writeFile(file2, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8db019a48c8645df — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionCleanup.ts:206

                  const fileContent = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ee8578bb5c498b15 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:54

      await fs.writeFile(
        path.join(
          chatsDir,
          `session-20240101T000000-${sessionId.slice(0, 8)}.jsonl`,
        ),
        JSON.stringify({ sessionId }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d51d3eccf5b31a95 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:71

      await fs.writeFile(
        path.join(chatsDir, `session-different-uuid-20240101.jsonl`),
        '{}',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bdc736d890cc85db — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:128

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4dd95aee2d282e19 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:136

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId2.slice(0, 8)}.json`,
      ),
      JSON.stringify(session2, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #831a3246d5f6d6b0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:194

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c14b307fd499b823 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:202

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId2.slice(0, 8)}.json`,
      ),
      JSON.stringify(session2, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #14429806b4664fd9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:258

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f09ca11af7e245dd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:266

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId2.slice(0, 8)}.json`,
      ),
      JSON.stringify(session2, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #24f75e1112afd720 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:303

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(session, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #40577e5f7351b3d9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:357

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionOriginal, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ba4eb6904a46935 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:366

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionDuplicate, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e5a084c470d9c8d5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:405

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId1.slice(0, 8)}.json`,
      ),
      JSON.stringify(session1, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d67c335a60685d2d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:490

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionIdWithUser.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionWithUser, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c3fc09836f300038 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:498

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${sessionIdSystemOnly.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionSystemOnly, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c5f245848e86c05a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:533

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${commandOnlySessionId.slice(0, 8)}.jsonl`,
      ),
      `${JSON.stringify(metadata)}\n${JSON.stringify(commandMessage)}\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7fb2f55c062d74b0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:572

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionId.slice(0, 8)}.jsonl`,
      ),
      `${JSON.stringify(metadata)}\n${JSON.stringify(commandMessage)}\n${JSON.stringify(realMessage)}\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e796e5506864696 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:611

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${sessionIdGeminiOnly.slice(0, 8)}.json`,
      ),
      JSON.stringify(sessionGeminiOnly, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #92e9dd0457096e3a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:669

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${mainSessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(mainSession, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ed6f3af183e5db2d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:677

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T11-00-${subagentSessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(subagentSession, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #55956767dd21783b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:716

    await fs.writeFile(filePath, JSON.stringify(session, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b0781231b5cae6ad — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:752

    await fs.writeFile(filePath, JSON.stringify(session, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d3d1a14e5f4c963 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/sessionUtils.test.ts:788

    await fs.writeFile(
      path.join(
        chatsDir,
        `${SESSION_FILE_PREFIX}2024-01-01T10-00-${existingSessionId.slice(0, 8)}.json`,
      ),
      JSON.stringify(session, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #034fafe37fbcca37 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:35

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f19dfc479ae456fc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:56

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4e55eec2094cec4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:77

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c16faf5f9185c68c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:102

      await fs.writeFile(
        path.join(skillDir1, 'SKILL.md'),
        '---\nname: duplicate-skill\ndescription: desc1\n---\nbody1',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #19d26add0ff3bb64 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:106

      await fs.writeFile(
        path.join(skillDir2, 'SKILL.md'),
        '---\nname: duplicate-skill\ndescription: desc2\n---\nbody2',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #be68d6af8dffb08e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:153

    await fs.writeFile(
      path.join(skillSubDir, 'SKILL.md'),
      '---\nname: test-skill\ndescription: test\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #abffc314ab7948d7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:176

    await fs.writeFile(
      path.join(skillSubDir, 'SKILL.md'),
      '---\nname: test-skill\ndescription: test\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #32b8427fa55412e3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:206

      await fs.writeFile(
        path.join(skillDir, 'SKILL.md'),
        '---\nname: test-skill\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #637d788f1821fa4b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:228

      await fs.writeFile(
        skillMdPath,
        '---\nname: original-name\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8298c2e13a0c61ef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:244

      await fs.writeFile(
        skillMdPath,
        '---\nname: updated-name\ndescription: test\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #144e48382a9f2361 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:299

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: ..\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b84cb2cb2c827b4d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:313

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: ..\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b0208528567f5ad5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:337

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: /tmp/exploit\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ce5899ac6b817ab9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:360

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: " ../../exploit "\ndescription: exploit\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #de0c1a47fecd0431 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/skillUtils.test.ts:383

      await fs.writeFile(
        path.join(skillSubDir, 'SKILL.md'),
        '---\nname: ..-foo\ndescription: safe skill name starting with double dots\n---\nbody',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d3daec74bd401dc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/startupWarnings.ts:17

    const warningsContent = await fs.readFile(warningsFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8478bdc633ac7151 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:101

      await fs.writeFile(recentFile, 'recent content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f7c6f702d1d39d47 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:102

      await fs.writeFile(oldFile, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #170d5b5a6a6f84b0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:145

      await fs.writeFile(file1, 'content 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #209562818d928ec4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:146

      await fs.writeFile(file2, 'content 2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ef43b1f6f9e4e151 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:147

      await fs.writeFile(file3, 'content 3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d6154213964f70a6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:218

      await fs.writeFile(file1, 'content 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3c823cf9ad217bcb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:219

      await fs.writeFile(file2, 'content 2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02fd976519c2548b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:220

      await fs.writeFile(file3, 'content 3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a48c39cc7b67d38e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:221

      await fs.writeFile(file4, 'content 4');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e318d483d61bb0d4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:222

      await fs.writeFile(file5, 'content 5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a52031d1307395d5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/toolOutputCleanup.test.ts:269

      await fs.writeFile(oldFile, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #321fb3f4ee95b92f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/windowTitle.ts:44

  let displayContext = process.env['CLI_TITLE'] || folderName;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b9219fde4a817026 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/worktreeSetup.test.ts:82

    expect(process.env['GEMINI_CLI_WORKTREE_HANDLED']).toBe('1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e9d8e436bf31be7f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/worktreeSetup.test.ts:98

    process.env['GEMINI_CLI_WORKTREE_HANDLED'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a14d64c27b8bc3cf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/worktreeSetup.ts:24

  if (process.env['GEMINI_CLI_WORKTREE_HANDLED'] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a11236b073d80a67 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/utils/worktreeSetup.ts:35

    process.env['GEMINI_CLI_WORKTREE_HANDLED'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7b4834b1ee1c850f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:45

    originalEnvGeminiApiKey = process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3736ea062a1667c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:46

    originalEnvVertexAi = process.env['GOOGLE_GENAI_USE_VERTEXAI'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0ca993bc17cd200e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:47

    originalEnvGcp = process.env['GOOGLE_GENAI_USE_GCA'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5cf97a8e0b349ae8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:48

    delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #debe365a68158b04 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:49

    delete process.env['GOOGLE_GENAI_USE_VERTEXAI'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74ffeba3d6980d0a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:50

    delete process.env['GOOGLE_GENAI_USE_GCA'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1ad8ae3eea18f26b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:86

      process.env['GEMINI_API_KEY'] = originalEnvGeminiApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #426f2a8ed26c0087 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:88

      delete process.env['GEMINI_API_KEY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0ade2d935bc551ad — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:91

      process.env['GOOGLE_GENAI_USE_VERTEXAI'] = originalEnvVertexAi;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1701c9a6236c7f9f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:93

      delete process.env['GOOGLE_GENAI_USE_VERTEXAI'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #adf648d855fdfe39 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:96

      process.env['GOOGLE_GENAI_USE_GCA'] = originalEnvGcp;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c4aa30ff69a4a0d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:98

      delete process.env['GOOGLE_GENAI_USE_GCA'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c0efae2d02116a83 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:132

    process.env['GOOGLE_GENAI_USE_GCA'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c959b505281c3979 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:145

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #64fe5cbac7d2eb1f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:158

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e9a687da6ee0e2c7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:159

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e469c75ea1133a5c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:160

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1dc1dcaa5a9837c8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:173

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e623e1abe0ecffd9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:174

    process.env['GOOGLE_API_KEY'] = 'vertex-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74059d202dc7de40 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:187

    process.env['GOOGLE_GENAI_USE_GCA'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b8b83eb5d8331cc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:188

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c3e5696088d05b97 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:189

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dd7f675fb0fa0eb5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:190

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #948e65169edd10a2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:191

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #107a4ea2b8ab053c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:204

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cff836c8e0c1ea3d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:205

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d6eee280ba2ddcf7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:206

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6573f0b2fd21e5c1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:207

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ac7a46a41b50ad77 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:220

    process.env['GOOGLE_GENAI_USE_VERTEXAI'] = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #87829fa4c6dde094 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:221

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0276afc68e0c903d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:222

    process.env['GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #602f8c0e53f8d1a3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:223

    process.env['GOOGLE_CLOUD_LOCATION'] = 'us-central1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fe1fa91cdcf9124d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:236

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a65fd46730083e9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:299

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c8f3b94d2234a87 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:339

    process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb2a417b560ab74d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/src/validateNonInterActiveAuth.test.ts:436

      process.env['GEMINI_API_KEY'] = 'fake-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ed2fcb6066a90d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:17

if (process.env.CI !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3f0af830ac6ac8a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:18

  delete process.env.CI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a05dff2034df1c1e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:27

if (process.env.NO_COLOR !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb9ca09c465209f5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:28

  delete process.env.NO_COLOR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e64faf40e40ecd9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:32

process.env.FORCE_COLOR = '3';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba4d5307fa0cde05 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:35

process.env.FORCE_GENERIC_KEYBINDING_HINTS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #051e7cf783c37bbe — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:38

process.env.TERM_PROGRAM = 'generic';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cf7db14103b290f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/cli/test-setup.ts:41

process.env.COLORTERM = 'truecolor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #87e405bfcecc446c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/scripts/bundle-browser-mcp.mjs:12

const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dbcf99a8d92d3bc1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/scripts/compile-windows-sandbox.js:54

  const systemRoot = process.env['SystemRoot'] || 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #696d4c4f7480ad83 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/a2a-client-manager.ts:77

      fetch(input, { ...init, dispatcher: this.a2aDispatcher } as RequestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #937c6302cea4798c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.test.ts:23

    originalGeminiCliHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5ba1c0aa00a33e00 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.test.ts:24

    process.env['GEMINI_CLI_HOME'] = tempDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a4a2fc360a8ca252 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.test.ts:30

      process.env['GEMINI_CLI_HOME'] = originalGeminiCliHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #53c088dc5c99e933 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.test.ts:32

      delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1ed652f0faeaacc6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.test.ts:46

    const content = await fs.readFile(ackPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6bf7c56387e767c7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.test.ts:76

    await fs.writeFile(ackPath, JSON.stringify(data), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a76aea532ee4782 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.ts:29

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d10e0ae0163cd6e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/acknowledgedAgents.ts:50

      await fs.writeFile(
        filePath,
        JSON.stringify(this.acknowledgedAgents, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #17ab385fc2210ae7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/agentLoader.test.ts:42

    await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #159ddd6e204fb207 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/agentLoader.test.ts:677

      await fs.writeFile(path.join(tempDir, 'other.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9aaa6e286f161f71 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/agentLoader.ts:338

      fileContent = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23f7623554903aa6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/agentLoader.ts:675

      const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05271226427cde37 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/auth-provider/http-provider.test.ts:30

      process.env['TEST_TOKEN'] = 'env-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d3ff5bd431a270b0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/auth-provider/http-provider.test.ts:41

      delete process.env['TEST_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e3da1da25cd050e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/auth-provider/http-provider.test.ts:99

      process.env['DYNAMIC_TOKEN'] = 'first';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d82594349209446d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/auth-provider/http-provider.test.ts:103

      process.env['DYNAMIC_TOKEN'] = 'second';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #971bf279e3ee8623 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/auth-provider/http-provider.test.ts:111

      delete process.env['DYNAMIC_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53407b3e2f2028fd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/auth-provider/value-resolver.ts:36

    const resolved = process.env[envVar];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87e9a568db3f0891 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/browser/browserManager.ts:586

    const sandboxType = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d622b3b4ff0dd6dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/registry.ts:296

      const sandboxType = process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0a48d58be315b6ea — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/registry_acknowledgement.test.ts:53

    originalGeminiCliHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #00e913d26de40429 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/registry_acknowledgement.test.ts:54

    process.env['GEMINI_CLI_HOME'] = tempDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf1118fd7ead5d0a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/registry_acknowledgement.test.ts:97

      process.env['GEMINI_CLI_HOME'] = originalGeminiCliHome;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #803e20d31e601cd3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/agents/registry_acknowledgement.test.ts:99

      delete process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1229cbf35b11be4e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/client_metadata.test.ts:27

  const originalCliVersion = process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b2ccf6c6c80209d4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/client_metadata.test.ts:44

    process.env['CLI_VERSION'] = originalCliVersion;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6524b94fe2e32a4e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments.test.ts:22

    delete process.env['GEMINI_EXP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c5274dcaf34c402 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments.ts:33

    if (process.env['GEMINI_EXP']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6839d4b8fae7509 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments.ts:35

        const expPath = process.env['GEMINI_EXP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e04260ee9623dca — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments.ts:37

        const content = await fs.promises.readFile(expPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #64af01a8a4bd5f2c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments_local.test.ts:38

    process.env['GEMINI_EXP'] = ''; // Clear env var

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c2e90f4ac8f2127b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments_local.test.ts:48

    delete process.env['GEMINI_EXP'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #efd986df17863bfa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments_local.test.ts:52

    process.env['GEMINI_EXP'] = '/tmp/experiments.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #547357d89919a797 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments_local.test.ts:75

    process.env['GEMINI_EXP'] = '/tmp/missing.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cde282eefb62de6d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments_local.test.ts:101

    process.env['GEMINI_EXP'] = '/tmp/experiments.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ef6f814663403b8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/experiments/experiments_local.test.ts:125

    process.env['GEMINI_EXP'] = '/tmp/invalid.json';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #123459badd98c37a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth-credential-storage.ts:117

      credsJson = await fs.readFile(oldFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e331c314e9aa721a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:137

      process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ee2ca78e386aac3c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:271

      const cachedGoogleAccount = fs.readFileSync(googleAccountPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #744afdb1427ac01f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:289

      await fs.promises.writeFile(credsPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #47f2119fd4514656 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:300

      await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fcec9dc282b7166a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:482

        const cachedGoogleAccount = fs.readFileSync(googleAccountPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ba41c56e0b6ba051 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:515

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6f57c5d24ab98888 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:588

        await fs.promises.writeFile(
          defaultCredsPath,
          JSON.stringify(defaultCreds),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b2a9cacfdb36b27c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:596

        await fs.promises.writeFile(envCredsPath, JSON.stringify(envCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1b4389057c2b3af0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:620

        await fs.promises.writeFile(envCredsPath, JSON.stringify(envCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #67ec2c0b1519ba98 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:646

        await fs.promises.writeFile(
          envCredsPath,
          JSON.stringify(byoidCredentials),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2a020e42a4d97bf1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:736

        const cachedContent = fs.readFileSync(googleAccountPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bfda29c18bfa1bae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:767

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2dfe7b49c3ca4322 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:800

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #63978d6f3d36ce20 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:1538

        await fs.promises.writeFile(credsPath, JSON.stringify(cachedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #371aec1bd73eebd9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:1546

        await fs.promises.writeFile(
          googleAccountPath,
          JSON.stringify(accountData),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46e85c2249e7f8f0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:1562

          fs.readFileSync(googleAccountPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0a53f7f322463cde — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:1589

        await fs.promises.writeFile(
          credsPath,
          JSON.stringify({ refresh_token: 'token' }),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dd1748d13bdc89b0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:1614

      process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5eaf0cd3d95ef624 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:1745

      await fs.promises.writeFile(credsPath, JSON.stringify(unencryptedCreds));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0ede0915953192c1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.test.ts:1777

      await fs.promises.writeFile(credsPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9ce16554d7e3d93 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:64

      process.env['GOOGLE_CLOUD_QUOTA_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d95eaf773dec4662 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:65

      process.env['GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df81bfc04520b407 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:66

      process.env['GOOGLE_CLOUD_PROJECT_ID'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a231e58415aaebf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:113

  return process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed47d26cf9f3e764 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:153

    process.env['GOOGLE_GENAI_USE_GCA'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bce1033d613f7dd3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:154

    process.env['GOOGLE_CLOUD_ACCESS_TOKEN']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de8fd93138695596 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:157

      access_token: process.env['GOOGLE_CLOUD_ACCESS_TOKEN'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e0b0b8e31d6de8d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:511

  const host = process.env['OAUTH_CALLBACK_HOST'] || '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b4f6e23bdd3ff90 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:637

      const portStr = process.env['OAUTH_CALLBACK_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c48a31b45cc2d5f7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:676

    process.env['GOOGLE_APPLICATION_CREDENTIALS'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfe6731361e13bb8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:681

      const keyFileString = await fs.readFile(keyFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #631d70e80df501c1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:729

    const response = await fetch(
      'https://www.googleapis.com/oauth2/v2/userinfo',
      {
        headers: {
          Authorization: `Bearer ${token}`,
        },
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5589430fce1f4133 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/oauth2.ts:765

  await fs.writeFile(filePath, credString, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e1a02587836aa1b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/server.test.ts:358

      process.env['CODE_ASSIST_ENDPOINT'] = 'https://custom-endpoint.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1d67671122ad31e0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/server.test.ts:365

      process.env['CODE_ASSIST_API_VERSION'] = 'v2beta';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9bbc4400c5efde08 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/server.test.ts:372

      process.env['CODE_ASSIST_API_VERSION'] = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #228fa1ff0b2535fc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/server.ts:522

      process.env['CODE_ASSIST_ENDPOINT'] ?? CODE_ASSIST_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a968f1fbb93e29e4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/server.ts:524

      process.env['CODE_ASSIST_API_VERSION'] || CODE_ASSIST_API_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7d91737ed992e56 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/setup.ts:130

    process.env['GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b53f743a29f50c97 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/code_assist/setup.ts:131

    process.env['GOOGLE_CLOUD_PROJECT_ID'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fe40d37b242d30f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:185

      await fs.writeFile(
        path.join(dir, 'SKILL.md'),
        `---\nname: ${name}\ndescription: ${description}\n---\nBody content here\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #45823c64eb1491f0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:229

      await fs.writeFile(
        path.join(memoryTempDir, '.extraction-state.json'),
        stateContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a1fe576fe38bef9e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:362

      await fs.writeFile(target, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #da7bfbdb05510462 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:366

      await fs.writeFile(
        path.join(patchDir, 'a-update.patch'),
        buildUpdatePatch(target, '- old\n', '- new\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #10e8744949efacdd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:372

      await fs.writeFile(sibling, 'topic A\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ed1b143542ce498 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:373

      await fs.writeFile(
        path.join(patchDir, 'b-topic.patch'),
        buildUpdatePatch(sibling, 'topic A\n', 'topic B\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5fdb0297f808ca08 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:405

      await fs.writeFile(
        path.join(patchDir, 'escape.patch'),
        buildCreationPatch(path.join(projectRoot, 'GEMINI.md'), 'Hi.\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0b90d1b533379013 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:443

        await fs.writeFile(
          path.join(patchDir, fileName),
          buildCreationPatch(targetPath, 'rejected\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3c81fdd96d0f981e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:472

      await fs.writeFile(
        path.join(patchDir, 'wrong-name.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'memory.md'),
          'rejected\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #026c57d11a2d0316 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:479

      await fs.writeFile(
        path.join(patchDir, 'sibling.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'notes.md'),
          'rejected\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2601dba8c575c9ae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:486

      await fs.writeFile(
        path.join(patchDir, 'settings.patch'),
        buildCreationPatch(path.join(globalMemoryDir, 'settings.json'), '{}\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6819afc73f7cf3ec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:490

      await fs.writeFile(
        path.join(patchDir, 'nested.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'GEMINI.md', 'nested.md'),
          'rejected\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d24fac9422dbac32 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:504

      await fs.writeFile(target, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #945af47eddb0da72 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:508

      await fs.writeFile(
        path.join(patchDir, 'MEMORY.patch'),
        buildUpdatePatch(target, '- old\n', '- accepted\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #583d78cef5e7c2b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:520

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe('- accepted\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a5a5184ddef696a0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:530

        await fs.writeFile(target, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fe51fddd28ffed0c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:534

        await fs.writeFile(
          path.join(patchDir, 'MEMORY.patch'),
          buildUpdatePatch(
            swapAsciiPathCase(target),
            '- old\n',
            '- accepted\n',
          ),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f8bb2878b3eb9b8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:553

        await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e5bb20617929b8a5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:564

      await fs.writeFile(memoryMd, '# Project Memory\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1ab5d2df264dd2c9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:578

      await fs.writeFile(path.join(patchDir, 'topic.patch'), multiHunkPatch);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a2232b6870c674dd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:587

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #447693ca0b513f90 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:590

      await expect(fs.readFile(memoryMd, 'utf-8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c96a114a1a313b76 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:603

      await fs.writeFile(memoryMd, '# Project Memory\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f8be9e277e9a1af6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:608

      await fs.writeFile(
        path.join(patchDir, 'orphan-topic.patch'),
        buildCreationPatch(target, '# Orphan Topic\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a0fc5f209db1dc45 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:623

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f5bc2fa18aeff579 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:632

      const memoryAfter = await fs.readFile(memoryMd, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6221337ad05c5816 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:654

      await fs.writeFile(
        path.join(patchDir, 'fresh-topic.patch'),
        buildCreationPatch(target, '# Fresh Topic\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c97f483fd6c53772 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:667

      const memoryAfter = await fs.readFile(memoryMd, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d478222bee2c3707 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:677

      await fs.writeFile(
        memoryMd,
        '# Project Memory\n- See later-topic.md for details.\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02799cca97b615a8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:685

      await fs.writeFile(
        path.join(patchDir, 'later-topic.patch'),
        buildCreationPatch(target, '# Later Topic\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c455d90b466d1f6f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:697

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #84443a8ebd7c38e6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:709

      await fs.writeFile(
        path.join(patchDir, 'GEMINI.patch'),
        buildCreationPatch(target, '# Personal preferences\n- prefer X\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9c2d5d5755bc500e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:721

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebc67fa398105071 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:731

      await fs.writeFile(target, '- prefer X\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aa69bb952b620891 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:735

      await fs.writeFile(
        path.join(patchDir, 'GEMINI.patch'),
        buildUpdatePatch(target, '- prefer X\n', '- prefer Y\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f8f7276b0d291a7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:747

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe('- prefer Y\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3ca52fce9a83859d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:757

        await fs.writeFile(target, '- prefer X\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3fe7490b95d732e1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:761

        await fs.writeFile(
          path.join(patchDir, 'GEMINI.patch'),
          buildUpdatePatch(
            swapAsciiPathCase(target),
            '- prefer X\n',
            '- prefer Y\n',
          ),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7bdf5325ecc95ca2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:780

        await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #816c483324d4204f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:789

      await fs.writeFile(
        path.join(patchDir, 'GEMINI.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'GEMINI.md'),
          'Prefer concise.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #117e0ac97452b529 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:814

      await fs.writeFile(memoryMd, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #15f7e82fd6945dae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:816

      await fs.writeFile(sibling, 'topic A\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dec8f106132f5185 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:820

      await fs.writeFile(
        path.join(patchDir, 'a-update.patch'),
        buildUpdatePatch(memoryMd, '- old\n', '- new\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b37eaaef9166901e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:824

      await fs.writeFile(
        path.join(patchDir, 'b-topic.patch'),
        buildUpdatePatch(sibling, 'topic A\n', 'topic B\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #db184ac9018c531d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:839

      await expect(fs.readFile(memoryMd, 'utf-8')).resolves.toBe('- new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aab1fbbe7a61c720 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:840

      await expect(fs.readFile(sibling, 'utf-8')).resolves.toBe('topic B\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f19f10273d0ab92e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:851

      await fs.writeFile(memoryMd, '- old\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e1f6ee49418dd78 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:856

      await fs.writeFile(
        path.join(patchDir, 'a-good.patch'),
        buildUpdatePatch(memoryMd, '- old\n', '- new\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #758833059a6e38b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:861

      await fs.writeFile(
        path.join(patchDir, 'b-stale.patch'),
        buildUpdatePatch(memoryMd, '- never existed\n', '- attempted\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e2d2e92294303f47 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:880

      await expect(fs.readFile(memoryMd, 'utf-8')).resolves.toBe('- new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aec7dc1696407146 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:892

      await fs.writeFile(
        path.join(patchDir, 'a.patch'),
        buildCreationPatch(path.join(memoryTempDir, 'a.md'), 'a\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #39ca0117cf79c8b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:896

      await fs.writeFile(
        path.join(patchDir, 'b.patch'),
        buildCreationPatch(path.join(memoryTempDir, 'b.md'), 'b\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9bcb377bd506276e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:918

      await fs.writeFile(
        path.join(patchDir, 'wrong-name.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'memory.md'),
          'Should be rejected.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3499c14adcf69f3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:927

      await fs.writeFile(
        path.join(patchDir, 'sibling.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'notes.md'),
          'Should be rejected.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #95133c188160580e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:936

      await fs.writeFile(
        path.join(patchDir, 'settings.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'settings.json'),
          '{"foo": 1}\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f61dff70d4f9222 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:945

      await fs.writeFile(
        path.join(patchDir, 'nested.patch'),
        buildCreationPatch(
          path.join(globalMemoryDir, 'GEMINI.md', 'nested.md'),
          'Should be rejected.\n',
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6986d91aa8a42412 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:992

      await fs.writeFile(target, 'pre-existing\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b7f4179b9140df97 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:996

      await fs.writeFile(
        path.join(patchDir, 'MEMORY.patch'),
        buildCreationPatch(target, 'replacement\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05ccbabb00b31acf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1009

      await expect(fs.readFile(target, 'utf-8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eefaff89bb1cd846 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1032

      await fs.writeFile(
        path.join(dir, 'SKILL.md'),
        `---\nname: ${name}\ndescription: ${description}\n---\nBody content here\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e950f4fa00aedee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1068

      const targetSkill = await fs.readFile(
        path.join(globalSkillsDir, 'my-skill', 'SKILL.md'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2ff9d4b42c7cdfa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1089

      const targetSkill = await fs.readFile(
        path.join(projectSkillsDir, 'my-skill', 'SKILL.md'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fad5f460eccef7dd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1121

      await fs.writeFile(path.join(targetDir, 'SKILL.md'), 'existing content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6b642c9156f233a5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1141

      await fs.writeFile(
        path.join(
          globalSkillsDir,
          'existing-gke-prs-troubleshooter',
          'SKILL.md',
        ),
        [
          '---',
          'name: gke-prs-troubleshooter',
          'description: Existing skill',
          '---',
          'Existing body content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #957c0453af61bb8b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1184

      await fs.writeFile(
        path.join(dir, 'SKILL.md'),
        `---\nname: ${name}\ndescription: ${description}\n---\nBody content here\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f0e6cfddc09ee173 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1290

      await fs.writeFile(
        path.join(skillsDir, 'update-skill.patch'),
        patchContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f6f63b0a8ad9a2d7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1311

      await fs.writeFile(
        path.join(memoryTempDir, '.extraction-state.json'),
        JSON.stringify({
          runs: [
            {
              runAt: '2025-02-01T00:00:00Z',
              sessionIds: ['later-run'],
              skillsCreated: [],
            },
          ],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #483430d42f66b91a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1324

      await fs.writeFile(
        path.join(skillsDir, 'first.patch'),
        [
          `--- ${firstTarget}`,
          `+++ ${firstTarget}`,
          '@@ -1,1 +1,1 @@',
          '-before',
          '+after',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f08d3cda07ab8ff4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1335

      await fs.writeFile(
        path.join(skillsDir, 'second.patch'),
        [
          `--- ${secondTarget}`,
          `+++ ${secondTarget}`,
          '@@ -1,1 +1,1 @@',
          '-before',
          '+after',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #62c740246eb5b114 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1371

      await fs.writeFile(
        path.join(skillsDir, 'empty.patch'),
        'not a valid patch',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f99f60173962b059 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1418

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ded5cf482e37f2fa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1431

      await fs.writeFile(patchPath, patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #29268b76029059d4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1439

      const modified = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aad9fa800090d67f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1449

      await fs.writeFile(file1, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1e29376d4dc97b0e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1450

      await fs.writeFile(file2, 'xxx\nyyy\nzzz\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #42c745e8b6e7c633 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1469

      await fs.writeFile(path.join(skillsDir, 'multi.patch'), patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1b80d74410268101 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1476

      expect(await fs.readFile(file1, 'utf-8')).toContain('bbb2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #155b0a0431b05a71 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1477

      expect(await fs.readFile(file2, 'utf-8')).toContain('yyy2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #962cfc0fe4fb7301 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1482

      await fs.writeFile(targetFile, 'alpha\nbeta\ngamma\ndelta\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a7b5ce7ceeb5e2f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1484

      await fs.writeFile(
        path.join(skillsDir, 'multi-section.patch'),
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,4 +1,5 @@',
          ' alpha',
          ' beta',
          '+beta2',
          ' gamma',
          ' delta',
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -2,4 +2,5 @@',
          ' beta',
          ' beta2',
          ' gamma',
          '+gamma2',
          ' delta',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #33b7c42d62731bce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1511

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c8be54c022c212fa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1518

      await fs.writeFile(targetFile, 'original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9df55f7eef3a70b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1521

      await fs.writeFile(
        patchPath,
        [
          '--- /dev/null',
          `+++ ${targetFile}`,
          '@@ -0,0 +1 @@',
          '+replacement content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e4c3c8c504553d83 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1536

      expect(await fs.readFile(targetFile, 'utf-8')).toBe('original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca56662892636f82 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1549

      await fs.writeFile(outsidePatch, 'outside patch content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ce9673eff054944 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1570

      await fs.writeFile(
        path.join(skillsDir, 'bad-target.patch'),
        patchContent,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8cf4dbaa1d4c9214 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1583

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d074400e8899fcf5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1596

      await fs.writeFile(patchPath, patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74f220334bf5fa91 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1604

      expect(await fs.readFile(outsideFile, 'utf-8')).not.toContain('line2.5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f745b0db7c7dfbac — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1619

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #acc8fa4ea206b57e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1622

      await fs.writeFile(
        patchPath,
        [
          `--- ${path.join(linkDir, 'escaped.md')}`,
          `+++ ${path.join(linkDir, 'escaped.md')}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #91a37c1357ff4298 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1642

      expect(await fs.readFile(outsideFile, 'utf-8')).not.toContain('line2.5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f37bdb6f32f463ef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1647

      await fs.writeFile(
        path.join(skillsDir, 'empty.patch'),
        [
          `--- ${path.join(projectSkillsDir, 'target.md')}`,
          `+++ ${path.join(projectSkillsDir, 'target.md')}`,
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2c09cb155083df51 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1664

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d3de06ffd58c3fac — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1667

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #08e6e2e7054ab3f5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1691

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ac7b4b0eb88aeea1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1712

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2f9e5be52bed6bce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1715

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #60629fc63cb7d0a8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1742

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4a1a842c97a3e95b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1751

      await fs.writeFile(sourceFile, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #731fe934eaf2a628 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1752

      await fs.writeFile(targetFile, 'xxx\nyyy\nzzz\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3b2dd21d14bdbe2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1755

      await fs.writeFile(
        patchPath,
        [
          `--- ${sourceFile}`,
          `+++ ${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' xxx',
          ' yyy',
          '+yyy2',
          ' zzz',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #25b5efa4186c5a44 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1776

      expect(await fs.readFile(sourceFile, 'utf-8')).toBe('aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5ee92cc11ea55723 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1777

      expect(await fs.readFile(targetFile, 'utf-8')).toBe('xxx\nyyy\nzzz\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #69a8ffa6ca45203c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1783

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #458b5757ea660867 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1786

      await fs.writeFile(
        patchPath,
        [
          `--- a/${targetFile}`,
          `+++ b/${targetFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bc8a5ff3d5371469 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1804

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d969729d226c48b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1812

      await fs.writeFile(file1, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cfc97190ee11fbaf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1832

      await fs.writeFile(path.join(skillsDir, 'partial.patch'), patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #827b195ee566af5d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1838

      const content = await fs.readFile(file1, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f85c83994eb2e7df — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1844

      await fs.writeFile(file1, 'aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #36e4109593faf452 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1850

      await fs.writeFile(
        patchPath,
        [
          `--- ${file1}`,
          `+++ ${file1}`,
          '@@ -1,3 +1,4 @@',
          ' aaa',
          ' bbb',
          '+bbb2',
          ' ccc',
          '--- /dev/null',
          `+++ ${conflictPath}`,
          '@@ -0,0 +1 @@',
          '+new file content',
          '--- /dev/null',
          `+++ ${nestedNewFile}`,
          '@@ -0,0 +1 @@',
          '+nested new file content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbdc351331e2d850 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1876

      expect(await fs.readFile(file1, 'utf-8')).toBe('aaa\nbbb\nccc\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #83672d7c74c8ccc0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1906

      await fs.writeFile(patchPath, 'some patch content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2c674abf0cdf2079 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.test.ts:1927

      await fs.writeFile(outsidePatch, 'outside patch content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15734a949e06dd24 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.ts:156

      content = await fs.readFile(skillPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d8ce28dc50a79c1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.ts:469

        content = await fs.readFile(sourcePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96bceced15565e95 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.ts:730

      originalContent = await fs.readFile(memoryMdPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abe6fa8538733986 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.ts:790

    content = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc773bcb81f1f24c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.ts:1042

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7214726fd79d2efa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.ts:1162

      const content = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51b7db51c9408348 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/commands/memory.ts:1205

    content = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #456c9ea0acaee195 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/config-agents-reload.test.ts:58

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #857f1476868c83ae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/config-agents-reload.test.ts:118

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e9daf2776f0d967a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/config-agents-reload.test.ts:160

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #db7d0532d837f475 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/config-agents-reload.test.ts:202

    await fs.writeFile(agentPath, agentContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebae1cbe7e345230 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/config.ts:2162

    const seatbeltProfile = process.env['SEATBELT_PROFILE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a4496fa34743a9e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/config.ts:3844

      process.env['GEMINI_CLI_EXP_AGENT'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3017e42dcb2c7410 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/config.ts:3851

      process.env['GEMINI_CLI_EXP_AGENT'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33be694bf4779efa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/extensions/integrity.ts:88

      const key = await fs.promises.readFile(this.fallbackKeyPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bacc654d19c143ce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/extensions/integrity.ts:100

        await fs.promises.writeFile(this.fallbackKeyPath, key, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ed6fe2b72310732 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/extensions/integrity.ts:127

      content = await fs.promises.readFile(this.integrityStorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #415b91e3c633293d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/extensions/integrity.ts:183

    await fs.promises.writeFile(tmpPath, JSON.stringify(finalData, null, 2), {
      mode: 0o600,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #50322bd0921284a5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:92

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ada496294f208b2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:121

    expect(normalizePath(fs.readFileSync(marker1, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c9c8a9ef3d76e9ab — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:122

    expect(normalizePath(fs.readFileSync(marker2, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2c3186d900931a37 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:131

    fs.writeFileSync(path.join(slugDir, '.project_root'), projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d8616d56f6610bd0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:143

    expect(normalizePath(fs.readFileSync(marker2, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c7bd2d961415a2f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:152

    fs.writeFileSync(path.join(slugDir, '.project_root'), projectY);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #18219872b2c1ec47 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:168

    fs.writeFileSync(
      registryPath,
      JSON.stringify({
        projects: {
          [projectPath]: 'my-project',
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #65cc230b6cbbe43b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:180

    fs.writeFileSync(
      path.join(slugDir, '.project_root'),
      normalizePath(path.join(tempDir, 'project-b')),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a345951792a3e47e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:203

    fs.writeFileSync(path.join(slugDir1, '.project_root'), projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #59363f5207e65396 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:214

    expect(normalizePath(fs.readFileSync(marker2, 'utf8'))).toBe(projectPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #11989ae0ac34ce20 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:222

    fs.writeFileSync(
      registryPath,
      JSON.stringify({
        projects: {
          [projectPath]: slug,
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #63e4f27c33b77511 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:247

        fs.readFileSync(path.join(baseDir1, slug, '.project_root'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2caceaa343453f0c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:259

    fs.writeFileSync(
      path.join(slugDir, '.project_root'),
      normalizePath(path.join(tempDir, 'something-else')),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #75f7c7cd2f3aaff8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:265

    fs.writeFileSync(
      registryPath,
      JSON.stringify({
        projects: {
          [projectPath]: slug,
        },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #50b76ab2d4f8fd3b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:331

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a4f907b615a630b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:359

    fs.writeFileSync(
      registryPath,
      JSON.stringify({ projects: { '/foo': 'bar' } }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f4e277594068d222 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:380

    fs.writeFileSync(registryPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8cc12cdb480cdf2a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:392

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #21899a9753f4b86b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:399

    fs.writeFileSync(registryPath, JSON.stringify({ projects: [] }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f80fa347113050a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:411

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e1a76d3b7392331 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:419

    fs.writeFileSync(
      registryPath,
      JSON.stringify({ projects: { '/some/path': '../../etc/passwd' } }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27d7d1bff075fb6b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.test.ts:434

    const data = JSON.parse(fs.readFileSync(registryPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c74cc7cfc3ec462e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:64

      const content = await fs.promises.readFile(this.registryPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb7e42a63c46a994 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:117

      await fs.promises.writeFile(tmpPath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f07f51f9d246b231 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:249

        const owner = (await fs.promises.readFile(markerPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25b3da42d979acef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:287

              await fs.promises.readFile(markerPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #212dc45167fc4b9e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:330

              await fs.promises.readFile(markerPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a841faeb7d38f645 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:384

        const owner = (await fs.promises.readFile(markerPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0efbd70376b81718 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:397

        await fs.promises.writeFile(markerPath, normalizedProject, {
          encoding: 'utf8',
          flag: 'wx',
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c36b5ab892be546f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/projectRegistry.ts:404

          const owner = (await fs.promises.readFile(markerPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #68590f8ba2a90c30 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.test.ts:409

  const originalEnv = process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d0240e4e2a8236a6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.test.ts:413

      process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fedbfc586160ed67 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.test.ts:415

      delete process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7fae9c01ab377eaa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.test.ts:420

    delete process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b70e070d9d8ea82 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.test.ts:438

    process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] = customPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b2a038e77ba0f875 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.test.ts:443

    process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0ded2f5ec61fad6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.ts:91

    if (process.env['GEMINI_CLI_TRUSTED_FOLDERS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7d00d113c07dd35 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.ts:92

      return process.env['GEMINI_CLI_TRUSTED_FOLDERS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fed526bd5f650e71 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.ts:144

    if (process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31638e37ca349a7e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.ts:145

      return process.env['GEMINI_CLI_SYSTEM_SETTINGS_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3891d784733721ca — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storage.ts:404

      const content = await fs.promises.readFile(absolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec2022727ac90bf0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:32

    fs.writeFileSync(path.join(oldPath, 'test.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f21be8eaa3aae94d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:38

    expect(fs.readFileSync(path.join(newPath, 'test.txt'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a83bfa57dd0e19cb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:57

    fs.writeFileSync(path.join(oldPath, 'old.txt'), 'old');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #59462968702b97f9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:58

    fs.writeFileSync(path.join(newPath, 'new.txt'), 'new');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0038cd32a620e6c9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:72

    fs.writeFileSync(path.join(oldPath, 'history.db'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2d68f70473dbb322 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:73

    fs.writeFileSync(path.join(newPath, '.project_root'), 'path');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ebeefc07aa93faa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:78

    expect(fs.readFileSync(path.join(newPath, 'history.db'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #66e291a1896140a8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/config/storageMigration.test.ts:81

    expect(fs.readFileSync(path.join(newPath, '.project_root'), 'utf8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #3b96d17456d01285 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/confirmation-bus/message-bus.test.ts:280

      const requestPromise = subagentBus.request<
        ToolConfirmationRequest,
        ToolConfirmationResponse
      >(request, MessageBusType.TOOL_CONFIRMATION_RESPONSE, 2000);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3ee9db7b4d4c11a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/confirmation-bus/message-bus.test.ts:323

      const requestPromise = subagentBus2.request<
        ToolConfirmationRequest,
        ToolConfirmationResponse
      >(request, MessageBusType.TOOL_CONFIRMATION_RESPONSE, 2000);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #eb15caa5224378d3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/config/configLoader.test.ts:45

    await fs.writeFile(sidecarPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b6402ecc6d96a849 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/config/configLoader.test.ts:60

    await fs.writeFile(sidecarPath, JSON.stringify(validConfig));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9abc5db1de7d4c9b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/config/configLoader.test.ts:76

    await fs.writeFile(sidecarPath, JSON.stringify(invalidConfig));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #725d8b26e058a1f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/config/configLoader.test.ts:83

    await fs.writeFile(sidecarPath, '   \n  ');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aec6d4011159c594 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/config/configLoader.ts:29

  const fileContent = await fs.readFile(sidecarPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc1701b014660924 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/contextCompressionService.ts:64

        const data = await fs.readFile(this.stateFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35ecf904fca7cfd9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/contextCompressionService.ts:98

      await fs.writeFile(
        this.stateFilePath,
        JSON.stringify(obj, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ceeb8dff7ea487b4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/initializer.ts:84

    enabled: !!process.env['GEMINI_CONTEXT_TRACE_DIR'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fddacc2f4ad97515 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/initializer.ts:130

        !!process.env['GEMINI_CONTEXT_CALIBRATE_TOKEN_CALCULATIONS'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ce1a2a08dd61e15 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/processors/blobDegradationProcessor.ts:70

          await fs.writeFile(filePath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5b500f4400a128a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/processors/toolMaskingProcessor.ts:126

        await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #747e18ce47b16bcb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/toolOutputMaskingService.ts:190

      await fsPromises.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #65083ac41d473042 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/tracer.test.ts:54

    const initTraceLog = readFileSync(traceLogPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3195ee16a6487ba0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/tracer.test.ts:61

    const smallTraceLog = readFileSync(traceLogPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a40e0bb128fb75b5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/tracer.test.ts:79

    const largeTraceLog = readFileSync(traceLogPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f28907ab4db5a372 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/tracer.ts:29

      process.env['GEMINI_CONTEXT_TRACE_DIR'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2a0c9e7760558e7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/context/tracer.ts:94

      fsSync.writeFileSync(assetPath, JSON.stringify(data, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38bb59b2ce625d83 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:81

  if (process.env['GOOGLE_GENAI_USE_GCA'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab474e1a540825be — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:84

  if (process.env['GOOGLE_GENAI_USE_VERTEXAI'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d763afb9fe65077a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:87

  if (process.env['GOOGLE_GEMINI_BASE_URL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3d22e32e2aba63d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:90

  if (process.env['GEMINI_API_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42d4c15c904600a3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:94

    process.env['CLOUD_SHELL'] === 'true' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c05c4bae799e917b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:95

    process.env['GEMINI_CLI_USE_COMPUTE_ADC'] === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0074050780b0809 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:169

    process.env['GEMINI_API_KEY'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67f5ad2e961ff57d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:172

  const googleApiKey = process.env['GOOGLE_API_KEY'] || undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #366cf90d78ae365c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:174

    process.env['GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f491f032c6c65ec — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:175

    process.env['GOOGLE_CLOUD_PROJECT_ID'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50aafe07e211440f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:177

  const googleCloudLocation = process.env['GOOGLE_CLOUD_LOCATION'] || undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad937eb2863f5b35 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:198

      apiKey || process.env['GEMINI_API_KEY'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c80954f14accab5f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:238

      process.env['GEMINI_CLI_CUSTOM_HEADERS'] || undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69733f9538e9ca0b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:256

      const vscodeVersion = process.env['TERM_PROGRAM_VERSION'] || 'unknown';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #144752eddc4ea336 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:260

          process.env['CLOUD_SHELL_VERSION'] || 'unknown';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e84d41f26bbacf61 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:274

      process.env['GEMINI_API_KEY_AUTH_MECHANISM'] || 'x-goog-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4722bcb5a6b75e6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:275

    const apiVersionEnv = process.env['GOOGLE_GENAI_API_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #734a72373377776c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:348

            ? process.env['GOOGLE_VERTEX_BASE_URL']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92873144c5ece456 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:349

            : process.env['GOOGLE_GEMINI_BASE_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffbe63a3ca40e5eb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/contentGenerator.ts:354

          const location = process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1f310972039178c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/fakeContentGenerator.ts:74

    const fileContent = await promises.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d50fc681a34ad096 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:60

    const content = await fs.readFile(TEST_LOG_FILE_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #85b796664d70643f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:149

      await fs.writeFile(
        TEST_LOG_FILE_PATH,
        JSON.stringify(existingLogs, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #baa63e07b1f617ec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:173

      await fs.writeFile(
        TEST_LOG_FILE_PATH,
        JSON.stringify(existingLogs, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5ba1b270978cf67d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:197

      await fs.writeFile(TEST_LOG_FILE_PATH, 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b47456ea03898662 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:222

      await fs.writeFile(
        TEST_LOG_FILE_PATH,
        JSON.stringify({ not: 'an array' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f304449a7b1da88 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:447

      const fileContent = await fs.readFile(taggedFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c2ad4680556b55f2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:480

      await fs.writeFile(
        TEST_CHECKPOINT_FILE_PATH,
        JSON.stringify(conversation, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ef5ecc8597b856a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:516

      await fs.writeFile(
        taggedFilePath,
        JSON.stringify(taggedConversation, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0b87b1e87478965e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:534

      await fs.writeFile(taggedFilePath, JSON.stringify(conversation, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2bbf6d9ff033ad3e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:558

      await fs.writeFile(taggedFilePath, 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e0b95dd159297039 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:601

      await fs.writeFile(taggedFilePath, JSON.stringify(conversation));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cce2eea44695ac3a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:621

      await fs.writeFile(oldStylePath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #588dcc5c6d43f434 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:622

      await fs.writeFile(newStylePath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ed39ff317f1edd27 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:692

      await fs.writeFile(taggedFilePath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74db72a011711fca — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.test.ts:749

      await fs.writeFile(
        taggedFilePath,
        JSON.stringify(taggedConversation, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4b5ec3831f66522 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.ts:90

      const fileContent = await fs.readFile(this.logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f99a3d70a830cf3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.ts:161

        await fs.writeFile(this.logFilePath, '[]', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4de1782fdd5a712 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.ts:230

      await fs.writeFile(
        this.logFilePath,
        JSON.stringify(currentLogsOnDisk, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cb9fac54504ca42 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.ts:339

      await fs.writeFile(path, JSON.stringify(checkpoint, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fd94f889742ac11 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/logger.ts:355

      const fileContent = await fs.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cb2b2707f566f09 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/core/loggingContentGenerator.ts:216

      const location = process.env['GOOGLE_CLOUD_LOCATION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90376a19981e7897 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/hooks/trustedHooks.ts:37

        const content = fs.readFileSync(this.configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e41e41efb3f874c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/hooks/trustedHooks.ts:53

      fs.writeFileSync(
        this.configPath,
        JSON.stringify(this.trustedHooks, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fcc993a7034aaf5e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.test.ts:39

    delete process.env['CURSOR_TRACE_ID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #079bb616a8c080a4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:40

  return !!(process.env['EDITOR_IN_CLOUD_SHELL'] || process.env['CLOUD_SHELL']);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfe3e3b0a4ef96fd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:44

  return !!process.env['TERMINAL_EMULATOR']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c925dc40997c3f2d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:50

  if (process.env['ANTIGRAVITY_CLI_ALIAS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b774fd28dc91610c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:53

  if (process.env['__COG_BASHRC_SOURCED']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #766268c72776899b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:56

  if (process.env['REPLIT_USER']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1165cfcf2c1428d3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:59

  if (process.env['CURSOR_TRACE_ID']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #694cb7ab8186dc86 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:62

  if (process.env['CODESPACES']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efc38624ef2f8233 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:68

  if (process.env['TERM_PRODUCT'] === 'Trae') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b75364fe08c01fa9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:71

  if (process.env['MONOSPACE_ENV']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b06446dd96ebdbf3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:74

  if (process.env['POSITRON'] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48f16e5c66ce3b4d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:77

  if (process.env['TERM_PROGRAM'] === 'sublime') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e7b5a2ed416cad4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:80

  if (process.env['ZED_SESSION_ID'] || process.env['TERM_PROGRAM'] === 'Zed') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #323d4fa5f4ad7170 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:83

  if (process.env['XCODE_VERSION_ACTUAL']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25057565815fe4a4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:160

    process.env['TERM_PROGRAM'] !== 'vscode' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #318f7ceb33c6794f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:161

    process.env['TERM_PROGRAM'] !== 'sublime' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1839ec62921ad6b9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:162

    process.env['TERM_PROGRAM'] !== 'Zed' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e3c2320fc3cbf55 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:163

    !process.env['ZED_SESSION_ID'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c6870709f522273 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/detect-ide.ts:164

    !process.env['XCODE_VERSION_ACTUAL'] &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30de3556ded3ec54 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.test.ts:65

    process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'] = '/test/workspace';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b7d0241ccc5bcfa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.test.ts:66

    delete process.env['GEMINI_CLI_IDE_SERVER_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #29ae8fa25b81d489 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.test.ts:67

    delete process.env['GEMINI_CLI_IDE_SERVER_STDIO_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #192df1b5e19e508d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.test.ts:68

    delete process.env['GEMINI_CLI_IDE_SERVER_STDIO_ARGS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #39f487dc47a1bb82 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.test.ts:69

    delete process.env['GEMINI_CLI_IDE_AUTH_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #353431e340db0b70 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.test.ts:589

      process.env['GEMINI_CLI_IDE_AUTH_TOKEN'] = 'env-auth-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1012f5db0f7f7c4b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.ts:142

      connectionConfig?.authToken ?? process.env['GEMINI_CLI_IDE_AUTH_TOKEN'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a542e9a63d411033 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.ts:146

      process.env['GEMINI_CLI_IDE_WORKSPACE_PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #646bfe29b28847b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.ts:234

      this.client
        .request(
          {
            method: 'tools/call',
            params: {
              name: `openDiff`,
              arguments: {
                filePath,
                newContent,
              },
            },
          },
          CallToolResultSchema,
          { timeout: IDE_REQUEST_TIMEOUT_MS },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #95f701f7a4415c92 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.ts:316

      const resultData = await this.client.request(
        {
          method: 'tools/call',
          params: {
            name: `closeDiff`,
            arguments: {
              filePath,
              suppressNotification: options?.suppressNotification,
            },
          },
        },
        CallToolResultSchema,
        { timeout: IDE_REQUEST_TIMEOUT_MS },
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #12d2e74328a2464d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-client.ts:441

      const response = await this.client.request(
        { method: 'tools/list', params: {} },
        ListToolsResultSchema,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ddb0289bf15465fd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:75

  const port = process.env['GEMINI_CLI_IDE_SERVER_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e0c36d9286f3608 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:83

  const command = process.env['GEMINI_CLI_IDE_SERVER_STDIO_COMMAND'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e1a4ec275335626 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:88

  const argsStr = process.env['GEMINI_CLI_IDE_SERVER_STDIO_ARGS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2a559460ad45840 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:125

    const portFileContents = await fs.promises.readFile(portFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91fb10153a46d91d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:171

        fs.promises.readFile(path.join(portFileDir, file), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77a531cc23e42440 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:310

  const existingNoProxy = process.env['NO_PROXY'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1d24333a2d7c9c6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:356

  return !!process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e12b90ea4444ee0e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:361

    process.env['VSCODE_REMOTE_CONTAINERS_SESSION'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20f7305933d9d6b8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-connection-utils.ts:362

    process.env['REMOTE_CONTAINERS']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa4cff4a46c4be10 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-installer.ts:120

            process.env['ProgramFiles'] || 'C:\\Program Files',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51b707e8dbabfe6b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/ide-installer.ts:255

    const envCommand = process.env['ANTIGRAVITY_CLI_ALIAS'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9333841e1f17a932 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/process-utils.ts:229

  if (process.env['GEMINI_CLI_IDE_PID']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce0b40651fd78ea8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/ide/process-utils.ts:230

    const idePid = parseInt(process.env['GEMINI_CLI_IDE_PID'], 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #3a4af99bcfe6ec14 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/mcp-oauth-provider.test.ts:63

      const authUrl = new URL('http://auth.example.com/authorize');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9340d62350f6d785 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-provider.ts:114

    const response = await fetch(registrationUrl, {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
      },
      body: JSON.stringify(registrationRequest),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #32c107ec6f46f228 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-provider.ts:303

        const response = await fetch(mcpServerUrl, {
          method: 'HEAD',
          headers,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d1744a47bdff6c2c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-token-storage.ts:31

    process.env[FORCE_ENCRYPTED_FILE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53a052481f39f30a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-token-storage.ts:72

      const data = await fs.readFile(tokenFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc36f68cf13b3db5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-token-storage.ts:113

      await fs.writeFile(
        tokenFile,
        JSON.stringify(tokenArray, null, 2),
        { mode: 0o600 }, // Restrict file permissions
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d5d8ae2faffa2a2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-token-storage.ts:204

          await fs.writeFile(tokenFile, JSON.stringify(tokenArray, null, 2), {
            mode: 0o600,
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #17b2c991147b5a17 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-utils.ts:100

      const response = await fetch(resourceMetadataUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2f104f03305d5fd5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/oauth-utils.ts:124

      const response = await fetch(authServerMetadataUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #23c5a15cb130f42a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/mcp/token-storage/hybrid-token-storage.ts:28

    const forceFileStorage = process.env[FORCE_FILE_STORAGE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #690231d6f331682d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/config.test.ts:119

      return (
        await vi.importActual<typeof import('node:fs/promises')>(
          'node:fs/promises',
        )
      ).readFile(p);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #379bc5f22f87fe87 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/config.ts:808

              const fileContent = await fs.readFile(policyFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72ee1a4bcdb58061 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/config.ts:892

              await handle.writeFile(newContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #601a9b30512367f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:39

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5cf6645eebebee6f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:55

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a209bc82abf12e84 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:66

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({ 'workspace:id': currentHash }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8eeec6f8766233a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:83

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d8886fa72defdd73 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:93

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({ 'workspace:id': 'different_hash' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b787641a49dfdad8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:110

      await fs.writeFile(path.join(policyDir1, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #16bab81d765c7e65 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:120

      await fs.writeFile(path.join(policyDir2, 'b.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f9bb5e833a1f6a8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:135

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #353f3ae04a6cb3f9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:142

      await fs.writeFile(path.join(policyDir, 'a.toml'), 'contentB');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a653a3295da0fef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:155

      await fs.writeFile(path.join(policyDir1, 'a.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #60cafec02eb9b84a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:156

      await fs.writeFile(path.join(policyDir1, 'b.toml'), 'contentB');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c4ad3cb77599dc83 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:178

      await fs.writeFile(path.join(dirA, 'p.toml'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eeb1c42f05bf4f5e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:182

      await fs.writeFile(path.join(dirB, 'p.toml'), 'contentB');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #14711fed12e35a41 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:196

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({
          'workspace:idA': hashA,
          'workspace:idB': 'oldHashB',
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b2f6a78702ec5ad3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:229

        await fs.readFile(integrityStoragePath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ad5678171042b6f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:235

      await fs.writeFile(
        integrityStoragePath,
        JSON.stringify({ 'other:id': 'otherhash' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a260b9cf7753490 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.test.ts:243

        await fs.readFile(integrityStoragePath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce180d45abceb952 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.ts:123

      const content = await fs.readFile(storagePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #223903eadd3a2eae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/integrity.ts:148

      await fs.writeFile(storagePath, JSON.stringify(data, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5018a97b537a8ec0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:76

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f5a569ab42abfe0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:98

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2a1b7fa4afb1d710 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:129

    memfs.writeFileSync(policyFile, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3fb1b88c0275aff0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:139

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1b35bfb99d1ba63f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:161

    memfs.writeFileSync(policyFile, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7a067440657e10c8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:171

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8893bcab9e1fe705 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:192

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a85d0523623e1903 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:211

    const writtenContent = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #facf9a6c5e5c26d1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:251

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6054dd75790c5ae3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:411

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a500d13fe1a78ede — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:430

    memfs.writeFileSync(policyFile, existingContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a2e49242bb8a41ae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:442

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #89be1d973b4d89f5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:501

    memfs.writeFileSync(policyFile, 'this is not valid toml ][[[');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #38eb6ffe9b28393a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/persistence.test.ts:519

    const content = memfs.readFileSync(policyFile, 'utf-8') as string;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02c029f1ce4eabde — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/sandboxPolicyManager.ts:59

        const content = fs.readFileSync(defaultPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e0117fae0910cc9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/sandboxPolicyManager.ts:118

      const content = fs.readFileSync(this.configPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc6f5e35bf390133 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/sandboxPolicyManager.ts:134

      fs.writeFileSync(this.configPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c44094d1f71b5627 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:59

    await fs.writeFile(path.join(tempDir, fileName), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0c6c96eff457e827 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:312

      await fs.writeFile(
        path.join(tempDir, 'tier4.toml'),
        `
[[rule]]
toolName = "tier4-tool"
decision = "allow"
priority = 100
modes = ["autoEdit"]
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c159ca00a741a387 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:433

      await fs.writeFile(
        path.join(tempDir, 'valid.toml'),
        `
[[rule]]
toolName = "glob"
decision = "allow"
priority = 100
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b38f96f1da0ec3e1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:443

      await fs.writeFile(
        path.join(tempDir, 'invalid.toml'),
        `
[[rule]]
toolName = "grep"
decision = "allow"
priority = -1
`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #49dbcacbc74882ac — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:661

      await fs.writeFile(
        filePath,
        '[[rule]]\ntoolName = "test-tool"\ndecision = "allow"\npriority = 500\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #368f21fda3b69e93 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:864

      const fileContent = await fs.readFile(planTomlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6dea8e51bcd0200a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:869

        await fs.writeFile(path.join(tempPolicyDir, 'plan.toml'), fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b87cf22a323e9ef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:982

      const planContent = await fs.readFile(planTomlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a5be651025200831 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:983

      const readOnlyContent = await fs.readFile(readOnlyTomlPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c6b9e001decf1cd7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:989

        await fs.writeFile(path.join(tempPolicyDir, 'plan.toml'), planContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7d8827e1f7c1d68f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.test.ts:990

        await fs.writeFile(
          path.join(tempPolicyDir, 'read-only.toml'),
          readOnlyContent,
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b342474a2347b3f1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/policy/toml-loader.ts:187

    const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36495bdeae20f4ad — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/prompts/promptProvider.ts:54

      process.env['GEMINI_SYSTEM_MD'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a508354c9081a65b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/prompts/promptProvider.ts:119

      basePrompt = fs.readFileSync(systemMdPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ce629ce239134dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/prompts/promptProvider.ts:326

      process.env['GEMINI_WRITE_SYSTEM_MD'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cebe31fe7e65aa9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/prompts/promptProvider.ts:333

      fs.writeFileSync(writePath, basePrompt);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8987b23df9fdfbe — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/prompts/promptProvider.ts:345

  if (process.env['SANDBOX'] === 'sandbox-exec') return 'macos-seatbelt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b6e87d9a2d04017 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/prompts/promptProvider.ts:346

  if (process.env['SANDBOX']) return 'generic';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1307cd8db26d6a25 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/prompts/utils.ts:110

  const envVar = process.env[`GEMINI_PROMPT_${key.toUpperCase()}`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #110264a5603702c3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:57

    await fs.writeFile(filePath, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #289dcb42fa9e332a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:67

    await fs.writeFile(filePath, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a0d38c3168f5e5c6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:78

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12567c36d8cd3489 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:87

    await fs.writeFile(secretPath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d3f562902075257c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:98

    await fs.writeFile(passwdPath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b5780e7d0106e904 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:100

    await fs.writeFile(srcPath, 'source content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c8ea25c85ec8428 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:123

    await fs.writeFile(targetPath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f8a8761e7b862a54 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:139

    await fs.writeFile(realFilePath, 'real content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4deaac201ef67d90 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:152

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f9f11bf15ff4744c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:165

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #45f2a4da285ee862 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:178

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #31af6893b5a0977a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:198

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b76ea7b0bab80c67 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:213

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #63942c8a46062a24 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/safety/built-in.test.ts:231

    await fs.writeFile(outsidePath, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fce350a6ab89b858 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/linux/LinuxSandboxManager.ts:102

  fs.writeFileSync(bpfPath, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f4e9e1e546eb148 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/linux/LinuxSandboxManager.ts:192

    fs.writeFileSync(maskPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54304913f16f37a4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/linux/LinuxSandboxManager.ts:346

    fs.writeFileSync(tempFile, content, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4a2fcac1e09a4461 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/macos/MacOsSandboxManager.test.ts:82

      expect(fs.readFileSync(tempFile, 'utf8')).toBe('(mock profile)');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00f6e986c902a336 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/macos/MacOsSandboxManager.ts:200

    fs.writeFileSync(tempFile, profile, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2172c9fef6d662a5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/macos/seatbeltArgsBuilder.ts:116

  if (process.env['PATH']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dda47326e7a8ad8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/macos/seatbeltArgsBuilder.ts:117

    const paths = process.env['PATH'].split(':');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #375fde68b069ca94 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/utils/fsUtils.ts:23

      const gitContent = await fs.readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac666f6d7d782f1b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/utils/fsUtils.ts:36

          const backlink = (await fs.readFile(backlinkPath, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fcdca078f445f35 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/utils/fsUtils.ts:45

            const config = await fs.readFile(configPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8cfc24f722eb2b6a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/utils/proactivePermissions.ts:130

    const appData = process.env['AppData'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d5cd56fbca41839 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/utils/proactivePermissions.ts:131

    const localAppData = process.env['LocalAppData'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bcf07f659e4d2e17 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:54

    const forbidden = fs
      .readFileSync(forbiddenPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #745d446e0cf61144 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:58

    const allowed = fs
      .readFileSync(allowedPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #420db06f107416ad — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:380

      fs.writeFileSync(longPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #91cfe88be046ff44 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:381

      fs.writeFileSync(devicePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #03618db72a09c987 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:490

    fs.writeFileSync(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4908ded03863ba24 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:507

    fs.writeFileSync(maliciousPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4247232394dd00d3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.test.ts:524

    fs.writeFileSync(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b9fc74f2875f41b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:124

          const systemRoot = process.env['SystemRoot'] || 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c29ccabd95bf4ae0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:425

    await fs.promises.writeFile(
      forbiddenManifestPath,
      Array.from(forbiddenManifest).join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d023e326190b4216 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:431

    await fs.promises.writeFile(
      allowedManifestPath,
      Array.from(allowedManifest).join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3d637a0aeaef950 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:468

    const systemRoot = process.env['SystemRoot'] || 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdc1dc604744cd5f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:469

    const programFiles = process.env['ProgramFiles'] || 'C:\\Program Files';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9ba52affade96fc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/sandbox/windows/WindowsSandboxManager.ts:471

      process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #94fca5784a052500 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:35

    await fs.writeFile(
      path.join(commandsDir, 'test-cmd.toml'),
      'prompt = "test"',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3de23fec1134a9ed — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:43

    await fs.writeFile(path.join(skillsDir, 'test-skill', 'SKILL.md'), 'body');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8377129c0cb22217 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:48

    await fs.writeFile(path.join(agentsDir, 'test-agent.md'), 'body');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c5cb881c37669464 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:61

    await fs.writeFile(
      path.join(geminiDir, 'settings.json'),
      JSON.stringify(settings),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf6b0ffd9c33856b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:94

    await fs.writeFile(
      path.join(geminiDir, 'settings.json'),
      JSON.stringify(settings),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e11790d38ec8bba9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:124

    await fs.writeFile(path.join(geminiDir, 'settings.json'), 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #33b2ab67d6e70101 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:135

    await fs.writeFile(path.join(geminiDir, 'settings.json'), 'null');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #adf14767e27add3b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:145

    await fs.writeFile(path.join(geminiDir, 'settings.json'), '[]');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #561d6335b9c6989d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:155

    await fs.writeFile(path.join(geminiDir, 'settings.json'), '"string"');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7613430757efc9fd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.test.ts:168

    await fs.writeFile(path.join(agentsDir, 'test-agent.md'), 'body');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe80035ef09dc252 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/FolderTrustDiscoveryService.ts:141

      const content = await fs.readFile(settingsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e436ad822ba01488 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:289

      fs.writeFileSync(
        sessionFile,
        JSON.stringify({ ...initialData, messages: undefined }) +
          '\n' +
          (initialData.messages || [])
            .map((m: unknown) => JSON.stringify(m))
            .join('\n') +
          '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b509b80eb36300f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:661

      fs.writeFileSync(sessionFile, JSON.stringify({ sessionId }) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ae198001c8a4b68 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:664

      fs.writeFileSync(logFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #038ef211ecc4c773 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:692

      fs.writeFileSync(
        sessionFile,
        JSON.stringify({ sessionId, messages: [] }, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3817e79ef86beb7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:699

      fs.writeFileSync(path.join(toolOutputDir, 'output.txt'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b0b3cb808ecb86c2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:717

      fs.writeFileSync(sessionFile, 'not-json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #69bcb1ae31122168 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:741

      fs.writeFileSync(
        parentFile,
        JSON.stringify({ sessionId: parentSessionId }) + '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3c41da7a532bf298 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:750

      fs.writeFileSync(
        subagentFile,
        JSON.stringify({ sessionId: subagentSessionId, kind: 'subagent' }) +
          '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b1353d0dbaf5fd97 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:758

      fs.writeFileSync(parentLog, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3eb709740198423 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:763

      fs.writeFileSync(subagentLog, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b84e974f71409b1f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:804

      fs.writeFileSync(
        parentFile,
        JSON.stringify({ sessionId: parentSessionId }) + '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ea8fff8e2beeef1d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:814

      fs.writeFileSync(
        subagentFile,
        JSON.stringify({ sessionId: subagentSessionId, kind: 'subagent' }) +
          '\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ed3b5af02b4c8a55 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:838

      fs.writeFileSync(sessionFile, JSON.stringify({ sessionId }) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eaae7276dfd926e9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:841

      fs.writeFileSync(logFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2f479847a76df4d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.test.ts:878

      fs.writeFileSync(path.join(toolOutputDir, 'output.txt'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e68bd8f31f5bdd2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/chatRecordingService.ts:978

    const fileContent = await fs.promises.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #26805408d34f677a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/fileDiscoveryService.test.ts:21

    await fs.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #360a587cd6ca52f0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/fileKeychain.ts:71

      const data = await fs.readFile(this.tokenFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97e4da9ef8435016 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/fileKeychain.ts:102

    await fs.writeFile(this.tokenFilePath, encrypted, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e64ab15d5ce5e440 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/fileSystemService.ts:35

    return fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08a030e7b1ff6eda — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/fileSystemService.ts:39

    await fs.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #56a60dedc69b35c6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.test.ts:200

      const actualConfigContent = await fs.readFile(gitConfigPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #feb0230f34d93a06 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.test.ts:225

      await fs.writeFile(visibleGitIgnorePath, gitignoreContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #56619577467c9272 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.test.ts:231

      const copiedContent = await fs.readFile(hiddenGitIgnorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1eb1649b7eb18853 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.test.ts:241

      const content = await fs.readFile(hiddenGitIgnorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e30d0b6683e6859d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.test.ts:304

      const systemConfigContent = await fs.readFile(
        path.join(repoDir, '.gitconfig_system_empty'),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1611d6b96b8af65 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.ts:140

    await fs.writeFile(gitConfigPath, gitConfigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0632c04f3f45b3f2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.ts:143

    await fs.writeFile(shadowRepoEnv.GIT_CONFIG_SYSTEM, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #280d563db98fb32f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.ts:169

      userGitIgnoreContent = await fs.readFile(userGitIgnorePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a113a70b86a1e767 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/gitService.ts:176

    await fs.writeFile(shadowGitIgnorePath, userGitIgnoreContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4d74a883008fd4c7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/keychainService.test.ts:201

      process.env['GEMINI_FORCE_FILE_STORAGE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #407f618b77a8080b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/keychainService.ts:101

    const forceFileStorage = process.env[FORCE_FILE_STORAGE_ENV_VAR] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d769dff5215973b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryPatchUtils.ts:536

    content = await fs.readFile(sourcePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ee067a76c2ccb4e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryPatchUtils.ts:744

        source = await fs.readFile(resolvedTargetPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #66802b56ff8ec9fc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:137

  await fs.writeFile(
    filePath,
    records.map((record) => JSON.stringify(record)).join('\n') + '\n',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1ae0c4d85b4d08bd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:173

      const content = JSON.parse(await fs.readFile(lockPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6087f0876975a669 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:187

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #258ce0f98e9a4690 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:203

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #34fc145e8a598491 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:208

      const content = JSON.parse(await fs.readFile(lockPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4d98eb201e3b2c7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:222

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #38425bedc9998f57 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:227

      const content = JSON.parse(await fs.readFile(lockPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a66dbf01996acd29 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:244

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #83e674b14e9029a9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:258

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f14af580358e2520 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:271

      await fs.writeFile(lockPath, JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c01b811857dcbbb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:290

      await fs.writeFile(lockPath, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ce030cf8d3b6baca — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:329

      await fs.writeFile(statePath, JSON.stringify(existingState));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #63c4c1019986cd4e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:378

      await fs.writeFile(
        lockPath,
        JSON.stringify({
          pid: process.pid,
          startedAt: new Date().toISOString(),
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7331e1f63f9e5a37 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:461

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-err00001.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3dd989c9f15640e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:522

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-skill001.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4bb4f46b1e1d58ef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:533

          await fs.writeFile(
            path.join(newSkillDir, 'SKILL.md'),
            '# My New Skill',
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c43d748603c04658 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:596

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-inbox001.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d29564b81934cb7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:606

          await fs.writeFile(
            path.join(inboxDir, 'private', 'MEMORY.patch'),
            [
              `--- /dev/null`,
              `+++ ${path.join(memoryDir, 'MEMORY.md')}`,
              `@@ -0,0 +1,1 @@`,
              `+- new project fact`,
              ``,
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #439d1f312f61a310 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:616

          await fs.writeFile(
            path.join(inboxDir, 'global', 'reply-style.patch'),
            [
              `--- /dev/null`,
              `+++ ${path.join(globalMemoryDir, 'GEMINI.md')}`,
              `@@ -0,0 +1,1 @@`,
              `+Prefer concise architecture summaries.`,
              ``,
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #278510b3a65f4d3b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:699

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-malformed.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7aa16ff23f52d443 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:715

          await fs.writeFile(
            malformedPatchPath,
            [
              `--- /dev/null`,
              `+++ ${path.join(memoryDir, 'MEMORY.md')}`,
              `@@ -0,0 +1,1 @@`,
              `+First extracted fact.`,
              `+Second extracted fact exceeds the declared hunk count.`,
              ``,
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3cbb0fc77f9f41b4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1142

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-brandnew.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c48eeb041ad33501 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1164

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-oldsess1.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #022a397ac5a07299 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1197

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-resumed01.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #08838213645b80c2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1230

      await fs.writeFile(
        path.join(chatsDir, fileName),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fb802e5ebe4121cd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1421

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-sub00001.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec558a2cb35af22d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1443

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-short001.json`,
        ),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3875a85c12029ce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1468

        await fs.writeFile(
          path.join(
            chatsDir,
            `${SESSION_FILE_PREFIX}2025-01-0${i + 1}T00-00-cap${paddedIndex}.json`,
          ),
          JSON.stringify(conversation),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0e8e94cab477add1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1493

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-01T00-00-proc0001.json`,
        ),
        JSON.stringify(oldConv),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #acce8a3abd30e212 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1506

      await fs.writeFile(
        path.join(
          chatsDir,
          `${SESSION_FILE_PREFIX}2025-01-02T00-00-fres0001.json`,
        ),
        JSON.stringify(newConv),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4f8240e9389742b9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1582

        await fs.writeFile(
          path.join(
            chatsDir,
            `${SESSION_FILE_PREFIX}2025-01-${day}T00-00-backlog${i}.json`,
          ),
          JSON.stringify(conversation),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46cbfdce24441b7e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1630

        await fs.writeFile(filePath, JSON.stringify(conversation));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a3b3b8ad864d8f5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1693

      await fs.writeFile(statePath, JSON.stringify(state));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f1cffaa88cbb6d0e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1778

      await fs.writeFile(
        statePath,
        JSON.stringify({ lastProcessed: '2025-01-01' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e72019fc4ce3c473 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1813

      await fs.writeFile(path.join(skillsDir, 'some-file.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c20dab1543a6ab54 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1838

      await fs.writeFile(patchPath, 'this is not a valid patch');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c29dfd4d8124bc33 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1855

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #45fffd3dfc5e41fd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1869

      await fs.writeFile(patchPath, patchContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3eee1b41ab0f5d99 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1885

      await fs.writeFile(targetFile, 'alpha\nbeta\ngamma\ndelta\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #68d84ef08d0a24cb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1888

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -1,4 +1,5 @@',
          ' alpha',
          ' beta',
          '+beta2',
          ' gamma',
          ' delta',
          `--- ${targetFile}`,
          `+++ ${targetFile}`,
          '@@ -2,4 +2,5 @@',
          ' beta',
          ' beta2',
          ' gamma',
          '+gamma2',
          ' delta',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af12f29897b9cbf2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1924

      await fs.writeFile(targetFile, 'original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #940b8b149235a3b8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1927

      await fs.writeFile(
        patchPath,
        [
          '--- /dev/null',
          `+++ ${targetFile}`,
          '@@ -0,0 +1 @@',
          '+replacement content',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5d4497fce6fa8a36 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1942

      expect(await fs.readFile(targetFile, 'utf-8')).toBe('original content\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c58988a0b27b4d00 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1952

      await fs.writeFile(targetFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2412f57d68913382 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1955

      await fs.writeFile(
        patchPath,
        [
          `--- ${targetFile}`,
          '+++ .gemini/skills/foo/SKILL.md',
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c8a618384938867 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1973

      expect(await fs.readFile(targetFile, 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca8ed84a057aa82b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:1983

      await fs.writeFile(
        patchPath,
        [
          `--- ${path.join(projectSkillsDir, 'target.md')}`,
          `+++ ${path.join(projectSkillsDir, 'target.md')}`,
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e4761a24ac4ebdf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2003

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e991228600d880b7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2006

      await fs.writeFile(
        patchPath,
        [
          `--- ${outsideFile}`,
          `+++ ${outsideFile}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1434612b5eb9564a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2042

      await fs.writeFile(outsideFile, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #39004fd9f15b6bee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2045

      await fs.writeFile(
        patchPath,
        [
          `--- ${path.join(linkedDir, 'escaped.md')}`,
          `+++ ${path.join(linkedDir, 'escaped.md')}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bac8f55b5dcbe696 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2063

      expect(await fs.readFile(outsideFile, 'utf-8')).not.toContain('line2.5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b251699a15d4e704 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2088

      await fs.writeFile(existingSkill, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #940ef3cc91450396 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2094

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-patchonly.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dda72fc2764dd12c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2105

          await fs.writeFile(
            patchPath,
            [
              `--- ${existingSkill}`,
              `+++ ${existingSkill}`,
              '@@ -1,3 +1,4 @@',
              ' line1',
              ' line2',
              '+line2.5',
              ' line3',
              '',
            ].join('\n'),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b7ccd49758360485 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2172

      await fs.writeFile(existingSkill, 'line1\nline2\nline3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e99b163e6760b02c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2173

      await fs.writeFile(
        path.join(skillsDir, 'existing-skill.patch'),
        [
          `--- ${existingSkill}`,
          `+++ ${existingSkill}`,
          '@@ -1,3 +1,4 @@',
          ' line1',
          ' line2',
          '+line2.5',
          ' line3',
          '',
        ].join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #78c115083085591d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.test.ts:2191

      await fs.writeFile(
        path.join(chatsDir, 'session-2025-01-01T00-00-oldpatch.json'),
        JSON.stringify(conversation),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97472a8785363d9d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:436

      await fd.writeFile(JSON.stringify(lockInfo));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66adc3f0e883b1a8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:463

    const content = await fs.readFile(lockPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cbebed33fd34728 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:514

    const content = await fs.readFile(statePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6c7878f9124b721 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:545

  await fs.writeFile(tmpPath, JSON.stringify(state, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbf879d55eb18ec3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:744

        const content = await fs.readFile(skillPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7efe592f3dcb0938 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:876

      const patchContent = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca968966d52d13a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:970

        snapshot.set(relativePath, await fs.readFile(absolutePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f5c98b9460d6d6a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:1053

        content = await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac5bdbf5b78f8181 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:1218

              await fs.readFile(path.join(skillsDir, e), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cd6f2ebe6ec9574 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/memoryService.ts:1355

        currentContent = await fs.readFile(patchPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ac06b2bfe9085b6b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/modelConfig.golden.test.ts:41

    if (process.env['UPDATE_GOLDENS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e30099752ba72031 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/modelConfig.golden.test.ts:43

      await fs.writeFile(
        GOLDEN_FILE_PATH,
        JSON.stringify(resolvedAliases, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d67e009a125bd937 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/modelConfig.golden.test.ts:54

      goldenContent = await fs.readFile(GOLDEN_FILE_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b08674487d1c09cb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/modelConfig.golden.test.ts:86

    if (process.env['UPDATE_GOLDENS']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b0fc9d720e0c7ae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/modelConfig.golden.test.ts:88

      await fs.writeFile(
        RETRY_GOLDEN_FILE_PATH,
        JSON.stringify(resolvedAliases, null, 2),
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbe28078aaa9cef0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/modelConfig.golden.test.ts:99

      goldenContent = await fs.readFile(RETRY_GOLDEN_FILE_PATH, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #91a8c1beed9dca84 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:233

        fs.writeFileSync(testFile, 'virtual read success');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d991f5ab8d04f83c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:542

          fs.writeFileSync(testFile, 'secret data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ea3cd1a2ec242de9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:593

        fs.writeFileSync(nestedFile, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #66f9b5a5abb9d459 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:699

        fs.writeFileSync(targetFile, 'secret data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02c7c08affe13381 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:778

        fs.writeFileSync(
          path.join(mainGitDir, 'config'),
          '[core]\n\trepositoryformatversion = 0\n',
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #335b56e63308abe2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:791

        fs.writeFileSync(
          path.join(worktreeDir, '.git'),
          `gitdir: ${worktreeGitDir}\n`,
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #de71f87ad84eb85d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:798

        fs.writeFileSync(backlinkPath, path.join(worktreeDir, '.git'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5819adafb27d67e3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:802

        fs.writeFileSync(secretFile, 'git-secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3ed7bf0b5ee99ddf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:836

        fs.writeFileSync(
          path.join(worktreeDir, '.git'),
          `gitdir: ${worktreeGitDir}\n`,
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4effbdcf927e525f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:840

        fs.writeFileSync(
          path.join(worktreeGitDir, 'gitdir'),
          path.join(worktreeDir, '.git'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ac84296de5c2ac3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:928

      fs.writeFileSync(
        path.join(mainGitDir, 'config'),
        '[core]\n\trepositoryformatversion = 0\n',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c85d086ea21d72a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:941

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9e889e24ae46409e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:948

      fs.writeFileSync(backlinkPath, path.join(worktreeDir, '.git'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6fb26dfaab25b773 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:952

      fs.writeFileSync(secretFile, 'git-secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ba4df0af401dfeef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:986

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebfdc9203916f5a2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:990

      fs.writeFileSync(
        path.join(worktreeGitDir, 'gitdir'),
        path.join(worktreeDir, '.git'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #559a045e8d196d1d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:1030

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cf45554b947cc6d0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:1034

      fs.writeFileSync(
        path.join(worktreeGitDir, 'gitdir'),
        path.join(worktreeDir, '.git'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #954a945c2408f1cc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:1073

      fs.writeFileSync(
        path.join(worktreeDir, '.git'),
        `gitdir: ${worktreeGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #87ba03b2fdf076ea — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:1077

      fs.writeFileSync(
        path.join(worktreeGitDir, 'gitdir'),
        path.join(worktreeDir, '.git'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e0e95901d786ca55 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:1111

      fs.writeFileSync(
        path.join(workspaceDir, '.git'),
        `gitdir: ${externalGitDir}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b04bdbd3cd8855dd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sandboxManager.integration.test.ts:1143

      fs.writeFileSync(testFile, 'initial');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca38292deeb07049 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.test.ts:105

  await fs.writeFile(filePath, contents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #064682c6d66f95b8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.test.ts:408

      const written = JSON.parse(await fs.readFile(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1de1f125f131eaca — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.test.ts:436

      const lines = (await fs.readFile(filePath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #82d16088ec82e5a9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.test.ts:463

      const lines = (await fs.readFile(filePath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9e7ab2e031d6d3e7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.test.ts:651

      const lines = (await fs.readFile(filePath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d35565c5c4e2e004 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.test.ts:689

      const previousLines = (await fs.readFile(previousPath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7b3bff5351bc59a8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.test.ts:701

      const currentLines = (await fs.readFile(currentPath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7144e01e863c1d6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/sessionSummaryUtils.ts:438

    await fs.writeFile(
      sessionPath,
      JSON.stringify(
        {
          ...freshConversation,
          ...metadataUpdate,
          lastUpdated,
        },
        null,
        2,
      ),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec97b2df5fc37a4e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/shellExecutionService.test.ts:213

    process.env['PATH'] = '/test/path';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3edd3b0bed8054c9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/shellExecutionService.ts:496

        baseEnv[key] = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea4cd420a6e62b0f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/trackerService.ts:74

      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba88aefd876c87f9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/services/trackerService.ts:182

    await fs.writeFile(taskPath, JSON.stringify(task, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec3d904ee2b578e1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:211

    fs.writeFileSync(
      path.join(skillDir, 'SKILL.md'),
      SKILL_TEMPLATE.replace(/{skill_name}/g, skillName).replace(
        /{skill_title}/g,
        skillTitle,
      ),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4ac2d0d8fb3ccbec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:218

    fs.writeFileSync(
      path.join(skillDir, 'scripts/example_script.cjs'),
      EXAMPLE_SCRIPT.replace(/{skill_name}/g, skillName),
      { mode: 0o755 },
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #61cef44f8e60613e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:223

    fs.writeFileSync(
      path.join(skillDir, 'references/example_reference.md'),
      EXAMPLE_REFERENCE.replace(/{skill_title}/g, skillTitle),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aafda7318d37200d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/builtin/skill-creator/scripts/init_skill.cjs:227

    fs.writeFileSync(
      path.join(skillDir, 'assets/example_asset.txt'),
      'Placeholder for assets.',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e57600f3d3bdb9f0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/builtin/skill-creator/scripts/validate_skill.cjs:25

  const content = fs.readFileSync(skillMdPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e641141c02f37b24 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/builtin/skill-creator/scripts/validate_skill.cjs:78

    const fileContent = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #83e6fcf42da27244 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:35

    await fs.writeFile(
      skillFile,
      `---\nname: my-skill\ndescription: A test skill\n---\n# Instructions\nDo something.\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a46dae3a79c8b93b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:53

    await fs.writeFile(path.join(notASkillDir, 'some-file.txt'), 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #31effcd484182a73 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:88

    await fs.writeFile(skillFile, '# No frontmatter here');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #743047dbb745d453 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:108

    await fs.writeFile(
      skillFile,
      `---
name: foo
description: Simple story generation assistant for fiction writing. Use for creating characters, scenes, storylines, and prose. Trigger words: character, scene, storyline, story, prose, fiction, writing.
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eeaac44be9d55a5a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:130

    await fs.writeFile(
      skillFile,
      `---
name: multi-colon
description: Use this for tasks like: coding, reviewing, testing. Keywords: async, await, promise.
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #47b7e250ad64339c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:153

    await fs.writeFile(
      skillFile,
      `---
name: quoted-skill
description: "A skill with colons: like this one: and another."
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bb279654ec498e9f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:177

    await fs.writeFile(
      skillFile,
      `---
name: multiline-skill
description:
  Expertise in reviewing code for style, security, and performance. Use when the
  user asks for "feedback," a "review," or to "check" their changes.
---
# Instructions
Do something.
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43ca370826827b12 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:202

    await fs.writeFile(
      skillFile,
      `---
name: 
description: 
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ef374f7f1820d7c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:222

    await fs.writeFile(
      skillFile,
      `---
  name: indented-name
  description: indented-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #97c50eb8291524c7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:242

    await fs.writeFile(
      skillFile,
      `---
name:no-space-name
description:no-space-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f4e0ef66b79fbf33 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.test.ts:260

    await fs.writeFile(
      skillFile,
      `---
name: gke:prs-troubleshooter
description: Test sanitization
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aae27fcc7a0f0b62 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillLoader.ts:168

    const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #de97720ee177c399 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillManager.test.ts:46

    await fs.writeFile(
      path.join(userDir, 'skill-a', 'SKILL.md'),
      `---
name: skill-user
description: user-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7c88f2b74add2342 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillManager.test.ts:54

    await fs.writeFile(
      path.join(projectDir, 'skill-b', 'SKILL.md'),
      `---
name: skill-project
description: project-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c7b587553b679bb7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillManager.test.ts:109

    await fs.writeFile(
      path.join(userDir, 'skill', 'SKILL.md'),
      `---
name: same-name
description: user-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5612b7b50a740e72 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillManager.test.ts:117

    await fs.writeFile(
      path.join(projectDir, 'skill', 'SKILL.md'),
      `---
name: same-name
description: project-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b8824bbebd485e5d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillManager.test.ts:200

    await fs.writeFile(
      path.join(skillDir, 'SKILL.md'),
      `---
name: skill1
description: desc1
---
body1`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f754ba535f821ea — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/skills/skillManager.test.ts:234

    await fs.writeFile(
      path.join(projectDir, 'skill-project', 'SKILL.md'),
      `---
name: skill-project
description: project-desc
---
`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #bd35cfcc6d1de088 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.test.ts:221

      http.post(CLEARCUT_URL, () => HttpResponse.text(EXAMPLE_RESPONSE)),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b182baa35939f85e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.test.ts:913

      server.resetHandlers(http.post(CLEARCUT_URL, () => HttpResponse.error()));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9083faef8dd13857 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.test.ts:932

        http.post(CLEARCUT_URL, () =>
          HttpResponse.json(
            { 'the system is down': true },
            {
              status: 500,
            },
          ),
        ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #3dfd20b6a0110af8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:186

  if (process.env['SURFACE']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4c11c4d284fc846 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:187

    return process.env['SURFACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1287ef7380844cb2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:190

  } else if (process.env['GITHUB_SHA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8022b8945a2867b0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:192

  } else if (process.env['TERM_PROGRAM'] === 'vscode') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e720fc324f65c707 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:203

  return process.env['GH_WORKFLOW_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ee90017cbab0138 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:210

  return process.env['GITHUB_REPOSITORY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e33beb6030af7c7b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:217

  return process.env['GITHUB_EVENT_NAME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16528752fec95129 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:224

  return process.env['GH_PR_NUMBER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8f1ca1ba027473a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:231

  return process.env['GH_ISSUE_NUMBER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f96eb42aeacb0a32 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:238

  return process.env['GH_CUSTOM_TRACKING_ID'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #eb49639e3b11aed0 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/clearcut-logger/clearcut-logger.ts:557

      const response = await fetch(CLEARCUT_URL, {
        method: 'POST',
        body: safeJsonStringify(request),
        headers: {
          'Content-Type': 'application/json',
        },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2253e45e5488d12e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/event-loop-monitor.ts:22

      process.env['GEMINI_EVENT_LOOP_MONITOR_ENABLED'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97dd3f9ee4389adb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/gcp-exporters.ts:61

          process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d51783249bba3f0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/gcp-exporters.ts:124

          process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0c5fb9b05add480 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/metrics.ts:1135

      process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24ebdf891016ee0c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/metrics.ts:1153

      process.env['GEMINI_STRICT_TELEMETRY_LIMITS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b6b15a529919534a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:156

    const originalEnv = process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bb033e39bdba3f23 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:157

    process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = 'test-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f427d4b415530cc0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:168

        process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3b02d7601a555e4f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:170

        delete process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b164ba18adb31975 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:205

    const originalOtlpEnv = process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b6438473dabf6b2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:206

    const originalGoogleEnv = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5f2e6f531c406d61 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:207

    delete process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d6a8b10c29f7a153 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:208

    delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #19600beb084fb30b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:219

        process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = originalOtlpEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c43c2c574e361798 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:222

        process.env['GOOGLE_CLOUD_PROJECT'] = originalGoogleEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4ad47be10afe2125 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:235

    const originalOtlpEnv = process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b9f8378fbbff5269 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:236

    const originalGoogleEnv = process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #652909385815295d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:237

    delete process.env['OTLP_GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #96df09c036f437bd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:238

    process.env['GOOGLE_CLOUD_PROJECT'] = 'fallback-project';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #06e572ccbfaa732c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:258

        process.env['OTLP_GOOGLE_CLOUD_PROJECT'] = originalOtlpEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eacebccc9530cbc1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:261

        process.env['GOOGLE_CLOUD_PROJECT'] = originalGoogleEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #99d811bc61710c0a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.test.ts:263

        delete process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b62a610de63c260 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.ts:250

    process.env['OTLP_GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b38174ae5aa68ef1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.ts:251

    process.env['GOOGLE_CLOUD_PROJECT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a144b7fe0e1d499a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/telemetry/sdk.ts:356

    const monitorInterval = process.env['GEMINI_MEMORY_MONITOR_INTERVAL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #930053d58d40a6c2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:84

    await fsp.writeFile(
      path.join(tempRootDir, 'policies', 'new-policies.txt'),
      '[[rule]]\ntoolName = "run_shell_command"\ndecision = "allow"\n',
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7a5b09b189fc7623 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:160

    const updatedContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e898ea1cc95e98ce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:194

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #94d3325c5398965b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:230

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e00e49ab0c22435 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:269

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d534a36a1af05948 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:310

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #db8076a823a67530 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:362

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46e47a82166ae86c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:455

    await fsp.writeFile(
      path.join(plansDir, 'plan-file.txt'),
      'plan content',
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81560327d881fa31 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:500

    const updatedContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #245aca3605b8ec48 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:533

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b01653e03c52849 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:571

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d0a4b73699e06195 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:611

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f14d073bd1fe5af — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/at-reference-resolution.test.ts:662

    const createdContent = await fsp.readFile(correctFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6aecf3e95348d4d4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/confirmation-policy.test.ts:59

            return fs.readFileSync(p, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #58c941986bad0611 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/confirmation-policy.test.ts:64

          fs.writeFileSync(p, c);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0aa1b2505d7522bf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/confirmation-policy.test.ts:163

          fs.writeFileSync(fullPath, 'existing content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d77d2eab8e76f5bd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:772

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #278c187283e37c82 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:797

      expect(fs.readFileSync(filePath, 'utf8')).toBe(newContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c063e2c8abcc43eb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:805

      fs.writeFileSync(filePath, 'Some content.', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #961d984af4d53e08 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:830

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c982876d84ee9083 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:856

      expect(fs.readFileSync(filePath, 'utf8')).toBe(finalContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30dbc8f3512a66a9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:863

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30d40de382a245d9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:874

      const finalContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a7b6be6331a72989 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:890

      const finalContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e8f67e3a2aabb70c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:896

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c2ec4b4bd1ee6c3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:926

      expect(fs.readFileSync(filePath, 'utf8')).toBe(initialContent); // File is unchanged

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c6cafc932cba3cb4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:942

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bfdf56ab861f2ed7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:999

        setup: (fp: string) => fs.writeFileSync(fp, 'existing content', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dedd105561cd7176 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1005

        setup: (fp: string) => fs.writeFileSync(fp, 'content', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2342ad958c9d240f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1011

        setup: (fp: string) => fs.writeFileSync(fp, 'one one two', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #200882c3d88ba651 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1099

        fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1699659132606296 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1115

            expect(fs.readFileSync(filePath, 'utf8')).toBe(finalContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5e101eb83aa7b253 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1142

      fs.writeFileSync(filePath, initialContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #259927c365316d1d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1234

        fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #708cfa601dd1f85c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1272

        const finalContent = fs.readFileSync(file.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #97921c81b11e5ef1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1294

      fs.writeFileSync(filePath, 'Some content.', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ba7f9c4433d8b26 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1317

      fs.writeFileSync(filePath, 'Some content.', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #33ad2d03b23429a7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1337

      fs.writeFileSync(filePath, '{"key": "value"}', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02068eb0a895396c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1356

      fs.writeFileSync(filePath, '{"cells": []}', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4f95a98239201f15 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1387

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c8187d20dcf6c9a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1418

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7387836dfa80ca39 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1455

      fs.writeFileSync(planFilePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e7e1044d09a06563 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/edit.test.ts:1472

      expect(fs.readFileSync(planFilePath, 'utf8')).toBe('some new content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b8b43e176871269 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/exit-plan-mode.test.ts:78

    fs.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e711964b1b18e4f7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/exit-plan-mode.test.ts:498

      fs.writeFileSync(outsideFile, 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f1655110e8f9bf9b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/get-internal-docs.test.ts:45

    const expectedContent = await fs.readFile(expectedDocsPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c8b8741193c15b1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/get-internal-docs.ts:131

      const content = await fs.readFile(resolvedPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #73a21d92a01be9f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:44

    await fs.writeFile(path.join(tempRootDir, '.git'), ''); // Fake git repo

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f0e926ef6b20155 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:85

    await fs.writeFile(path.join(tempRootDir, 'fileA.txt'), 'contentA');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #097de84cb6974aae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:86

    await fs.writeFile(path.join(tempRootDir, 'FileB.TXT'), 'contentB'); // Different case for testing

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e34702f7ed3a3030 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:90

    await fs.writeFile(path.join(tempRootDir, 'sub', 'fileC.md'), 'contentC');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2b7f2112eb58b5cc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:91

    await fs.writeFile(path.join(tempRootDir, 'sub', 'FileD.MD'), 'contentD'); // Different case

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a707104d07440e73 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:95

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'deep', 'fileE.log'),
      'contentE',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f8d0ef55e4f918f9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:101

    await fs.writeFile(path.join(tempRootDir, 'older.sortme'), 'older_content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2724c48864c0257d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:104

    await fs.writeFile(path.join(tempRootDir, 'newer.sortme'), 'newer_content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #314bcba08eaee75f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:204

      await fs.writeFile(path.join(tempRootDir, 'file[1].txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d074f20673e65e5c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:220

      await fs.writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9db5a10b3c27ebcb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:333

      await fs.writeFile(path.join(tempRootDir, 'not-a-dir'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #11ae96221e733795 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:380

      await fs.writeFile(
        path.join(tempRootDir, '.gitignore'),
        'ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e2d71b7d1d029283 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:384

      await fs.writeFile(path.join(tempRootDir, 'ignored_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #009965421fe85ec7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:385

      await fs.writeFile(path.join(tempRootDir, 'visible_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e051c9821b65aa37 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:397

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        'gemini-ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3c5e52437ebd462d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:401

      await fs.writeFile(
        path.join(tempRootDir, 'gemini-ignored_test.txt'),
        'content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c2a0f72cc0b31ff2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:405

      await fs.writeFile(path.join(tempRootDir, 'visible_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d7a56d37afa7d22c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:417

      await fs.writeFile(
        path.join(tempRootDir, '.gitignore'),
        'ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f69e2fdaca4da637 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:421

      await fs.writeFile(path.join(tempRootDir, 'ignored_test.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #06c66085e625c6d3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:435

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        'gemini-ignored_test.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f5c2cf205246c6a6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/glob.test.ts:439

      await fs.writeFile(
        path.join(tempRootDir, 'gemini-ignored_test.txt'),
        'content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b23449796a68911e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep-utils.ts:53

    const content = await fsPromises.readFile(absolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #38cb84244e831865 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:89

    await fs.writeFile(
      path.join(tempRootDir, 'fileA.txt'),
      'hello world\nsecond line with world',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0b41043cf42aace7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:93

    await fs.writeFile(
      path.join(tempRootDir, 'fileB.js'),
      'const foo = "bar";\nfunction baz() { return "hello"; }',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f22b3daf4f71def2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:98

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileC.txt'),
      'another world in sub dir',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e0d8f43028887acd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:102

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileD.md'),
      '# Markdown file\nThis is a test.',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a8df137b2706aae — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:196

      await fs.writeFile(path.join(tempRootDir, '..env'), 'world in ..env');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #80bfa920c3a86f32 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:258

      await fs.writeFile(
        path.join(tempRootDir, 'sub', 'another.js'),
        'const greeting = "hello";',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f27e369731b36506 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:368

      await fs.writeFile(
        path.join(secondDir, 'other.txt'),
        'hello from second directory\nworld in second',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #08e49ab54ed64e37 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:372

      await fs.writeFile(
        path.join(secondDir, 'another.js'),
        'function world() { return "test"; }',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb3fd603f7092d4c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:456

      await fs.writeFile(
        path.join(secondDir, 'sub', 'test.txt'),
        'hello from second sub directory',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4937b8056616d506 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:585

      await fs.writeFile(
        path.join(tempRootDir, 'copyright.txt'),
        'Copyright 2025 Google LLC\nCopyright 2026 Google LLC',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #455be44c9a80ab67 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:609

      await fs.writeFile(
        path.join(tempRootDir, 'context.txt'),
        lines.join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9d7648c1d61a82d1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.test.ts:631

      await fs.writeFile(
        path.join(tempRootDir, 'longline.txt'),
        `Target match ${longString}`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #07304e742c823a84 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/grep.ts:600

          const content = await fsPromises.readFile(fileAbsolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f2fe475d1def33f4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/line-endings.test.ts:172

      fs.writeFileSync(filePath, originalContent); // Write with CRLF (or however Node writes binary buffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #75435366c4c5a1b1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/line-endings.test.ts:174

      fs.writeFileSync(filePath, Buffer.from('line1\r\nline2\r\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #daea83253f314329 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/line-endings.test.ts:197

      const writtenContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #77c9f70150bea8ab — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/line-endings.test.ts:222

      const writtenContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #15c51ca4f9a00ef4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/line-endings.test.ts:245

      fs.writeFileSync(filePath, Buffer.from(originalContent));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27b13ae2c6d51e91 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/line-endings.test.ts:270

      const writtenContent = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e17bded64cfcf949 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:122

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5aaea9374090cda5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:124

      await fs.writeFile(
        path.join(tempSecondaryDir, 'secondary-file.txt'),
        'secondary',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d5da03a2763a0c6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:141

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f27f7866249c14bf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:143

      await fs.writeFile(
        path.join(tempSecondaryDir, 'secondary-file.txt'),
        'secondary',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74003c6033760a91 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:169

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f420b5764039acd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:170

      await fs.writeFile(path.join(tempRootDir, 'file2.log'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8245f01fab5587cb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:187

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0946cf843c46ec15 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:188

      await fs.writeFile(path.join(tempRootDir, 'file2.log'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d4fce60302b87df — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:189

      await fs.writeFile(path.join(tempRootDir, '.git'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7882dac28ec0dfe4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:190

      await fs.writeFile(path.join(tempRootDir, '.gitignore'), '*.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #400a4f9993083b0d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:203

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aa2602594eac2ee2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:204

      await fs.writeFile(path.join(tempRootDir, 'file2.log'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1f63816f2bef3e10 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:205

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        '*.log',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #47cb391f76259ca0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:221

      await fs.writeFile(testPath, 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f33f8374c39decf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:242

      await fs.writeFile(path.join(tempRootDir, 'a-file.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0e6bfe135e0d5cb7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:243

      await fs.writeFile(path.join(tempRootDir, 'b-file.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bc4387026975fd02 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:282

      await fs.writeFile(path.join(tempRootDir, 'file1.txt'), 'content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f6ab6d55215a2e15 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:284

      await fs.writeFile(problematicFile, 'content2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e2e76f3af96f757c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:357

      await fs.writeFile(
        path.join(tempSecondaryDir, 'secondary-file.txt'),
        'secondary',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #14280aeb75138a4f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:378

      await fs.writeFile(path.join(tempRootDir, 'jit-file.txt'), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #63ca609a11f5cc3f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ls.test.ts:392

      await fs.writeFile(
        path.join(tempRootDir, 'jit-disabled-file.txt'),
        'content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #ed8d81c9fa8d39db — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2242

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d8551ca4a91d918b — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2260

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #be7d30fb5a6eb405 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2280

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a9d4a433d1bd0521 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2298

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #993f1820144f46ef — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2315

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #12b16b9530889afc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2334

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #db042da2e73dcd48 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2355

          _url: new URL('http://test-server'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #bb86bb38fb614a67 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.test.ts:2376

          _url: new URL('http://test-server-http'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #c85e9832e8839212 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.ts:378

    return this.client!.request(
      {
        method: 'resources/read',
        params: { uri },
      },
      ReadResourceResultSchema,
      options,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #47b954f39116412c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.ts:1562

      const response = await mcpClient.request(
        {
          method: 'resources/list',
          params: cursor ? { cursor } : {},
        },
        ListResourcesResultSchema,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #554c8355e2370d98 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.ts:2021

          const response = await fetch(urlToFetch, {
            method: 'HEAD',
            headers: {
              Accept: acceptHeader,
            },
            signal: AbortSignal.timeout(5000),
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #260e2e11c87ba640 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/mcp-client.ts:2192

  const noProxy = process.env['NO_PROXY'] || process.env['no_proxy'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #52937157e31b9b42 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/modifiable-tool.test.ts:82

      await fsp.writeFile(newPath, modifiedContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e36952804a658e9a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/modifiable-tool.test.ts:168

        await fsp.writeFile(newPath, modifiedContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e5eaccc52dae4c5f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/modifiable-tool.test.ts:187

      await fsp.writeFile(newPath, modifiedContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02a0470866501b41 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/modifiable-tool.ts:93

  fs.writeFileSync(tempOldPath, currentContent, {
    encoding: 'utf8',
    mode: 0o600,
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d792066e6f6d4171 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/modifiable-tool.ts:97

  fs.writeFileSync(tempNewPath, proposedContent, {
    encoding: 'utf8',
    mode: 0o600,
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #68dac45457a5efef — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/modifiable-tool.ts:115

    oldContent = fs.readFileSync(tmpOldPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f669172cb043e7d1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/modifiable-tool.ts:122

    newContent = fs.readFileSync(tempNewPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0730ad40fef63643 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:238

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #71d84ad90e98cf0b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:276

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9d4420e54a110f02 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:316

      await fsp.writeFile(filePath, largeContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c18c49bf2c042180 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:332

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1c8212b4749b0154 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:350

      await fsp.writeFile(imagePath, pngHeader);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cd215909155959d7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:368

      await fsp.writeFile(pdfPath, pdfHeader);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #587096d1faf0d1e4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:386

      await fsp.writeFile(binPath, binaryData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1c1eb1e08610acb9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:400

      await fsp.writeFile(svgPath, svgContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4b7614259e2f2930 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:413

      await fsp.writeFile(svgPath, largeContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1189b7147b378fbd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:428

      await fsp.writeFile(emptyPath, '', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d315a6f9720d7985 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:441

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c64aa0c7ae09bf68 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:470

      await fsp.writeFile(tempFilePath, tempFileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5d21f8b8fea51905 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:482

        await fsp.writeFile(
          path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
          ['foo.*', 'ignored/'].join('\n'),
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #413b9868e51d1266 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:525

        await fsp.writeFile(ignoredFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43883d859f57d118 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:537

        await fsp.writeFile(ignoredFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5d0e058ce96a39b3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:547

        await fsp.writeFile(allowedFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a4bc85e709e2b97d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:557

        await fsp.writeFile(ignoredFilePath, 'content', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #958668dc53e9d386 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:642

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0b3b682a31758644 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:658

      await fsp.writeFile(filePath, fileContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1f61801c1fc5c8a4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-file.test.ts:684

      await fsp.writeFile(filePath, pngHeader);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c74293d0e8732bfd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:92

    fs.writeFileSync(path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME), 'foo.*');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2b0a5186561d924 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:150

          return originalFs.promises.readFile(fp, options);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ea11c1439022baad — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:263

      fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebd8d53bac5f7d12 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:268

      fs.writeFileSync(fullPath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4ab7aabcd15e4e86 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:606

      fs.writeFileSync(path.join(tempDir1, 'file1.txt'), 'Content1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b99e3bee5e313801 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:607

      fs.writeFileSync(path.join(tempDir2, 'file2.txt'), 'Content2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7e4cabd0dee353e6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:752

      fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #566532659df23440 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:876

      fs.writeFileSync(
        path.join(tempRootDir, 'jit-test.ts'),
        'const x = 1;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b50feaf7a01b2106 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:899

      fs.writeFileSync(
        path.join(tempRootDir, 'jit-disabled-test.ts'),
        'const y = 2;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d88604a2cf3b2068 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:938

      fs.writeFileSync(
        path.join(tempRootDir, 'subA', 'a.ts'),
        'const a = 1;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ae936789bcd03d7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/read-many-files.test.ts:943

      fs.writeFileSync(
        path.join(tempRootDir, 'subB', 'b.ts'),
        'const b = 2;',
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #168570936bdb2fa1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:171

    await fs.writeFile(
      path.join(tempRootDir, 'fileA.txt'),
      'hello world\nsecond line with world',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #14e12930b051f736 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:175

    await fs.writeFile(
      path.join(tempRootDir, 'fileB.js'),
      'const foo = "bar";\nfunction baz() { return "hello"; }',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #82a90c7b183122c7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:180

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileC.txt'),
      'another world in sub dir',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a6aa3e15138dd4b9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:184

    await fs.writeFile(
      path.join(tempRootDir, 'sub', 'fileD.md'),
      '# Markdown file\nThis is a test.',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fed249ac9c7bcf39 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:407

      await fs.writeFile(
        path.join(tempRootDir, 'sub', 'another.js'),
        'const greeting = "hello";',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #119d975c4f5957e6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:561

      await fs.writeFile(
        path.join(tempRootDir, GEMINI_IGNORE_FILE_NAME),
        'ignored.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #23f8b3fbf18459ce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:707

      await fs.writeFile(
        path.join(secondDir, 'other.txt'),
        'hello from second directory\nworld in second',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8a613c682d0884c6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:711

      await fs.writeFile(
        path.join(secondDir, 'another.js'),
        'function world() { return "test"; }',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f081ae14bf1c08e8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:792

      await fs.writeFile(
        path.join(secondDir, 'sub', 'test.txt'),
        'hello from second sub directory',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d863fff4527b8d07 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:900

          await fs.writeFile(path.join(tempRootDir, 'empty.txt'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b5387a81d59ed05 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:916

      await fs.writeFile(
        path.join(tempRootDir, specialFileName),
        'hello world with special chars',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #265e7a6b4ed90f2b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:947

      await fs.writeFile(
        path.join(deepPath, 'deep.txt'),
        'content in deep directory',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c7fccb5e79c88a1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:978

      await fs.writeFile(
        path.join(tempRootDir, 'code.js'),
        'function getName() { return "test"; }\nconst getValue = () => "value";',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12bfc184645dc9da — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1010

      await fs.writeFile(
        path.join(tempRootDir, 'case.txt'),
        'Hello World\nhello world\nHELLO WORLD',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #66803f099f00f984 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1059

      await fs.writeFile(
        path.join(tempRootDir, 'special.txt'),
        'Price: $19.99\nRegex: [a-z]+ pattern\nEmail: [email protected]',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #89eccef0fc2c11d7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1093

      await fs.writeFile(
        path.join(tempRootDir, 'test.ts'),
        'typescript content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ce748e93ec8628a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1097

      await fs.writeFile(path.join(tempRootDir, 'test.tsx'), 'tsx content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #01bb7b410197eb2e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1098

      await fs.writeFile(
        path.join(tempRootDir, 'test.js'),
        'javascript content',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #923d628f56d4aff1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1102

      await fs.writeFile(path.join(tempRootDir, 'test.txt'), 'text content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7344c6e305161239 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1144

      await fs.writeFile(
        path.join(tempRootDir, 'src', 'main.ts'),
        'source code',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #70884c5484fb2c71 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1148

      await fs.writeFile(path.join(tempRootDir, 'other.ts'), 'other code');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #618ccaa1ccdb78a8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1357

      await fs.writeFile(geminiIgnorePath, 'ignored.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e2482c257d88be28 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/ripGrep.test.ts:1403

      await fs.writeFile(geminiIgnorePath, 'ignored.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30ca38ea982a263a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:90

const originalComSpec = process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #84aba940e51051c6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:204

    process.env['ComSpec'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3454bd4b8df0d16e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:250

      delete process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #268750f888ba0778 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:252

      process.env['ComSpec'] = originalComSpec;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c82d130030079426 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:317

      fs.writeFileSync(extractedTmpFile, `54321${os.EOL}54322${os.EOL}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1894a8c6275a00d8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:352

      fs.writeFileSync(extractedTmpFile, `67890${os.EOL}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #caec316e7f864fd7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:353

      expect(fs.readFileSync(extractedTmpFile, 'utf8').trim()).toBe('67890');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #95dd5a3914b94154 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.test.ts:660

          fs.writeFileSync(extractedTmpFile, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9df989f3309a2d1a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.ts:209

      const systemRoot = process.env['SystemRoot'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #610ff0b91ef62595 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.ts:214

      const programFiles = process.env['ProgramFiles'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2c78f88b356960b7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.ts:216

      const programFilesX86 = process.env['ProgramFiles(x86)'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c61d73a1d52e575 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shell.ts:741

          const backgroundPIDContent = await fsPromises.readFile(
            tempFilePath,
            'utf8',
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30e14dacf68b0787 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shellBackgroundTools.integration.test.ts:54

    fs.writeFileSync(
      scriptPath,
      "setInterval(() => console.log('Log line'), 100);",
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #045cc7533ba3afd4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shellBackgroundTools.test.ts:152

    fs.writeFileSync(logPath, 'line 1\nline 2\nline 3\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #461b81b569a92f7a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shellBackgroundTools.test.ts:211

    fs.writeFileSync(logPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #681e773c8b33c336 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shellBackgroundTools.test.ts:243

    fs.writeFileSync(logPath, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f366f758b71df049 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shellBackgroundTools.test.ts:281

    fs.writeFileSync(logPath, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ad6476a0455a1ce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/shellBackgroundTools.test.ts:320

    fs.writeFileSync(logPath, 'line1\nline2\nline3\nline4\nline5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ca42829c0db493a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:406

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46d81d4eae61b4ad — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:468

      fs.writeFileSync(filePath, 'content', { mode: 0o000 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9cea66d06e07917d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:503

      fs.writeFileSync(filePath, 'original', { mode: 0o000 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2a5cc27685050c1d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:557

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c348f76d8ecc1ee9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:738

      fs.writeFileSync(filePath, 'original', { mode: 0o000 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5029785eb53bd77d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:807

      fs.writeFileSync(filePath, initialContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1de91307cd3716e6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:854

      expect(fs.readFileSync(filePath, 'utf8')).toBe(content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7480e46c55f05086 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:914

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #172d7976cb2ebc0f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:1104

      fs.writeFileSync(filePath, originalContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cdfa87df89423964 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/tools/write-file.test.ts:1186

      expect(fs.readFileSync(expectedWritePath, 'utf8')).toBe('nested content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12b66ba8d0932e2e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/bfsFileSearch.test.ts:27

    await fsPromises.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #941d4e86d684a181 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/bfsFileSearch.test.ts:250

    await fsPromises.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42837daecab1afa6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/browser.ts:18

  const browserEnv = process.env['BROWSER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d942c238eb8f96aa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/browser.ts:24

    process.env['CI'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2c21a653cace30c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/browser.ts:25

    process.env['DEBIAN_FRONTEND'] === 'noninteractive'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #307891656a408dfd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/browser.ts:33

  const isSSH = !!process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5de4d4fbeb32c382 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/browser.ts:40

    const hasDisplay = displayVariables.some((v) => !!process.env[v]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3809c412c5a24f38 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/browserConsent.ts:86

    await fs.writeFile(
      consentFilePath,
      `Browser privacy consent acknowledged at ${new Date().toISOString()}\n`,
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32343844a4cd0284 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:40

  return !!process.env['TMUX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20c29cd285e1cb92 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:47

  return !!process.env['STY'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #309064ecea772110 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:54

  const term = process.env['TERM'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #209421628d8e9d19 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:55

  return isTmux() && term.startsWith('screen') && !process.env['COLORTERM'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9f2364d963e4ffb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:62

  const term = process.env['TERM'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1a8f56f7de33ff8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:70

  return process.env['TERM_PROGRAM'] === 'Apple_Terminal';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40c870a7863ba0ab — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:83

  const term = process.env['TERM'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7acafe75030869ef — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:102

    process.env['COLORTERM'] === 'truecolor' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5523b2e6ebbaad0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:103

    process.env['COLORTERM'] === '24bit' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6515ccdc1d986027 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:104

    process.env['COLORTERM'] === 'kmscon'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0250b42d6918f1de — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/compatibility.ts:173

    const term = process.env['TERM'] || 'dumb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1007a6a846f72977 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/debugLogger.ts:27

    this.logStream = process.env['GEMINI_DEBUG_LOG_FILE']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd00b82a1aa81f69 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/debugLogger.ts:28

      ? fs.createWriteStream(process.env['GEMINI_DEBUG_LOG_FILE'], {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f14aa8c0a70593b2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/editor.ts:263

  const notUsingSandbox = !process.env['SANDBOX'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4589e1bd967e6b3b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/errorReporting.test.ts:52

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1ba307803fbf38cc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/errorReporting.test.ts:75

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9e0f993dda79b933 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/errorReporting.test.ts:96

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cbf5244b226f564c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/errorReporting.test.ts:171

    const reportContent = await fs.readFile(expectedMinimalReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d337d3b87e6eb464 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/errorReporting.test.ts:192

    const reportContent = await fs.readFile(expectedReportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4729b437531293bb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/errorReporting.ts:81

      await fs.writeFile(reportPath, stringifiedReportContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8bc9147dad56c6c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/errorReporting.ts:96

    await fs.writeFile(reportPath, stringifiedReportContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #108b4a6f966eaf0a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fetch.ts:177

    process.env['NO_PROXY'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #058eaaa4dc2e77b2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fetch.ts:178

    process.env['no_proxy'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #9048ef440bf0d859 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fetch.ts:209

    const response = await fetch(url, {
      ...options,
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ba7fd7fda2621267 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fetch.ts:236

    process.env['NO_PROXY'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62b66ea9342db145 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fetch.ts:237

    process.env['no_proxy'] ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d5f2c10dc392a5b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:100

        await fsPromises.readFile(wasmFixturePath),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6f325c40ab43c9f9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:183

      actualNodeFs.writeFileSync(testFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3c99b6dd22bd335f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:195

      actualNodeFs.writeFileSync(targetFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a1145b8e646b0c7f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:205

      actualNodeFs.writeFileSync(testFile, 'some content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f4a4752cf033f385 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:211

      actualNodeFs.writeFileSync(testFile, '   ');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f4331dd6efadbabc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:224

      actualNodeFs.writeFileSync(testFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e0cfd2ee4af0c538 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:254

      actualNodeFs.writeFileSync(filePathForBinaryTest, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c87f8954d7e3128d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:259

      actualNodeFs.writeFileSync(
        filePathForBinaryTest,
        'Hello, world!\nThis is a test file with normal text content.',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af61a24b3f69718b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:270

      actualNodeFs.writeFileSync(filePathForBinaryTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2eafd5db5e02e0e7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:278

      actualNodeFs.writeFileSync(filePathForBinaryTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c8e7889d1c8b29fc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:293

      actualNodeFs.writeFileSync(filePathForBinaryTest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #96305f4e211b2287 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:299

      actualNodeFs.writeFileSync(filePathForBinaryTest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #73b934e484726f59 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:305

      actualNodeFs.writeFileSync(filePathForBinaryTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2b8c9e8bfcd2fc52 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:392

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8348c5ae968886c9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:405

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #88176a3e726d421b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:435

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8530ede20b733ac5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:460

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f38cafe8cc4cdb01 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:485

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #be8f4ee0d13c3868 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:494

        await fsPromises.writeFile(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #31dbe99504d94147 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:502

        await fsPromises.writeFile(filePath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1e65277be8091bd0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:517

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f4806ccab897fc62 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:530

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f52f23c0b9afa5df — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:570

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c742efef605eea53 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:603

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #846e57868e54b237 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:636

        await fsPromises.writeFile(filePath, fullBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dc8004e347541b61 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:652

        await fsPromises.writeFile(filePath, fullContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c46acaed1c6df8e9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:663

        await fsPromises.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ff0d4a0fb45dfbd9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:677

      actualNodeFs.writeFileSync(filePathForDetectTest, 'Plain text content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7c40958b49a0c809 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:720

        actualNodeFs.writeFileSync(filePath, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #301fa25c921cde19 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:731

      actualNodeFs.writeFileSync(
        filePath,
        Buffer.from([0x66, 0x4c, 0x61, 0x43, 0x00, 0x00, 0x00, 0x22]),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbeb19862eaa194d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:753

      actualNodeFs.writeFileSync(filePathForDetectTest, binaryContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #25661eb11955a453 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:773

      actualNodeFs.writeFileSync(adpFilePath, xmlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a83ac1285e5dfb8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:801

      actualNodeFs.writeFileSync(testTextFilePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7cbee300f3c87b43 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:823

      actualNodeFs.writeFileSync(testTextFilePath, 'content'); // File must exist for initial statSync

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #49498c4276556745 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:837

      actualNodeFs.writeFileSync(testImageFilePath, 'content'); // File must exist

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9bb8ecef00d7a183 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:853

      actualNodeFs.writeFileSync(testImageFilePath, fakePngData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #13095fef404ed38f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:875

      actualNodeFs.writeFileSync(testPdfFilePath, fakePdfData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aec735fee9490b42 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:900

      actualNodeFs.writeFileSync(testAudioFilePath, fakeMp3Data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9873d67263eec4fc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:925

      actualNodeFs.writeFileSync(wavFilePath, fakeWavData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #853057ae02c76956 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:942

      actualNodeFs.writeFileSync(
        unsupportedAudioPath,
        Buffer.from([0x00, 0x01, 0x02, 0x03]),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2afe160851bcdd44 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:964

      actualNodeFs.writeFileSync(testVideoFilePath, fakeMp4Data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0e26aa3744315491 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:991

      actualNodeFs.writeFileSync(testSvgFilePath, svgContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2c82d86200fbe1d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1006

      actualNodeFs.writeFileSync(
        testBinaryFilePath,
        Buffer.from([0x00, 0x01, 0x02]),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0279ab8bd23664a5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1036

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05cbbb36b374a10c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1056

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #117dc3d13a312a1a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1077

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d3c8f8b6c2492d5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1097

      actualNodeFs.writeFileSync(
        testTextFilePath,
        `Short line\n${longLine}\nAnother short line`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4f96b6f81e1fa62 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1121

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #924e53ca3e02dc8c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1141

      actualNodeFs.writeFileSync(testTextFilePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e056c85408f0ccc5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1164

      actualNodeFs.writeFileSync(
        testTextFilePath,
        linesWithLongInMiddle.join('\n'),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb407afa91e58a8e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1185

      actualNodeFs.writeFileSync(testTextFilePath, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2a986f537eff81a2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.test.ts:1231

      const savedContent = await fsPromises.readFile(
        expectedOutputFile,
        'utf-8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a28f06cefe7e4bc9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.ts:31

  const buffer = await fsPromises.readFile(resolvedPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5370872ea99b6bf0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.ts:168

  const full = await fs.promises.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f7c68b8af086a0f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.ts:587

        const contentBuffer = await fs.promises.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fe96375a77dac0a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.ts:604

        const contentBuffer = await fs.promises.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc7d65eb13e6841b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/fileUtils.ts:709

  await fsPromises.writeFile(outputFile, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af146d43e8600e5d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/crawler.test.ts:410

      await fs.writeFile(path.join(tmpDir, '.gitignore'), 'b.txt');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e78de93bf184e74d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileSearch.test.ts:205

    await fs.writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #327a5e3e98130f77 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileWatcher.test.ts:54

    await fs.writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #130d933d0d1cb738 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileWatcher.test.ts:87

    await fs.writeFile(path.join(tmpDir, 'ignored.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #20da891611770014 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileWatcher.test.ts:88

    await fs.writeFile(path.join(tmpDir, 'kept.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bd715da14793c897 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileWatcher.test.ts:146

    await fs.writeFile(path.join(tmpDir, 'nested', 'file.txt'), 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #36c2b02cc625dc9b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileWatcher.test.ts:179

    await fs.writeFile(beforeStopFile, 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #10c616fb09d5664b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileWatcher.test.ts:189

    await fs.writeFile(path.join(tmpDir, 'after-stop.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #00b4f58ee79e0689 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/fileWatcher.test.ts:208

    await fs.writeFile(path.join(tmpDir, 'idempotent.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80b9fe031712fe0d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/filesearch/ignore.ts:26

      ignorer.add(fs.readFileSync(filePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0c0ae3975b70382f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/getFolderStructure.test.ts:27

    await fsPromises.writeFile(fullPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d50250daa6d8e280 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/getFolderStructure.test.ts:252

      await fsPromises.writeFile(
        path.join(testRootDir, '.gitignore'),
        'ignored.txt\nnode_modules/\n.gemini/*\n!/.gemini/config.yaml',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b88629713c62fd6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/getFolderStructure.test.ts:275

      await fsPromises.writeFile(
        path.join(testRootDir, '.gitignore'),
        'ignored.txt',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4d330df841c88e31 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/getFolderStructure.test.ts:299

      await fsPromises.writeFile(
        path.join(testRootDir, GEMINI_IGNORE_FILE_NAME),
        'ignored.txt\nnode_modules/\n.gemini/\n!/.gemini/config.yaml',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d296873ba6b3d055 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/getFolderStructure.test.ts:319

      await fsPromises.writeFile(
        path.join(testRootDir, GEMINI_IGNORE_FILE_NAME),
        'ignored.txt\nnode_modules/\n.gemini/\n!/.gemini/config.yaml',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #951062e140a24f00 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/getPty.ts:21

  if (process.env['GEMINI_PTY_INFO'] === 'child_process') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ab097b92187c9c74 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/gitIgnoreParser.test.ts:20

    await fs.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03597234e16c2cf5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/gitIgnoreParser.ts:42

      content = fs.readFileSync(patternsFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d1cec98fc0b783a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/headless.ts:31

  if (process.env['GEMINI_CLI_INTEGRATION_TEST'] !== 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1b4907fb8e8b466 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/headless.ts:33

      process.env['CI'] === 'true' || process.env['GITHUB_ACTIONS'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f94febda227777b1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/ignoreFileParser.test.ts:20

    await fs.writeFile(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #baee29155ab07eb6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/ignoreFileParser.ts:65

      content = fs.readFileSync(patternsFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e679769b71389f7f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/installationManager.test.ts:86

      expect(fs.readFileSync(installationIdFile(), 'utf-8')).toBe(newId);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #39fe9d1fb1bf845f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/installationManager.test.ts:92

      fs.writeFileSync(installationIdFile(), existingId);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ac5f44a165a5ace — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/installationManager.ts:21

      const installationid = fs
        .readFileSync(installationIdFile, 'utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdb96b47e7fb941a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/installationManager.ts:33

    fs.writeFileSync(installationIdFile, installationId, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1ab7b6bfa3f3e6fb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/memoryDiscovery.test.ts:65

    await fsPromises.writeFile(fullPath, fileContents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a67198c52b3f709f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/memoryDiscovery.ts:184

          process.env['NODE_ENV'] === 'test' || process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb67ac456221b161 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/memoryDiscovery.ts:223

          const content = await fs.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d229b0c9cc7c8409 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/memoryDiscovery.ts:258

              process.env['NODE_ENV'] === 'test' || process.env['VITEST'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b1fc49b5221f5a98 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/memoryImportProcessor.test.ts:884

        fsSync.writeFileSync(path.join(outsideDir, 'sensitive.md'), 'secret');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54b931ea1f5489bc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/memoryImportProcessor.ts:278

          const importedContent = await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fea94569ca3d758 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/memoryImportProcessor.ts:347

      const fileContent = await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #589b428fb21b21fa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/oauth-flow.ts:200

      const portStr = process.env['OAUTH_CALLBACK_PORT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #e118fe3077fdbb0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/oauth-flow.ts:472

  const response = await fetch(config.tokenUrl, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/x-www-form-urlencoded',
      Accept: 'application/json, application/x-www-form-urlencoded',
    },
    body: params.toString(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cf7fecf09858d839 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/oauth-flow.ts:525

  const response = await fetch(tokenUrl, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/x-www-form-urlencoded',
      Accept: 'application/json, application/x-www-form-urlencoded',
    },
    body: params.toString(),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #48d38d228fba9872 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/pathCorrector.test.ts:51

    fs.writeFileSync(path.join(rootDir, testFile), 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b961ce288ad8440f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/pathCorrector.test.ts:66

    fs.writeFileSync(fullPath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ce7a4a22c100c5fa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/pathCorrector.test.ts:94

    fs.writeFileSync(path.join(subDir1, ambiguousFile), 'content 1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #61f8e85e4080ee50 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/pathCorrector.test.ts:95

    fs.writeFileSync(path.join(subDir2, ambiguousFile), 'content 2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9988f662a784c7f4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:23

  const envHome = process.env['GEMINI_CLI_HOME'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e4a84152fadb3f0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:532

    !!process.env['TEST_SRCDIR'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b508abe213a61010 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:533

    !!process.env['TEST_WORKSPACE'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e98205a534d10c7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:534

    !!process.env['BAZEL_TEST'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd7e307392dc23aa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:535

    !!process.env['RUNFILES_DIR'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b83716012f79244 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:547

      process.env['SystemRoot'] || 'C:\\Windows',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #052de56567b5d5f5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:548

      process.env['ProgramFiles'] || 'C:\\Program Files',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9ebf9f8eabe7808 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/paths.ts:549

      process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #26473d10af8a6a73 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/planUtils.test.ts:36

      fs.writeFileSync(fullPath, '# My Plan');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e34d6486c593a181 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/planUtils.test.ts:54

      fs.writeFileSync(outsideFile, 'secret content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #93b3e8134f12af93 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/planUtils.test.ts:71

      fs.writeFileSync(planPath, 'some content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f2532d92eb0b4e6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/planUtils.test.ts:78

      fs.writeFileSync(planPath, '   ');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f30499388c98e87 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/retry.ts:230

      process.env['GOOGLE_CLOUD_PROJECT'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5d72870dafd2f96 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/retry.ts:231

      process.env['GOOGLE_CLOUD_PROJECT_ID']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b361bc4b9e87ef1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/secure-browser-launcher.ts:154

  const browserEnv = process.env['BROWSER'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a213916835169421 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/secure-browser-launcher.ts:161

    process.env['CI'] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #122044790f870f9a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/secure-browser-launcher.ts:162

    process.env['DEBIAN_FRONTEND'] === 'noninteractive'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68f1f4911b120b83 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/secure-browser-launcher.ts:170

  const isSSH = !!process.env['SSH_CONNECTION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #330f2940507d2d6e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/secure-browser-launcher.ts:176

    const hasDisplay = displayVariables.some((v) => !!process.env[v]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ffb65649a089e78e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/sessionOperations.test.ts:71

      await fs.writeFile(logFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ab69d57e05fda29 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/sessionOperations.test.ts:100

      await fs.writeFile(path.join(subDir, 'sub1.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #efa53ce87b9a93c4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/sessionOperations.test.ts:101

      await fs.writeFile(path.join(subDir, 'sub2.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa8ec65419ddc1a5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/sessionOperations.test.ts:105

      await fs.writeFile(path.join(logsDir, 'session-sub1.jsonl'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #18136783b059953b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/sessionOperations.test.ts:106

      await fs.writeFile(path.join(logsDir, 'session-sub2.jsonl'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03c22b2a1d2e9fb7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/sessionOperations.ts:256

        const fileContent = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb6c689fe6709b4b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.test.ts:294

  const originalComSpec = process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #66ef6037e707261e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.test.ts:298

    const systemRoot = process.env['SystemRoot'] || 'C:\\\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b7c1cd119f46b57a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.test.ts:299

    process.env['ComSpec'] =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02fc2f39d5984fb3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.test.ts:305

      delete process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5a5ca97ffdae9aaf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.test.ts:307

      process.env['ComSpec'] = originalComSpec;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af348038c60975ff — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.test.ts:580

    process.env['ComSpec'] = 'powershell.exe';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #540958556eec8ee9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.ts:92

  const pathEnv = process.env['PATH'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfaa495b5ecb9117 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/shell-utils.ts:665

    const comSpec = process.env['ComSpec'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9848ac630668505b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/surface.ts:25

    process.env['GEMINI_CLI_SURFACE'] || process.env['SURFACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2aca4a4873b1863d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/surface.ts:43

  if (process.env['TERM_PROGRAM'] === 'vscode' || process.env['VSCODE_PID']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f541ac99ee62a4c7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/surface.ts:49

  if (process.env['GITHUB_SHA']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ea64a2d13686463 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:48

    delete process.env['GEMINI_CLI_TRUST_WORKSPACE'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e395b7abd6d0ac83 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:66

    fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a424c02d926032a7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:83

    fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #96aa738fc5e76cdd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:97

    fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #303e7fbb73569cda — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:113

      fs.readFileSync(trustedFoldersPath, 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bbfa7631d4d56eb4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:129

    fs.writeFileSync(trustedFoldersPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c00c4d74ea206067 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:168

      fs.writeFileSync(trustedFoldersPath, JSON.stringify(config));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c15c3ce98a966d2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:192

      fs.writeFileSync(trustedFoldersPath, '{}', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #edc00599dd340296 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.test.ts:195

      fs.writeFileSync(trustedFoldersPath, 'invalid json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb9bbcb2e67eebc9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.ts:47

  if (process.env['GEMINI_CLI_TRUST_WORKSPACE'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bed7aa4b820cef61 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.ts:209

      await fs.promises.writeFile(this.user.path, JSON.stringify({}, null, 2), {
        // Restrict file access to read/write for the owner only
        mode: 0o600,
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #543314a521f2c4aa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.ts:227

      const content = await fs.promises.readFile(this.user.path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #960e8e8acfb5e7ba — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.ts:289

      const content = fs.readFileSync(userPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f2f7d8950086d6e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/trust.ts:339

    fs.writeFileSync(tempPath, content, {
      encoding: 'utf-8',
      // Restrict file access to read/write for the owner only
      mode: 0o600,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e380fe071fcb0c38 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:57

      expect(fs.readFileSync(accountsFile(), 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e1f1a1a1e33c7fce — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:64

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          { active: '[email protected]', old: ['[email protected]'] },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ad35b9469984ddb9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:75

      expect(fs.readFileSync(accountsFile(), 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4eb747ba560d3448 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:89

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          { active: '[email protected]', old: ['[email protected]'] },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #621d1f552585cd38 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:100

      expect(fs.readFileSync(accountsFile(), 'utf-8')).toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8fcf335241578a8b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:111

      fs.writeFileSync(accountsFile(), 'not valid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d078ad60f0c30235 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:119

      expect(JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'))).toEqual({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9e14a2c4188d8298 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:127

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: '[email protected]', old: 'not-an-array' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #244a3e137975b7bc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:138

      expect(JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'))).toEqual({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #53f7abdef137e3a2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:148

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: '[email protected]', old: [] }, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #87c57ca88bf7283f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:163

      fs.writeFileSync(accountsFile(), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #04f12691401734c4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:170

      fs.writeFileSync(accountsFile(), '{ "active": "[email protected]"'); // Invalid JSON

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6745992aa7e238d9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:183

      fs.writeFileSync(accountsFile(), JSON.stringify({ old: [] }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #238d288ac6a22a42 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:192

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          { active: '[email protected]', old: ['[email protected]'] },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #331dab40a3daaeea — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:203

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #313dc5169f215b1a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:210

      fs.writeFileSync(accountsFile(), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c15a0f8ef292470c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:212

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ae1101315ee11d9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:219

      fs.writeFileSync(accountsFile(), 'not valid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e420027fcccd22fb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:227

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #31fed60f606da5bc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:234

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: null, old: ['[email protected]'] }, null, 2),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #619226d3ad54378b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:241

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e50c08367887a905 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:248

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify(
          {
            active: '[email protected]',
            old: ['[email protected]'],
          },
          null,
          2,
        ),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #703fc4cb2064d9c8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:262

      const stored = JSON.parse(fs.readFileSync(accountsFile(), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b99936cb7530ad6e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:275

      fs.writeFileSync(accountsFile(), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #877de15ff7c2693d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:281

      fs.writeFileSync(accountsFile(), 'invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d441c9c9794681da — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:292

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: '[email protected]', old: [] }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #52649e494824cd32 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:301

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({
          active: null,
          old: ['[email protected]', '[email protected]'],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #db8890069b12d5c9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:313

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({
          active: '[email protected]',
          old: ['[email protected]', '[email protected]'],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f069f12038d15c8b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:325

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({ active: null, old: 1 }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d46edb160af73c27 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.test.ts:339

      fs.writeFileSync(
        accountsFile(),
        JSON.stringify({
          active: '[email protected]',
          old: ['[email protected]', '[email protected]'],
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c99e2f55221b306d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.ts:64

      const content = readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #660bf000c5e10b68 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.ts:85

      const content = await fsp.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #945095bf8e073d1f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.ts:116

    await fsp.writeFile(filePath, JSON.stringify(accounts, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad354e67827bfbb3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/userAccountManager.ts:146

    await fsp.writeFile(filePath, JSON.stringify(accounts, null, 2), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #34e25f1eae90fc55 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/version.test.ts:31

    process.env['CLI_VERSION'] = '2.0.0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ba6570b70ec892f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/version.test.ts:37

    delete process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fc39b6756f1e2050 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/version.test.ts:43

    delete process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a97ceef9bbd3942c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/version.test.ts:50

    delete process.env['CLI_VERSION'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #067d6b0d662bbaac — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/version.ts:22

    return process.env['CLI_VERSION'] || pkgJson?.version || 'unknown';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #840eaa7a3a1515e8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/workspaceContext.test.ts:111

      fs.writeFileSync(validPath1, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fef1f40a0526b761 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/workspaceContext.test.ts:113

      fs.writeFileSync(validPath2, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fd9cb95cb0c893bf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/core/src/utils/workspaceContext.test.ts:248

        fs.writeFileSync(realFile, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #496af924035982f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/core/src/voice/whisperModelManager.ts:66

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e95a535271c28f00 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/test-setup.ts:8

if (process.env.NO_COLOR !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63fb3ad1d425620f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/core/test-setup.ts:9

  delete process.env.NO_COLOR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #216251c6cdebab66 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/devtools/esbuild.client.js:27

const indexHtml = readFileSync('client/index.html', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89bf4c07fc41420f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/devtools/esbuild.client.js:28

const clientJs = readFileSync('dist/client/main.js', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f16da76bc9e1d849 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/devtools/esbuild.client.js:30

writeFileSync(
  'src/_client-assets.ts',
  `/**\n * @license\n * Copyright 2025 Google LLC\n * SPDX-License-Identifier: Apache-2.0\n */\n\n// Auto-generated by esbuild.client.js — do not edit\nexport const INDEX_HTML = ${JSON.stringify(indexHtml)};\nexport const CLIENT_JS = ${JSON.stringify(clientJs)};\n`,
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b4c0af117ffa09e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/sdk/examples/session-context.ts:30

        fileContent = await context.fs.readFile('package.json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7a492e00783c2024 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/sdk/src/agent.integration.test.ts:16

const RECORD_MODE = process.env['RECORD_NEW_RESPONSES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22f948e4289b082a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/sdk/src/fs.ts:29

      return await fs.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55d4bdc6c3beb748 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/sdk/src/fs.ts:40

    await fs.writeFile(path, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7f555ed58237d91f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/sdk/src/skills.integration.test.ts:17

const RECORD_MODE = process.env['RECORD_NEW_RESPONSES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3deed1f4928cd4cb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/sdk/src/tool.integration.test.ts:18

const RECORD_MODE = process.env['RECORD_NEW_RESPONSES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca8ccd1c8a9c7e3d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/env-setup.ts:18

  process.env['HOME'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37953279fb4698d9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/env-setup.ts:20

    process.env['USERPROFILE'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55cc2b59726a5292 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/env-setup.ts:25

  process.env['GEMINI_CONFIG_DIR'] = join(runDir, '.gemini');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a0564e4be93021d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/env-setup.ts:28

  process.env['GEMINI_FORCE_FILE_STORAGE'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18a8baa00f42e3da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/env-setup.ts:31

  process.env['GEMINI_CLI_INTEGRATION_TEST'] = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2725ca8d4803268f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/env-setup.ts:34

  process.env['TELEMETRY_LOG_FILE'] = join(runDir, 'telemetry.log');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67e553f0b371a9ec — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/file-system-test-helpers.ts:62

      await fs.writeFile(newPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #500ab1d780c2d74a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/file-system-test-helpers.ts:67

          await fs.writeFile(path.join(newPath, item), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c6072a4d3d03a63 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/memory-baselines.ts:42

  const content = readFileSync(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0adc8a34c039ded — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/memory-baselines.ts:54

  writeFileSync(path, JSON.stringify(baselines, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08e33163d363cf33 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/perf-test-harness.ts:503

  const content = readFileSync(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f97836188690931 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/perf-test-harness.ts:515

  writeFileSync(path, JSON.stringify(baselines, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #caf82ab6c67e33ee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-mcp-server-template.mjs:13

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2a3bd826e91258a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-mcp-server-template.mjs:21

const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d966b372a3505fd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:405

      if (process.env['REGENERATE_MODEL_GOLDENS'] !== 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e56e01042810d6e8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:496

    writeFileSync(
      join(projectGeminiDir, 'settings.json'),
      JSON.stringify(settings, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d51a369a1e720e83 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:500

    writeFileSync(
      join(userGeminiDir, 'settings.json'),
      JSON.stringify(settings, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59d291f7346c3cd3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:518

    writeFileSync(
      join(userGeminiDir, 'state.json'),
      JSON.stringify(state, null, 2),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6a8f5b9e8182b6b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:526

    writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0253a40a3adfeda — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:563

      if (process.env['REGENERATE_MODEL_GOLDENS'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd1305fbf506bc16 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:581

    writeFileSync(scriptPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb52fb02161881b6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:606

      testConfig = JSON.parse(fs.readFileSync(configPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #774bd1cdbcc866cc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:619

    fs.writeFileSync(configFilePath, JSON.stringify(testConfig, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fd05d85cc100bea — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:649

        settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4642fdc896079db4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:664

      fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #018f5633f9c3d974 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:989

    const content = readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #921e1907d8fd835b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:1039

      process.env['REGENERATE_MODEL_GOLDENS'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd9accde60c016c8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:1078

          const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd892c0d64db2831 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:1340

    const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fd20522e471a6a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:1380

          const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6445a76f9bb20a22 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:1652

        if (process.env[v] && !envVars[v]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b11485e4d52a9fb0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/packages/test-utils/src/test-rig.ts:1653

          envVars[v] = process.env[v]!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d9cc3c46f4507156 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/scripts/generate-notices.js:44

    const depPackageJsonContent = await fs.readFile(
      depPackageJsonPath,
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #44b070fed0706897 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/scripts/generate-notices.js:74

        licenseContent = await fs.readFile(licenseFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #184d81a014f2cc9d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/scripts/generate-notices.js:140

    const packageJsonContent = await fs.readFile(packageJsonPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3af7c8790679ddc6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/scripts/generate-notices.js:144

    const packageLockJsonContent = await fs.readFile(
      packageLockJsonPath,
      'utf-8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a6935c518b976271 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/scripts/generate-notices.js:182

    await fs.writeFile(noticeFilePath, noticeText);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0de30e305688a328 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/src/extension.ts:45

    const response = await fetch(
      'https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery',
      {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          Accept: 'application/json;api-version=7.1-preview.1',
        },
        body: JSON.stringify({
          filters: [
            {
              criteria: [
                {
                  filterType: 7, // Corresponds to ExtensionName
                  value: CLI_IDE_COMPANION_IDENTIFIER,
                },
              ],
            },
          ],
          // See: https://learn.microsoft.com/en-us/azure/devops/extend/gallery/apis/hyper-linking?view=azure-devops
          // 946 = IncludeVersions | IncludeFiles | IncludeCategoryAndTags |
          //       IncludeShortDescription | IncludePublisher | IncludeStatistics
          flags: 946,
        }),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #69ecf2f68cd96faa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/src/ide-server.test.ts:359

      const response = await fetch(`http://localhost:${port}/mcp`, {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({
          jsonrpc: '2.0',
          method: 'initialize',
          params: {},
          id: 1,
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #312321325bf55df6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/src/ide-server.test.ts:373

      const response = await fetch(`http://localhost:${port}/mcp`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          Authorization: `Bearer test-auth-token`,
        },
        body: JSON.stringify({
          jsonrpc: '2.0',
          method: 'initialize',
          params: {},
          id: 1,
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #cc2b5d14a1896438 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/src/ide-server.test.ts:390

      const response = await fetch(`http://localhost:${port}/mcp`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          Authorization: 'Bearer invalid-token',
        },
        body: JSON.stringify({
          jsonrpc: '2.0',
          method: 'initialize',
          params: {},
          id: 1,
        }),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ff06778ba5a5ab8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/src/ide-server.test.ts:416

        const response = await fetch(`http://localhost:${port}/mcp`, {
          method: 'POST',
          headers: {
            'Content-Type': 'application/json',
            Authorization: header,
          },
          body: JSON.stringify({
            jsonrpc: '2.0',
            method: 'initialize',
            params: {},
            id: 1,
          }),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a5a9069890af609d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/src/ide-server.test.ts:443

    const req = http.request(
      {
        hostname: '127.0.0.1',
        port,
        ...options,
      },
      (res) => {
        res.resume(); // Consume response data to free up memory
        resolve(res);
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #afb6e164a4a1dc89 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/packages/vscode-ide-companion/src/ide-server.ts:91

    await fs.writeFile(portFile, content).then(() => fs.chmod(portFile, 0o600));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cf75bfd359c7b71 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/perf-tests/globalSetup.ts:52

  process.env['INTEGRATION_TEST_FILE_DIR'] = runDir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #464845fa0cbf95ee — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/perf-tests/globalSetup.ts:53

  process.env['VERBOSE'] = process.env['VERBOSE'] ?? 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #537524cbaf4176f0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/perf-tests/globalSetup.ts:60

  if (process.env['KEEP_OUTPUT'] !== 'true' && runDir) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #51e203a2def44c4e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/perf-tests/perf-usage.test.ts:25

const UPDATE_BASELINES = process.env['UPDATE_PERF_BASELINES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #60ea71ccf2862004 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/perf-tests/perf-usage.test.ts:29

const SAMPLE_COUNT = process.env['CI'] ? 5 : 3;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df5cb97c586d9ba1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/perf-tests/perf-usage.test.ts:229

              const content = readFileSync(logFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #afffb51a2aeb224c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/perf-tests/perf-usage.test.ts:336

      writeFileSync(
        join(geminiDir, 'projects.json'),
        JSON.stringify({
          projects: { [rig.testDir!]: identifier },
        }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b89beca32ced2ae3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/perf-tests/perf-usage.test.ts:342

      writeFileSync(join(projectTempDir, '.project_root'), rig.testDir!);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aaa68a8e247e3e92 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/perf-tests/perf-usage.test.ts:464

          writeFileSync(
            settingsPath,
            JSON.stringify({
              security: { folderTrust: { enabled: false } },
              ui: { terminalBuffer: true },
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9a6c329fd669a00e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/perf-tests/perf-usage.test.ts:565

          writeFileSync(
            settingsPath,
            JSON.stringify({
              security: { folderTrust: { enabled: false } },
              ui: { useAlternateBuffer: true },
            }),
          );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d8bc64116db26130 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/aggregate_evals.js:62

      const content = fs.readFileSync(reportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4cf20be145c40c75 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/aggregate_evals.js:101

    const currentRunId = process.env.GITHUB_RUN_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c4717a808597cf7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build.js:36

if (process.env.CI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1149464ab80ffbf0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build.js:70

    process.env.BUILD_SANDBOX === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c99617b49252016 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build.js:71

    process.env.BUILD_SANDBOX === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c81e6c96bf954661 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:102

  if (process.env.SKIP_SIGNING === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #89c70060dc8fb386 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:110

    const identity = process.env.APPLE_IDENTITY || '-';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f78302ea76ec13bc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:132

    if (process.env.WINDOWS_PFX_FILE && process.env.WINDOWS_PFX_PASSWORD) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #78d85fa78de5fe2f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:135

        process.env.WINDOWS_PFX_FILE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #558c94ab7380f6c8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:137

        process.env.WINDOWS_PFX_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05b02bebde3f11d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:158

      if (process.env.WINDOWS_PFX_PASSWORD) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #542f343407a21187 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:159

        msg = msg.replaceAll(process.env.WINDOWS_PFX_PASSWORD, '******');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f859336e36f4243 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:210

const includeNativeModules = process.env.BUNDLE_NATIVE_MODULES !== 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c7fb330bf1de50f3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:265

  readFileSync(join(root, 'package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #afa747c1a3ab4e83 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:286

  const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bbe5877bdafb8549 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:312

    const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a638a6da1f0b05bd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:324

  const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fb96ec3711f94373 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:337

    const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a9cdcddf343734de — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:356

    const content = readFileSync(fsPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d19da57decdcac01 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:370

writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b74627b65abab717 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_binary.js:379

writeFileSync(seaConfigPath, JSON.stringify(seaConfig, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9e57812826924132 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_package.js:57

writeFileSync(join(process.cwd(), 'dist', '.last_build'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a9f2e1618965a784 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:67

  process.exit(process.env.CI ? 1 : 0);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #295b85a357fae8fc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:114

  readFileSync(join(process.cwd(), 'package.json'), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3eb8feb293e3ca62 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:126

const buildStdout = process.env.VERBOSE ? 'inherit' : 'ignore';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f98bf323404cf371 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:143

      writeFileSync(tempAuthFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5501e87d992ac5cb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:152

    readFileSync(join(process.cwd(), 'package.json'), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fb2814b7d54b3ac1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:156

    process.env.GEMINI_SANDBOX_IMAGE_TAG || imageName.split(':')[1];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9204813129f54076 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:162

        process.env.BUILD_SANDBOX_FLAGS || ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #727ba417cceacfdb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/build_sandbox.js:180

      writeFileSync(argv.outputFile, finalImageName);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9072a919c76b11a3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/changed_prompt.js:24

  const targetBranch = process.env.GITHUB_BASE_REF || 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7dd34fdd2ed247cf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/changed_prompt.js:29

    const remoteUrl = process.env.GITHUB_REPOSITORY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9c88ae0428f85f21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/changed_prompt.js:30

      ? `https://github.com/${process.env.GITHUB_REPOSITORY}.git`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbdf08f1a3633d2d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/changed_prompt.js:39

    const head = process.env.PR_HEAD_SHA || 'HEAD';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #99c5ec42f08e95fc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/check-build-status.js:72

    fs.writeFileSync(warningsFilePath, errorMessage);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #86e7a54c6377b1b9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/check-build-status.js:128

    fs.writeFileSync(warningsFilePath, warningMessages.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3b86703b871c31ba — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/check-lockfile.js:17

    const fileContent = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5078c1c60603508a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/clean.js:38

  readFileSync(join(root, 'package.json'), 'utf-8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c7791abf6661d988 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:11

if (!process.env.GITHUB_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bb82ca455a54ee1b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/close_duplicate_issues.js:61

  auth: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d19268b4f8a7a7f6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/compare_evals.js:36

  const prReport = JSON.parse(fs.readFileSync(prReportPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c5aaf5b933d7c381 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/deflake.js:87

    await fs.writeFile(dockerIgnorePath, DOCKERIGNORE_CONTENT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #d1558271d6362371 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/scripts/download-ripgrep-binaries.ts:65

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #40ff33f0c170250e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/eval_utils.js:67

      const content = fs.readFileSync(reportPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d198710309abe502 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-git-commit-info.js:47

  const envCommit = process.env.GIT_COMMIT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bca957e73988d0b0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-git-commit-info.js:76

writeFileSync(cliGitCommitFile, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5675123db7e42349 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-git-commit-info.js:77

writeFileSync(coreGitCommitFile, fileContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #76bf6ccf1ecc8307 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-keybindings-doc.ts:54

  const currentDoc = await readFile(docPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fd67ddc98ebaf30a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-keybindings-doc.ts:80

  await writeFile(docPath, updatedDoc, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e0502bfe168836bf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-settings-doc.ts:72

  const doc = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c07cb8fb192d570 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-settings-doc.ts:102

  await writeFile(filePath, formattedDoc);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c6bf0cd0d53ba7e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-settings-schema.ts:73

    existing = await readFile(outputPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #24546a2733e2106f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-settings-schema.ts:98

  await writeFile(outputPath, formatted);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d12f74713002a53 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/get-release-version.js:21

  return JSON.parse(readFileSync(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cceae8d11c353f85 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/lint.js:25

  process.env.GEMINI_LINT_TEMP_DIR || join(tmpdir(), 'gemini-cli-linters');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a2b0faf676109d26 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/lint.js:187

  if (!process.env.GEMINI_LINT_TEMP_DIR) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9ad5460b7201b4ff — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/lint.js:259

    const baseRef = process.env.GITHUB_BASE_REF || 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8009df242b8a3a59 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/lint.js:293

    const content = readFileSync(file, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9338192682b7abf0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/lint.js:358

      const content = readFileSync(tsconfigPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e35e0265e158b820 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/lint.js:423

    const content = readFileSync(file, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1d367a079dafce5c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/local_telemetry.js:142

  fs.writeFileSync(OTEL_CONFIG_FILE, OTEL_CONFIG_CONTENT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #da9da33cff4509d0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/local_telemetry.js:165

      console.error(fs.readFileSync(JAEGER_LOG_FILE, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05c23e23ae4da808 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/local_telemetry.js:190

      console.error(fs.readFileSync(OTEL_LOG_FILE, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7969d9022bc8f658 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/prepare-github-release.js:14

  const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d9122be6238bdde — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/prepare-github-release.js:16

  fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dc21a00a4b5e7489 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/prepare-github-release.js:36

fs.writeFileSync(
  coreNpmrcPath,
  '@google-gemini:registry=https://npm.pkg.github.com/',
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b708c3eabf8cb4b6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/prepare-npm-release.js:13

  return JSON.parse(fs.readFileSync(path.resolve(rootDir, filePath), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c5e6a5fc205be628 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/prepare-npm-release.js:17

  fs.writeFileSync(
    path.resolve(rootDir, filePath),
    JSON.stringify(data, null, 2),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b5788ac111f24acc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:22

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #820ba4f2eca25d58 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:31

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #593c0a7874782943 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:67

  const testMode = argv.test || process.env.TEST_MODE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ce9342ff80544e5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:74

      auth: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #86d69ca12ae5503a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:79

    owner: process.env.GITHUB_REPOSITORY_OWNER || 'google-gemini',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b8f7a4b9fc31bee — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:80

    repo: process.env.GITHUB_REPOSITORY_NAME || 'gemini-cli',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3da90c5cc6860405 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:84

  const originalPr = argv.originalPr || process.env.ORIGINAL_PR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #15b9a6b52162ca5d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:86

    argv.success !== undefined ? argv.success : process.env.SUCCESS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2d7dd77ed7b72804 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:87

  const releaseVersion = argv.releaseVersion || process.env.RELEASE_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6303db0b0b6f0dbc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:90

    process.env.RELEASE_TAG ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2cd001955d49428f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:94

    process.env.NPM_TAG ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #210e1bf22dfb5321 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:96

  const channel = argv.channel || process.env.CHANNEL || 'stable';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e5e4d52b605e9dbf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:97

  const dryRun = argv.dryRun || process.env.DRY_RUN === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2cf9264e541ffa3b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:98

  const runId = process.env.GITHUB_RUN_ID || '12345678';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b11dea1c76a61926 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:99

  const raceConditionFailure = process.env.RACE_CONDITION_FAILURE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #819c762ca2a5fe32 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:102

  const currentReleaseVersion = process.env.CURRENT_RELEASE_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #72e67d36c2d8571a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:103

  const currentReleaseTag = process.env.CURRENT_RELEASE_TAG;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f6560be4b26da2dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-comment.js:104

  const currentPreviousTag = process.env.CURRENT_PREVIOUS_TAG;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d3b2c2cae290bbec — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:22

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43484b5dc36fe91d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:27

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f3119b845598d22b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:32

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1465aaca0a0571bb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:38

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e0e445e5b3f655de — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:43

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c09e981b060bc8e8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:52

      default: process.env.ENVIRONMENT || 'prod',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #76a5436b9617a83e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:70

  const testMode = argv.test || process.env.TEST_MODE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5f1036882138510a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:76

  const originalPr = argv.originalPr || process.env.ORIGINAL_PR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #817a0b33061de270 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:80

      : parseInt(process.env.EXIT_CODE || '1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05dcf6b13b68c9ed — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:81

  const commit = argv.commit || process.env.COMMIT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #980c3f9002f3256d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:82

  const channel = argv.channel || process.env.CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #efb5ea65cb278bbc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:85

    argv.repository || process.env.REPOSITORY || 'google-gemini/gemini-cli';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b5c2ccfedbbee8f6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:86

  const runId = argv.runId || process.env.GITHUB_RUN_ID || '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #01334199f42dd74f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:122

  if (testMode && !process.env.LOG_CONTENT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f945f63f5b77794c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-create-comment.js:131

    logContent = process.env.LOG_CONTENT || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8f3e624dd0c4cceb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:62

      demandOption: !process.env.GITHUB_ACTIONS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4adaf8834450a46f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:87

      default: process.env.ENVIRONMENT || 'prod',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1927db6870f785a6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:100

  const testMode = argv.test || process.env.TEST_MODE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b841f484b37cab2b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:103

    eventName: process.env.GITHUB_EVENT_NAME || 'pull_request',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a670c9b81da696a3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:105

      owner: process.env.GITHUB_REPOSITORY_OWNER || 'google-gemini',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #45c977e14d012ed6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:106

      repo: process.env.GITHUB_REPOSITORY_NAME || 'gemini-cli',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b179d24446ffb19a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:108

    payload: JSON.parse(process.env.GITHUB_EVENT_PAYLOAD || '{}'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #abe7898c2a22f5de — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:112

  const headRef = argv.headRef || process.env.HEAD_REF;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #51093271c7043b24 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:114

  const body = argv.prBody || process.env.PR_BODY || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b4a69a0ee5b785ec — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:117

    argv.forceSkipTests || process.env.FORCE_SKIP_TESTS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1902900ad8a6074c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:118

  const runId = process.env.GITHUB_RUN_ID || '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #73054427b24730d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:163

          env: { ...process.env, GH_TOKEN: process.env.GITHUB_TOKEN },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #75834ec352c57c77 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:193

      : process.env.WORKFLOW_ID || 'release-patch-3-release.yml';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #172f006e66232f1d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:245

        env: { ...process.env, GH_TOKEN: process.env.GITHUB_TOKEN },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bb950cec07195c7b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/releasing/patch-trigger.js:301

            env: { ...process.env, GH_TOKEN: process.env.GITHUB_TOKEN },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f87fcbe26617625 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/run_eval_regression.js:23

  const modelList = process.env.MODEL_LIST || 'gemini-3-flash-preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3fbe20db8da25d58 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/run_eval_regression.js:86

    fs.writeFileSync('eval_regression_report.md', combinedReport);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81a7930f744a7491 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/run_regression_check.js:51

    ? JSON.parse(fs.readFileSync(reportPath, 'utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0a381b8f6a02ed18 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/run_regression_check.js:275

  fs.writeFileSync(
    'evals/logs/pr_final_report.json',
    JSON.stringify(finalReport, null, 2),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8961b863395033bb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/sandbox_command.js:36

const homedir = () => process.env['GEMINI_CLI_HOME'] || os.homedir();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #88f3058df392f9eb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/sandbox_command.js:38

let geminiSandbox = process.env.GEMINI_SANDBOX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d02911ccd6677302 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/sandbox_command.js:44

      stripJsonComments(readFileSync(userSettingsFile, 'utf-8')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d2d649ee254a08a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/sandbox_command.js:70

  geminiSandbox = process.env.GEMINI_SANDBOX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #afd112a7806c8fb0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/sandbox_command.js:115

  if (os.platform() === 'darwin' && process.env.SEATBELT_PROFILE !== 'none') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ffefdb4a614dded — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/seed-test-inbox.js:70

  await fs.writeFile(filePath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #55c1cf294c4bb6cb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/seed-test-inbox.js:118

  existingGlobalGemini = await fs.readFile(globalGeminiMd, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a6ed181fe461b23 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/start.js:27

const pkg = JSON.parse(readFileSync(join(root, 'package.json'), 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5e2eb05726baea47 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/start.js:49

const isInDebugMode = process.env.DEBUG === '1' || process.env.DEBUG === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ebc3ed52d77cbbe0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/start.js:52

  if (process.env.SANDBOX) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2d154bacf80a5434 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/start.js:53

    const port = process.env.DEBUG_PORT || '9229';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ba70d2efc924cb2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/start.js:70

  process.env.GEMINI_KEEP_CI_ENV === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7be70b5006414462 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/start.js:71

  process.env.GEMINI_KEEP_CI_ENV === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b4f70f887ddb516 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry.js:17

  process.env.HOME || process.env.USERPROFILE || process.env.HOMEPATH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b33546c2953ca3d9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry.js:28

      const content = readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c1b185b702cea217 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry_gcp.js:81

  const projectId = process.env.OTLP_GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c7af53a06f01b26e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry_gcp.js:132

  fs.writeFileSync(OTEL_CONFIG_FILE, getOtelConfigContent(projectId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ac04b7f6c01b1dc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry_gcp.js:159

      console.error(fs.readFileSync(OTEL_LOG_FILE, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27e126bc39652257 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry_utils.js:28

const homedir = () => process.env['GEMINI_CLI_HOME'] || os.homedir();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #872a55df7d0fa523 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry_utils.js:59

    const content = fs.readFileSync(tmpFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0728839e9c41af1a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry_utils.js:113

  const content = fs.readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #318a1b76dcc03f25 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/telemetry_utils.js:123

  fs.writeFileSync(filePath, JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e89a4e84e965dfbd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/eval-inventory.ts:74

    const sourceText = await fs.promises.readFile(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b17e22f946454bb7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/eval-inventory.ts:259

  if (!generatedDate && process.env.SOURCE_DATE_EPOCH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #346c4d62e67085b0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/eval-inventory.ts:260

    const epoch = parseInt(process.env.SOURCE_DATE_EPOCH, 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #199f45b044db9f21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/eval-inventory.ts:267

    (process.env.EVAL_INVENTORY_STABLE_DATE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #545d3129280f9787 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/eval-inventory.ts:268

      process.env.EVAL_INVENTORY_DETERMINISTIC)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca937f14e6c09f64 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/version.js:19

  return JSON.parse(readFileSync(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1b4ba0171d83fb2a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/version.js:23

  writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4b6266cc7e869a3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sea/sea-launch.cjs:178

        fsMod.writeFileSync(destPath, new Uint8Array(content), {
          mode: 0o755,
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a07c80fbc4b6c71e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sea/sea-launch.cjs:228

  process.env.IS_BINARY = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #387a81d230728b78 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/third_party/get-ripgrep/src/downloadRipGrep.js:25

const VERSION = process.env.RIPGREP_VERSION || 'v13.0.0-10'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc6d9ec48ce828f1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/third_party/get-ripgrep/src/downloadRipGrep.js:30

  const arch = process.env.npm_config_arch || os.arch()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed6bc94dff8c1776 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/third_party/get-ripgrep/src/downloadRipGrep.js:31

  const platform = process.env.platform || os.platform()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #431efb83079e146a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/egress-service/src/actions/github.ts:12

  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #00af8ed19b3631d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/egress-service/src/app.ts:21

    service: process.env.K_SERVICE || 'caretaker-egress-service',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d882a4564315833e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/egress-service/src/app.ts:22

    revision: process.env.K_REVISION || 'local',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #89e3ea1d04795698 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/egress-service/src/server.ts:9

const port = process.env.PORT || 8080;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c1cbc2250820a56c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/ingestion-service/app.ts:24

  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b553f616590f78bb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/ingestion-service/app.ts:60

    service: process.env.K_SERVICE || 'caretaker-ingestion-service',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1746a71f32de13c5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/ingestion-service/app.ts:61

    revision: process.env.K_REVISION || 'local',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ae892e245f09711e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/tools/caretaker-agent/cloudrun/ingestion-service/server.ts:9

const port = parseInt(process.env.PORT || '8080', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #debb5a2976be414f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/history/sync.ts:84

      writeFileSync(
        join(HISTORY_DIR, 'metrics-timeseries.csv'),
        readFileSync(tsFile),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c9321b0e10cb2af7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/history/sync.ts:86

        readFileSync(tsFile),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4d430335be3ebe51 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/history/sync.ts:100

      writeFileSync(
        join(HISTORY_DIR, 'metrics-before-prev.csv'),
        readFileSync(mbFile),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fbc56a3f692a2140 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/history/sync.ts:102

        readFileSync(mbFile),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b9875d7c60500d4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/metrics/history-helper.ts:28

    const content = readFileSync(TIMESERIES_FILE, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5eeb96ae154dad03 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/metrics/index.ts:133

  writeFileSync(OUTPUT_FILE, results.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6b4059b340c03bdb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/metrics/index.ts:140

    timeseriesLines = readFileSync(TIMESERIES_FILE, 'utf-8').trim().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e19e01684681e718 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/metrics/index.ts:155

    writeFileSync(TIMESERIES_FILE, timeseriesLines.join('\n') + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #7750f6daf6d2e9f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/tools/gemini-cli-bot/metrics/scripts/actions_spend.ts:47

          const res = await fetch(
            `https://api.github.com/repos/${repoName}/actions/runs/${r.databaseId}/jobs`,
            {
              headers: {
                Authorization: `Bearer ${token}`,
                Accept: 'application/vnd.github.v3+json',
              },
            },
          );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

winston

npm dependency

medium pii_flow dependency Excluded from app score #db17d8321cbd5851 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/winston/transports/http.js:242 · flow /tmp/closeopen-i7n3rxzg/pkgs/npm/[email protected]/lib/winston/transports/http.js:249 → /tmp/closeopen-i7n3rxzg/pkgs/npm/[email protected]/lib/winston/transports/http.js:242

    const req = (this.ssl ? https : http).request({
      ...this.options,
      method: 'POST',
      host: this.host,
      port: this.port,
      path: `/${path.replace(/^\//, '')}`,
      headers: headers,
      auth: (auth && auth.username && auth.password) ? (`${auth.username}:${auth.password}`) : '',
      agent: this.agent
    });

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #b88bf81b1739fb5c — Filesystem access.

pkgs/npm/[email protected]/lib/winston/tail-file.js:10

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f25accd2f946a8dd — Filesystem access.

pkgs/npm/[email protected]/lib/winston/transports/file.js:11

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3350027a8dce7fbd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/winston/transports/http.js:242

    const req = (this.ssl ? https : http).request({
      ...this.options,
      method: 'POST',
      host: this.host,
      port: this.port,
      path: `/${path.replace(/^\//, '')}`,
      headers: headers,
      auth: (auth && auth.username && auth.password) ? (`${auth.username}:${auth.password}`) : '',
      agent: this.agent
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@bufbuild/protobuf

npm dependency

expand_more 4 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #f16e6ae3e66d11ee — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/bootstrap-inject.mjs:55

    const fileContent = readFileSync(filePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #679981be61d3cbd1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/bootstrap-inject.mjs:70

      writeFileSync(filePath, newContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a97df863982936a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/bootstrap-inject.mjs:402

      [path]: readFileSync(joinPath(wktInclude.dir, path), "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0580fde217bcb1f2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/proto-int64.ts:139

      process.env.BUF_BIGINT_DISABLE !== "1");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@grpc/grpc-js

npm dependency

expand_more 19 low-confidence finding(s)

low env_fs dependency Excluded from app score #2245465ba297a85d — Filesystem access.

pkgs/npm/@[email protected]/src/certificate-provider.ts:18

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7b4ecabf6937898 — Environment-variable access.

pkgs/npm/@[email protected]/src/environment.ts:19

  (process.env.GRPC_NODE_USE_ALTERNATIVE_RESOLVER ?? 'false') === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c03f29dbbfcf959 — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:51

  if (process.env.grpc_proxy) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c67e55d40dbf6534 — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:53

    proxyEnv = process.env.grpc_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #508c43ac9781ab77 — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:54

  } else if (process.env.https_proxy) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c95650e5024dabd — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:56

    proxyEnv = process.env.https_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63135f84e2a370e3 — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:57

  } else if (process.env.http_proxy) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ca45e5381f8de39 — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:59

    proxyEnv = process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b8003252179d8a8 — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:108

  let noProxyStr: string | undefined = process.env.no_grpc_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8f81f551fc89af9 — Environment-variable access.

pkgs/npm/@[email protected]/src/http_proxy.ts:111

    noProxyStr = process.env.no_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f298e6f3607a3f53 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/http_proxy.ts:265

    const request = http.request(options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #020490bf200324f1 — Environment-variable access.

pkgs/npm/@[email protected]/src/load-balancer-outlier-detection.ts:57

  (process.env.GRPC_EXPERIMENTAL_ENABLE_OUTLIER_DETECTION ?? 'true') === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cc32c79633d36bf — Environment-variable access.

pkgs/npm/@[email protected]/src/logging.ts:39

  process.env.GRPC_NODE_VERBOSITY ?? process.env.GRPC_VERBOSITY ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3f7891b11676a57 — Environment-variable access.

pkgs/npm/@[email protected]/src/logging.ts:97

  process.env.GRPC_NODE_TRACE ?? process.env.GRPC_TRACE ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d7565b34e00bfc0 — Filesystem access.

pkgs/npm/@[email protected]/src/tls-helpers.ts:18

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd79886d930fcf5f — Environment-variable access.

pkgs/npm/@[email protected]/src/tls-helpers.ts:21

  process.env.GRPC_SSL_CIPHER_SUITES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84668eb753966f32 — Environment-variable access.

pkgs/npm/@[email protected]/src/tls-helpers.ts:23

const DEFAULT_ROOTS_FILE_PATH = process.env.GRPC_DEFAULT_SSL_ROOTS_FILE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c1591f57b6694e7 — Filesystem access.

pkgs/npm/@[email protected]/src/tls-helpers.ts:30

      defaultRootsData = fs.readFileSync(DEFAULT_ROOTS_FILE_PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #42c6f3ff92113944 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/transport.ts:550

      http2Stream = this.session.request(headers);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

ansi-escapes

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #b0c4186e81cd58b0 — Environment-variable access.

pkgs/npm/[email protected]/base.js:10

const isTerminalApp = !isBrowser && process.env.TERM_PROGRAM === 'Apple_Terminal';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6e44c2374f791a2 — Environment-variable access.

pkgs/npm/[email protected]/base.js:12

const isTmux = !isBrowser && (process.env.TERM?.startsWith('screen') || process.env.TERM?.startsWith('tmux') || process.env.TMUX !== undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

chokidar

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #aa1e9c9cd3513dc1 — Environment-variable access.

pkgs/npm/[email protected]/index.js:284

        const envPoll = process.env.CHOKIDAR_USEPOLLING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23ed89cd35974ac7 — Environment-variable access.

pkgs/npm/[email protected]/index.js:294

        const envInterval = process.env.CHOKIDAR_INTERVAL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

clipboardy

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #990835a347b3faa4 — Environment-variable access.

pkgs/npm/[email protected]/index.js:23

			if (process.env.TERMUX_VERSION === undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

command-exists

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #980e00cfae1d8e64 — Filesystem access.

pkgs/npm/[email protected]/lib/command-exists.js:5

var fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

dotenv

npm dependency

expand_more 18 low-confidence finding(s)

low env_fs dependency Excluded from app score #78c6b75036728203 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:4

if (process.env.DOTENV_CONFIG_ENCODING != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cdd7c81cda0f084 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:5

  options.encoding = process.env.DOTENV_CONFIG_ENCODING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0b4297463033d31 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:8

if (process.env.DOTENV_CONFIG_PATH != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f35bb881a9a8d76b — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:9

  options.path = process.env.DOTENV_CONFIG_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4e1d43a7e6fa070 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:12

if (process.env.DOTENV_CONFIG_QUIET != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #001d8b76bd5b379b — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:13

  options.quiet = process.env.DOTENV_CONFIG_QUIET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba767f045b4ddd07 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:16

if (process.env.DOTENV_CONFIG_DEBUG != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b42aa918412d63fa — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:17

  options.debug = process.env.DOTENV_CONFIG_DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fefb5d8ba10bc04 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:20

if (process.env.DOTENV_CONFIG_OVERRIDE != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01f0c428f800ab1b — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:21

  options.override = process.env.DOTENV_CONFIG_OVERRIDE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c776d7d8d5d02b24 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:24

if (process.env.DOTENV_CONFIG_DOTENV_KEY != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #251cbfe513da237f — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:25

  options.DOTENV_KEY = process.env.DOTENV_CONFIG_DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afe9cba5cb041643 — Filesystem access.

pkgs/npm/[email protected]/lib/main.js:1

const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdad63bb114060aa — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:152

  if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4eaff9f3e1e551bc — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:153

    return process.env.DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ea258012b1ec615 — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:232

  const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || (options && options.debug))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30f79010a705f422 — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:233

  const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || (options && options.quiet))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1abeba125ea17514 — Filesystem access.

pkgs/npm/[email protected]/lib/main.js:288

      const parsed = DotenvModule.parse(fs.readFileSync(path, { encoding }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

execa

npm dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #664835ed0cdf7133 — Filesystem access.

pkgs/npm/[email protected]/lib/io/output-sync.js:132

			writeFileSync(path, serializedResult);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ae0d0e5744f36c1 — Filesystem access.

pkgs/npm/[email protected]/lib/stdio/handle-sync.js:41

		fileUrl: ({value}) => ({contents: [bufferToUint8Array(readFileSync(value))]}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5814a6a9528001e8 — Filesystem access.

pkgs/npm/[email protected]/lib/stdio/handle-sync.js:42

		filePath: ({value: {file}}) => ({contents: [bufferToUint8Array(readFileSync(file))]}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aabd462ce77af00a — Filesystem access.

pkgs/npm/[email protected]/lib/stdio/native.js:59

	return {type: 'uint8Array', value: bufferToUint8Array(readFileSync(targetFdNumber)), optionName};

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

extract-zip

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #b31afd41b0cba2eb — Filesystem access.

pkgs/npm/[email protected]/index.js:3

const { createWriteStream, promises: fs } = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fdir

npm dependency

expand_more 9 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #398034b4266f5bc4 — Filesystem access.

pkgs/npm/[email protected]__reposrc/__tests__/fdir.test.ts:2

import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #61f031d61988b61b — Filesystem access.

pkgs/npm/[email protected]__reposrc/benchmarks/benchmark.js:18

import { readFileSync, readdirSync, writeFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ffbb0e6541013c02 — Filesystem access.

pkgs/npm/[email protected]__reposrc/benchmarks/benchmark.js:21

import { readdir } from "fs/promises";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7d12b134555ebb7a — Filesystem access.

pkgs/npm/[email protected]__reposrc/benchmarks/benchmark.js:122

  const asyncCsv = readFileSync("./benchmark/results/async.csv", "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e88d0685249e5ea — Filesystem access.

pkgs/npm/[email protected]__reposrc/benchmarks/benchmark.js:123

  const syncCsv = readFileSync("./benchmark/results/sync.csv", "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #947665c473f3df49 — Filesystem access.

pkgs/npm/[email protected]__reposrc/benchmarks/benchmark.js:146

  writeFileSync("BENCHMARKS.md", md);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca420f71e5e224f3 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/api/functions/resolve-symlink.ts:1

import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03461b54f1c3f5b2 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/api/functions/walk-directory.ts:2

import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9096d57ea9e87653 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/api/walker.ts:13

import { Dirent } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fs-extra

npm dependency

expand_more 5 low-confidence finding(s)

low env_fs dependency Excluded from app score #93468146c8fb015f — Filesystem access.

pkgs/npm/[email protected]/lib/ensure/file.js:24

      await fs.writeFile(file, '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d8918ef64180157 — Filesystem access.

pkgs/npm/[email protected]/lib/ensure/file.js:32

    await fs.writeFile(file, '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d024ef50bfb190a — Filesystem access.

pkgs/npm/[email protected]/lib/ensure/file.js:60

  fs.writeFileSync(file, '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6571becd45b2242c — Filesystem access.

pkgs/npm/[email protected]/lib/output-file/index.js:16

  return fs.writeFile(file, data, encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e69f481476ac7ec — Filesystem access.

pkgs/npm/[email protected]/lib/output-file/index.js:25

  fs.writeFileSync(file, ...args)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ignore

npm dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #bb5820d82d501bb8 — Environment-variable access.

pkgs/npm/[email protected]/index.js:752

    process.env && process.env.IGNORE_TEST_WIN32

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97bdd1c60b73444e — Environment-variable access.

pkgs/npm/[email protected]/index.mjs:752

    process.env && process.env.IGNORE_TEST_WIN32

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1805d60d120fb36f — Environment-variable access.

pkgs/npm/[email protected]/legacy.js:651

typeof process !== 'undefined' && (process.env && process.env.IGNORE_TEST_WIN32 || process.platform === 'win32')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

isbinaryfile

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #4fdd197901492078 — Filesystem access.

pkgs/npm/[email protected]/lib/index.js:4

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

js-yaml

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #6d64882a9be716ec — Filesystem access.

pkgs/npm/[email protected]/bin/js-yaml.js:9

var fs       = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96807f27243b55c2 — Filesystem access.

pkgs/npm/[email protected]/bin/js-yaml.js:74

    fs.readFile(filename, encoding, callback);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mime

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #336d26de72eeb5b0 — Filesystem access.

pkgs/npm/[email protected]/src/mime_cli.ts:17

  const json = await fs.readFile(
    path.join(__dirname, '../../package.json'),
    'utf-8',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

open

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #42309dc5691eaaf0 — Filesystem access.

pkgs/npm/[email protected]/index.js:52

		const configContent = await fs.readFile(configFilePath, {encoding: 'utf8'});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6af6d5c2486b69b — Environment-variable access.

pkgs/npm/[email protected]/index.js:219

			: `${process.env.SYSTEMROOT || process.env.windir || 'C:\\Windows'}\\System32\\WindowsPowerShell\\v1.0\\powershell`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

puppeteer-core

npm dependency

expand_more 44 low-confidence finding(s)

low env_fs dependency Excluded from app score #0fa23e5fcece1343 — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/api/Frame.js:650

                content = await environment_js_1.environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47fc64afda14127c — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/api/Frame.js:689

                content = await environment_js_1.environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b503ceb9727aa94e — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/api/Page.js:821

            await environment_js_1.environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #6d813ad34e8eb8ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/cjs/puppeteer/cdp/TargetManager.js:144

        const listener = this.#attachedToTargetListenersBySession.get(session);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e3b3d57828e0c7bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/cjs/puppeteer/cdp/TargetManager.js:150

            session.off('Target.detachedFromTarget', this.#detachedFromTargetListenersBySession.get(session));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #43727305853ec769 — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/common/util.js:177

                await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4050ae066193cc4a — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/environment.d.ts:6

import type FS from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a2e5e11a6758f5f — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/node/BrowserLauncher.js:42

const fs_1 = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5311936e5b955bac — Environment-variable access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/node/ChromeLauncher.js:122

        const turnOnExperimentalFeaturesForTesting = process.env['PUPPETEER_TEST_EXPERIMENTAL_CHROME_FEATURES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef67150a5bee3a06 — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/node/FirefoxLauncher.js:12

const fs_1 = __importDefault(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8f166a59e4083a4 — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/node/util/fs.js:13

const fs_1 = __importDefault(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71332d2a56cec29a — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/puppeteer/puppeteer-core.js:49

const fs_1 = __importDefault(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4fdeb51e27e67dc — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:3319

          await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #558a64f483bf18c1 — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:8956

          content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ffdf1ff41085655 — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:9011

          content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a52c3230c48a3e0 — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:11109

        await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #345b2d1e659630c6 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/api/Frame.js:647

                content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2a04cdc7016272c — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/api/Frame.js:686

                content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c020813c2d8e93e — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/api/Page.js:817

            await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #61074925ef9a0f12 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/esm/puppeteer/cdp/TargetManager.js:141

        const listener = this.#attachedToTargetListenersBySession.get(session);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c5c6d4d5fd6d1dcb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/esm/puppeteer/cdp/TargetManager.js:147

            session.off('Target.detachedFromTarget', this.#detachedFromTargetListenersBySession.get(session));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #b4bb4d4e0dfb40a8 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/common/util.js:156

                await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a72e3dcaa6b35c33 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/environment.d.ts:6

import type FS from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cace4fac04b50e18 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/node/BrowserLauncher.js:6

import { existsSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fc1af3ed84584b0 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/node/ChromeLauncher.js:6

import { mkdtemp } from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec330c2b8fd6a962 — Environment-variable access.

pkgs/npm/[email protected]/lib/esm/puppeteer/node/ChromeLauncher.js:114

        const turnOnExperimentalFeaturesForTesting = process.env['PUPPETEER_TEST_EXPERIMENTAL_CHROME_FEATURES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6b585a29999263e — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/node/FirefoxLauncher.js:6

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e5021cc3da6dd18 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/node/FirefoxLauncher.js:7

import { rename, unlink, mkdtemp } from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da2e0d0a1251d086 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/node/util/fs.js:6

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41f88631b4a57223 — Filesystem access.

pkgs/npm/[email protected]/lib/esm/puppeteer/puppeteer-core.js:7

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #130f1d9a7d0b1ba9 — Filesystem access.

pkgs/npm/[email protected]/src/api/Frame.ts:904

      content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7be215bb1b0384ee — Filesystem access.

pkgs/npm/[email protected]/src/api/Frame.ts:984

      content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c115cdd42737cc28 — Filesystem access.

pkgs/npm/[email protected]/src/api/Page.ts:2312

    await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #086dc76f15eb0ec5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/cdp/TargetManager.ts:214

    const listener = this.#attachedToTargetListenersBySession.get(session);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e220c36a4d81c74b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/cdp/TargetManager.ts:223

        this.#detachedFromTargetListenersBySession.get(session)!,

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d6c919dbb4d1e24c — Filesystem access.

pkgs/npm/[email protected]/src/common/util.ts:212

        await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #775590cc93c76c23 — Filesystem access.

pkgs/npm/[email protected]/src/environment.ts:7

import type FS from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85e1381e847b9d9d — Filesystem access.

pkgs/npm/[email protected]/src/node/BrowserLauncher.ts:6

import {existsSync} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6cb47dc20515778 — Filesystem access.

pkgs/npm/[email protected]/src/node/ChromeLauncher.ts:7

import {mkdtemp} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76c79b554deceb03 — Environment-variable access.

pkgs/npm/[email protected]/src/node/ChromeLauncher.ts:168

      process.env['PUPPETEER_TEST_EXPERIMENTAL_CHROME_FEATURES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf2851aa0c6520f0 — Filesystem access.

pkgs/npm/[email protected]/src/node/FirefoxLauncher.ts:7

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faffa4c142b971bf — Filesystem access.

pkgs/npm/[email protected]/src/node/FirefoxLauncher.ts:8

import {rename, unlink, mkdtemp} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55a2d961dcc23208 — Filesystem access.

pkgs/npm/[email protected]/src/node/util/fs.ts:7

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a8b33bb439d63a3 — Filesystem access.

pkgs/npm/[email protected]/src/puppeteer-core.ts:9

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

systeminformation

npm dependency

expand_more 28 low-confidence finding(s)

low env_fs dependency Excluded from app score #6f5583879d88ff7c — Filesystem access.

pkgs/npm/[email protected]/lib/battery.js:17

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #defd07d794b1717c — Filesystem access.

pkgs/npm/[email protected]/lib/battery.js:103

          const file = fs.readFileSync(acPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #294d2eddeb595f4e — Filesystem access.

pkgs/npm/[email protected]/lib/battery.js:108

          fs.readFile(battery_path + 'uevent', function (error, stdout) {
            if (!error) {
              let lines = stdout.toString().split('\n');

              result.isCharging = (util.getValue(lines, 'POWER_SUPPLY_STATUS', '=').toLowerCase() === 'charging');
              result.acConnected = acConnected || result.isCharging;
              result.voltage = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_VOLTAGE_NOW', '='), 10) / 1000000.0;
              result.capacityUnit = result.voltage ? 'mWh' : 'mAh';
              result.cycleCount = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_CYCLE_COUNT', '='), 10);
              result.maxCapacity = Math.round(parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_CHARGE_FULL', '=', true, true), 10) / 1000.0 * (result.voltage || 1));
              const desingedMinVoltage = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_VOLTAGE_MIN_DESIGN', '='), 10) / 1000000.0;
              result.designedCapacity = Math.round(parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_CHARGE_FULL_DESIGN', '=', true, true), 10) / 1000.0 * (desingedMinVoltage || result.voltage || 1));
              result.currentCapacity = Math.round(parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_CHARGE_NOW', '='), 10) / 1000.0 * (result.voltage || 1));
              if (!result.maxCapacity) {
                result.maxCapacity = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_ENERGY_FULL', '=', true, true), 10) / 1000.0;
                result.designedCapacity = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_ENERGY_FULL_DESIGN', '=', true, true), 10) / 1000.0 | result.maxCapacity;
                result.currentCapacity = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_ENERGY_NOW', '='), 10) / 1000.0;
              }
              const percent = util.getValue(lines, 'POWER_SUPPLY_CAPACITY', '=');
              const energy = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_ENERGY_NOW', '='), 10);
              const power = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_POWER_NOW', '='), 10);
              const current = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_CURRENT_NOW', '='), 10);
              const charge = parseInt('0' + util.getValue(lines, 'POWER_SUPPLY_CHARGE_NOW', '='), 10);

              result.percent = parseInt('0' + percent, 10);
              if (result.maxCapacity && result.currentCapacity) {
                result.hasBattery = true;
                if (!percent) {
                  result.percent = 100.0 * result.currentCapacity / result.maxCapacity;
                }
              }
              if (result.isCharging) {
                result.hasBattery = true;
              }
              if (energy && power) {
                result.timeRemaining = Math.floor(energy / power * 60);
              } else if (current && charge) {
                result.timeRemaining = Math.floor(charge / current * 60);
              } else if (current && result.currentCapacity) {
                result.timeRemaining = Math.floor(result.currentCapacity / current * 60);
              }
              result.type = util.getValue(lines, 'POWER_SUPPLY_TECHNOLOGY', '=');
              result.model = util.getValue(lines, 'POWER_SUPPLY_MODEL_NAME', '=');
              result.manufacturer = util.getValue(lines, 'POWER_SUPPLY_MANUFACTURER', '=');
              result.serial = util.getValue(lines, 'POWER_SUPPLY_SERIAL_NUMBER', '=');
              if (callback) { callback(result); }
              resolve(result);
            } else {
              if (callback) { callback(result); }
              resolve(result);
            }
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89f0d08aef850cec — Filesystem access.

pkgs/npm/[email protected]/lib/bluetooth.js:21

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ac8044ce5c86378 — Filesystem access.

pkgs/npm/[email protected]/lib/bluetooth.js:132

            const infoFile = fs.readFileSync(element, { encoding: 'utf8' }).split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad599493b8807213 — Filesystem access.

pkgs/npm/[email protected]/lib/cpu.js:19

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e09c06787065193d — Filesystem access.

pkgs/npm/[email protected]/lib/cpu.js:794

              const linesRiscV = fs.readFileSync('/proc/cpuinfo').toString().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c01200dd2b37d45 — Filesystem access.

pkgs/npm/[email protected]/lib/cpu.js:1196

                  fs.readFile('/sys/class/thermal/thermal_zone0/temp', function (error, stdout) {
                    if (!error) {
                      let lines = stdout.toString().split('\n');
                      if (lines.length > 0) {
                        result.main = parseFloat(lines[0]) / 1000.0;
                        result.max = result.main;
                      }
                    }
                    if (callback) { callback(result); }
                    resolve(result);
                  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #311076e1f020aaa7 — Filesystem access.

pkgs/npm/[email protected]/lib/cpu.js:1363

              fs.readFile('/proc/cpuinfo', function (error, stdout) {
                if (!error) {
                  let lines = stdout.toString().split('\n');
                  result = util.getValue(lines, 'features', ':', true).toLowerCase();
                }
                if (callback) { callback(result); }
                resolve(result);
              });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84cd8a50ceedf677 — Filesystem access.

pkgs/npm/[email protected]/lib/filesystem.js:17

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25c984f61798ff74 — Filesystem access.

pkgs/npm/[email protected]/lib/filesystem.js:266

        fs.readFile('/proc/sys/fs/file-nr', function (error, stdout) {
          if (!error) {
            let lines = stdout.toString().split('\n');
            if (lines[0]) {
              const parts = lines[0].replace(/\s+/g, ' ').split(' ');
              if (parts.length === 3) {
                result.allocated = parseInt(parts[0], 10);
                result.available = parseInt(parts[1], 10);
                result.max = parseInt(parts[2], 10);
                if (!result.available) { result.available = result.max - result.allocated; }
              }
            }
            if (callback) {
              callback(result);
            }
            resolve(result);
          } else {
            fs.readFile('/proc/sys/fs/file-max', function (error, stdout) {
              if (!error) {
                let lines = stdout.toString().split('\n');
                if (lines[0]) {
                  result.max = parseInt(lines[0], 10);
                }
              }
              if (callback) {
                callback(result);
              }
              resolve(result);
            });
          }
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #569fdb3932d4f060 — Filesystem access.

pkgs/npm/[email protected]/lib/filesystem.js:283

            fs.readFile('/proc/sys/fs/file-max', function (error, stdout) {
              if (!error) {
                let lines = stdout.toString().split('\n');
                if (lines[0]) {
                  result.max = parseInt(lines[0], 10);
                }
              }
              if (callback) {
                callback(result);
              }
              resolve(result);
            });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66034cdbb8d9f46e — Filesystem access.

pkgs/npm/[email protected]/lib/graphics.js:16

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc8c0a4fd7353eda — Filesystem access.

pkgs/npm/[email protected]/lib/memory.js:20

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb6d4a0fc5ebdfdb — Filesystem access.

pkgs/npm/[email protected]/lib/memory.js:172

          fs.readFile('/proc/meminfo', function (error, stdout) {
            if (!error) {
              const lines = stdout.toString().split('\n');
              result.total = parseInt(util.getValue(lines, 'memtotal'), 10);
              result.total = result.total ? result.total * 1024 : os.totalmem();
              result.free = parseInt(util.getValue(lines, 'memfree'), 10);
              result.free = result.free ? result.free * 1024 : os.freemem();
              result.used = result.total - result.free;

              result.buffers = parseInt(util.getValue(lines, 'buffers'), 10);
              result.buffers = result.buffers ? result.buffers * 1024 : 0;
              result.cached = parseInt(util.getValue(lines, 'cached'), 10);
              result.cached = result.cached ? result.cached * 1024 : 0;
              result.slab = parseInt(util.getValue(lines, 'slab'), 10);
              result.slab = result.slab ? result.slab * 1024 : 0;
              result.buffcache = result.buffers + result.cached + result.slab;

              let available = parseInt(util.getValue(lines, 'memavailable'), 10);
              result.available = available ? available * 1024 : result.free + result.buffcache;
              result.active = result.total - result.available;

              result.swaptotal = parseInt(util.getValue(lines, 'swaptotal'), 10);
              result.swaptotal = result.swaptotal ? result.swaptotal * 1024 : 0;
              result.swapfree = parseInt(util.getValue(lines, 'swapfree'), 10);
              result.swapfree = result.swapfree ? result.swapfree * 1024 : 0;
              result.swapused = result.swaptotal - result.swapfree;
              result.writeback = parseInt(util.getValue(lines, 'writeback'), 10);
              result.writeback = result.writeback ? result.writeback * 1024 : 0;
              result.dirty = parseInt(util.getValue(lines, 'dirty'), 10);
              result.dirty = result.dirty ? result.dirty * 1024 : 0;
            }
            if (callback) { callback(result); }
            resolve(result);
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d3d1ee1b369ff07 — Filesystem access.

pkgs/npm/[email protected]/lib/network.js:19

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #231680cb17556721 — Filesystem access.

pkgs/npm/[email protected]/lib/osinfo.js:17

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d80cc3d8bbade38f — Filesystem access.

pkgs/npm/[email protected]/lib/osinfo.js:1228

            const lines = fs.readFileSync('/proc/cpuinfo', { encoding: 'utf8' }).toString().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f6d2633701bdd88 — Filesystem access.

pkgs/npm/[email protected]/lib/processes.js:17

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfcc1ec4c9cb8a49 — Filesystem access.

pkgs/npm/[email protected]/lib/system.js:16

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b90419f157f6be10 — Filesystem access.

pkgs/npm/[email protected]/lib/system.js:183

            fs.readFile('/proc/cpuinfo', function (error, stdout) {
              if (!error) {
                let lines = stdout.toString().split('\n');
                result.model = util.getValue(lines, 'hardware', ':', true).toUpperCase();
                result.version = util.getValue(lines, 'revision', ':', true).toLowerCase();
                result.serial = util.getValue(lines, 'serial', ':', true);
                const model = util.getValue(lines, 'model:', ':', true);
                // reference values: https://elinux.org/RPi_HardwareHistory
                // https://www.raspberrypi.org/documentation/hardware/raspberrypi/revision-codes/README.md
                if (util.isRaspberry(lines)) {
                  const rPIRevision = util.decodePiCpuinfo(lines);
                  result.model = rPIRevision.model;
                  result.version = rPIRevision.revisionCode;
                  result.manufacturer = 'Raspberry Pi Foundation';
                  result.raspberry = {
                    manufacturer: rPIRevision.manufacturer,
                    processor: rPIRevision.processor,
                    type: rPIRevision.type,
                    revision: rPIRevision.revision
                  };
                }
              }
              if (callback) { callback(result); }
              resolve(result);
            });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52fc0132e1013c46 — Filesystem access.

pkgs/npm/[email protected]/lib/util.js:17

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd7a6fab10b80f9c — Environment-variable access.

pkgs/npm/[email protected]/lib/util.js:38

const WINDIR = process.env.WINDIR || 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e9f34cee1e0a496 — Environment-variable access.

pkgs/npm/[email protected]/lib/util.js:380

  return _windows ? `"${process.env.VBOX_INSTALL_PATH || process.env.VBOX_MSI_INSTALL_PATH}\\VBoxManage.exe"` : 'vboxmanage';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e94abbbc4070855f — Filesystem access.

pkgs/npm/[email protected]/lib/util.js:654

      cpuinfo = fs.readFileSync('/proc/cpuinfo', { encoding: 'utf8' }).toString().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #519159bd7d7d3eb2 — Filesystem access.

pkgs/npm/[email protected]/lib/util.js:669

    osrelease = fs.readFileSync('/etc/os-release', { encoding: 'utf8' }).toString().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c86fc64a74a29e21 — Filesystem access.

pkgs/npm/[email protected]/lib/util.js:1105

      cpuinfo = fs.readFileSync('/proc/cpuinfo', { encoding: 'utf8' }).toString().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #430a2a1a86fead74 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/util.js:2520

    const request = http
      .get(url, function (res) {
        res.on('data', () => { });
        res.on('end', () => {
          resolve({
            url,
            statusCode: res.statusCode,
            message: res.statusMessage,
            time: Date.now() - t
          });
        });
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

tar

npm dependency

expand_more 12 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #5b5d33d89a75fe28 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/generate-parse-fixtures.js:2

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cf48d86230c6198e — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/generate-parse-fixtures.js:99

  fs.writeFileSync(eventsfile, JSON.stringify(events, null, 2) + '\n')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #38e85bcf2ea9509a — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/generate-parse-fixtures.js:104

  const tardata = fs.readFileSync(tarfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5378607539737da2 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/get-write-flag.ts:9

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e9bcbebdbf93cbb — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/get-write-flag.ts:11

const platform = process.env.__FAKE_PLATFORM__ || process.platform

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab7e4d432a402cd2 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/get-write-flag.ts:17

  Number(process.env.__FAKE_FS_O_FILENAME__) ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03d7ae4ea1c62e41 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/normalize-windows-path.ts:7

  process.env.TESTING_TAR_FAKE_PLATFORM || process.platform

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #018be9e1f3291de3 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/pack.ts:10

import fs, { type Stats } from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2107be3d5fd164a7 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/path-reservations.ts:14

  process.env.TESTING_TAR_FAKE_PLATFORM || process.platform

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7113762fa94cec20 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/unpack.ts:53

  process.env.TESTING_TAR_FAKE_PLATFORM || process.platform

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c789866a16717661 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/write-entry.ts:1

import fs, { type Stats } from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4d9463a17adcf31 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/write-entry.ts:63

  myuser: string = process.env.USER || ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

undici

npm dependency

expand_more 13 low-confidence finding(s)

low env_fs dependency Excluded from app score #01edf895f4d01fac — Environment-variable access.

pkgs/npm/[email protected]/lib/core/connect.js:18

if (global.FinalizationRegistry && !(process.env.NODE_V8_COVERAGE || process.env.UNDICI_NO_FG)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30bfdcc27ebf2934 — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/client-h1.js:64

  const llhttpWasmData = process.env.JEST_WORKER_ID ? require('../llhttp/llhttp-wasm.js') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c6386d63f6e1ecb8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/dispatcher/client-h2.js:363

    stream = session.request(headers, { endStream: false, signal })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dad2b796f47df904 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/dispatcher/client-h2.js:467

    stream = session.request(headers, { endStream: shouldEndStream, signal })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #193aa570b67aaa61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/dispatcher/client-h2.js:471

    stream = session.request(headers, {
      endStream: shouldEndStream,
      signal
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9c1cd57709bc0c4d — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:26

    const HTTP_PROXY = httpProxy ?? process.env.http_proxy ?? process.env.HTTP_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #451f68cc81d17905 — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:33

    const HTTPS_PROXY = httpsProxy ?? process.env.https_proxy ?? process.env.HTTPS_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38747857cfcf39f7 — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:147

    return process.env.no_proxy ?? process.env.NO_PROXY ?? ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfcd6e6784684dc2 — Environment-variable access.

pkgs/npm/[email protected]/lib/mock/pending-interceptors-formatter.js:23

        colors: !disableColors && !process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cc75785b7932db0 — Environment-variable access.

pkgs/npm/[email protected]/lib/web/fetch/dispatcher-weakref.js:38

  if (process.env.NODE_V8_COVERAGE && process.version.startsWith('v18')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bc5db479baa54acb — Filesystem access.

pkgs/npm/[email protected]/scripts/strip-comments.js:7

  ? transcode(readFileSync('./undici-fetch.js'), 'utf8', 'latin1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #78a7c9e240d58184 — Filesystem access.

pkgs/npm/[email protected]/scripts/strip-comments.js:8

  : readFileSync('./undici-fetch.js')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9491390f5ce27077 — Filesystem access.

pkgs/npm/[email protected]/scripts/strip-comments.js:10

writeFileSync('./undici-fetch.js', buffer.toString('latin1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

web-tree-sitter

npm dependency

expand_more 35 low-confidence finding(s)

low env_fs dependency Excluded from app score #62daa1360d5870a6 — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.cjs:83

          var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #094563c01ef66437 — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.cjs:88

            var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5217a6a0efc39321 — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.cjs:94

            var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d8fff7a50357636c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/tree-sitter.cjs:153

              var response = await fetch(url, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7c30e59bc270ce67 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/tree-sitter.cjs:621

              var response = fetch(binaryFile, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #6bad5ca086d2d792 — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.cjs:4287

        bytes = fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #4744aa2689f8872f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/tree-sitter.cjs:4289

        bytes = fetch(input).then((response) => response.arrayBuffer().then((buffer) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #82d13d45efbc854d — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.js:2035

        bytes = fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #637ce8f7462d01c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/tree-sitter.js:2037

        bytes = fetch(input).then((response) => response.arrayBuffer().then((buffer) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #175d7b960b079fd8 — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.js:2109

      var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6dba3083e4911a74 — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.js:2116

        var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0dbb46d94c0cea9c — Filesystem access.

pkgs/npm/[email protected]/debug/tree-sitter.js:2122

        var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #fa25f0b5e8cbb570 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/tree-sitter.js:2181

          var response = await fetch(url, {
            credentials: "same-origin"
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5828d895cc460ec1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/tree-sitter.js:2661

          var response = fetch(binaryFile, {
            credentials: "same-origin"
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #09cd8150a96d0b31 — Filesystem access.

pkgs/npm/[email protected]/lib/tree-sitter.cjs:98

  var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53313fae6fdbeaa6 — Filesystem access.

pkgs/npm/[email protected]/lib/tree-sitter.cjs:105

    var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f830fbd6c4e2c49d — Filesystem access.

pkgs/npm/[email protected]/lib/tree-sitter.cjs:112

    var ret = fs.readFileSync(filename, binary ? undefined : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #96f913bce0ec2d03 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/tree-sitter.cjs:189

      var response = await fetch(url, {
        credentials: "same-origin"
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8f6310132f58d42f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/tree-sitter.cjs:833

      var response = fetch(binaryFile, {
        credentials: "same-origin"
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #23bb84163abe55a0 — Filesystem access.

pkgs/npm/[email protected]/src/language.ts:265

        bytes = fs.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #bae8813e33484e00 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/language.ts:267

        bytes = fetch(input)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #fb10e01b80996b6a — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.cjs:75

          var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #626172d840f875b4 — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.cjs:80

            var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e6a9b9a3638e39b — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.cjs:85

            var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #5e9a9f4b1e13f3d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/tree-sitter.cjs:140

              var response = await fetch(url, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #40542fd74c6a70d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/tree-sitter.cjs:307

              var response = fetch(binaryFile, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #fc4c4c6d75e3c6fd — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.cjs:3760

        bytes = fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #49304ab526918534 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/tree-sitter.cjs:3762

        bytes = fetch(input).then((response) => response.arrayBuffer().then((buffer) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #cf40b384998f06a5 — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.js:2035

        bytes = fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #888c68b9566c3751 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/tree-sitter.js:2037

        bytes = fetch(input).then((response) => response.arrayBuffer().then((buffer) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #197a3d0f89490e8c — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.js:2101

      var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2736794b4fda42b6 — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.js:2108

        var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37842430e0e32198 — Filesystem access.

pkgs/npm/[email protected]/tree-sitter.js:2113

        var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d3eeb882ceef68c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/tree-sitter.js:2168

          var response = await fetch(url, {
            credentials: "same-origin"
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3747eb80b7503826 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/tree-sitter.js:2338

          var response = fetch(binaryFile, {
            credentials: "same-origin"
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

zod-to-json-schema

npm dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #e813f269bb0fa808 — Filesystem access.

pkgs/npm/[email protected]/createIndex.ts:1

import { readdirSync, writeFileSync, statSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82da93c16752b70d — Filesystem access.

pkgs/npm/[email protected]/createIndex.ts:32

writeFileSync("./src/index.ts", lines.join(";\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a630110e1698d150 — Filesystem access.

pkgs/npm/[email protected]/postcjs.ts:1

import { writeFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b1cb43d0f7fa88d — Filesystem access.

pkgs/npm/[email protected]/postcjs.ts:3

writeFileSync("./dist/cjs/package.json", '{"type":"commonjs"}', "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4269a50a3ff13d71 — Filesystem access.

pkgs/npm/[email protected]/postesm.ts:1

import { writeFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de8fe51e14a18867 — Filesystem access.

pkgs/npm/[email protected]/postesm.ts:3

writeFileSync("./dist/esm/package.json", '{"type":"module","main":"index.js"}', "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

ink-gradient prod — scan budget exceeded
ink-spinner prod — scan budget exceeded
lowlight prod — scan budget exceeded
prompts prod — scan budget exceeded
react prod — scan budget exceeded
string-width prod — scan budget exceeded
tinygradient prod — scan budget exceeded
ws prod — scan budget exceeded
@lydell/node-pty prod — scan budget exceeded
cors prod — scan budget exceeded

verified_user Possible application data leak

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Potential data exfiltration in application code

</> First-Party Code

first-party (npm): packages/core

first-party (npm)

first-party (npm): packages/a2a-server

first-party (npm): packages/cli

first-party (npm): packages/devtools

first-party (npm): packages/sdk

first-party (npm): packages/test-utils

first-party (npm): packages/vscode-ide-companion

</> Dependencies

@a2a-js/sdk

@google/genai

@google/gemini-cli-core

winston

@bufbuild/protobuf

@grpc/grpc-js

ansi-escapes

chokidar

clipboardy

command-exists

dotenv

execa

extract-zip

fdir

fs-extra

ignore

isbinaryfile

js-yaml

mime

open

puppeteer-core

systeminformation

tar

undici

web-tree-sitter

zod-to-json-schema

Skipped dependencies