Close Open Privacy Scan

link https://github.com/run-llama/llama_index
bolt Snapshot: commit 67514f6
science engine v3
schedule 2026-07-10T05:16:21.606291+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

Incomplete scan — only 0/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 677 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

32 high 16 medium 629 low
First-party packages: 63
Dependency packages: 0
Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: api.app.predibase.comapi.brightdata.comapi.keywordsai.codashscope.aliyuncs.comeutils.ncbi.nlm.nih.govicanhazdadjoke.comnla.zapier.com

high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:114 → repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 → repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:131 → repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 → repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:24 → repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:75 → repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:76
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:40 → repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:40 → repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:60 → repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:169 → repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:185 → repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:59 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:95 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:135 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:130 → repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:166 → repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:176
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:41 → repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:27 → repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:37 → repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:132 → repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:80 → repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81
high first-party (python): llama-index-integrations/llms/llama-index-llms-mymagic User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193
high first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204
high first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292
high first-party (python): llama-index-integrations/indices/llama-index-indices-managed-dashscope User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126
high first-party (python): llama-index-integrations/indices/llama-index-indices-managed-dashscope User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141
high first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 → repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91

</> First-Party Code

first-party (python)

python first-party
high pii_flow production #351add7faf32929a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:114 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 
                    response = requests.post(
                        DEFAULT_YANDEXGPT_API_BASE, json=payload, headers=header
                    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f486deb97e57ca0e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 
        response = requests.put(
            base_url + UPSERT_PIPELINE_ENDPOINT,
            data=json.dumps(pipeline_create),
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b0a6f66bb4342fa4 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 
        response = requests.post(
            base_url + START_PIPELINE_ENDPOINT.format(pipeline_id=pipeline_id),
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #68f378e8266f4d7d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 
        response = requests.post(self._endpoint, json=data, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6b1fa06540dcc3a1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 
            response = requests.post(
                self._endpoint, json=data, headers=headers, stream=True
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d42d632774cd55c3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 
        resp = requests.post(
            self.completion_url,
            json=question_data,
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #521b66a3ebdee397 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91 
            response = requests.post(
                service_url, data=json.dumps(my_input), headers=headers
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2c73e3353cc318ac — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:131 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 
        response = requests.post(SEARCH_TEXT_BASE_URL, headers=headers, data=payload)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6bf35b19f90585e2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 
        res = requests.get(url, auth=HTTPBasicAuth(self.username, self.api_key))

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2a27ef3e93302320 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:24 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 
        response = requests.post(graphql_endpoint, json=payload, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4318fda27758d816 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:76 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:75 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:76 
        response = requests.get(url, headers=self._authorization_headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #074384ea855c6acf — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:40 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57 
        response = requests.post(url=self.api_url, json=data, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ba1831ac95b36c53 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:40 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43 
            response = requests.get(full_url, timeout=10)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2758fcabc3a24d16 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:60 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63 
            response = requests.get(full_url, timeout=10)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #02957125f13bbf15 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:169 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 
            response = requests.post(
                LAYOUT_ANALYSIS_URL, headers=headers, files=files, data=options
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #80e30db3be15b0f1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:185 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187 
            response = requests.post(
                self.base_url,
                headers=headers,
                files=files,
                data={
                    "ocr": self.ocr,
                    "model": self.model,
                    "output_formats": f"['{self.output_format}']",
                    "coordinates": self.coordinates,
                    "base64_encoding": f"{self.base64_encoding}",
                },
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2833b2f3eafa1eee — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:59 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 
            response = httpx.post(
                QUERY_DATA_ENDPOINT,
                headers=headers,
                json=payload,
                timeout=API_TIMEOUT_SECONDS,
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7a7d68426322b1ef — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:95 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 
        response = requests.post(api_url, headers=headers, json=data)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b4a7cc1bd15cc053 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:135 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 
        response = requests.post(api_url, headers=headers, json=data)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ed361be75beee1a5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:130 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132 
        response = requests.get(url, auth=auth)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3444f806b7744910 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:176 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:166 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:176 
        response = requests.post(api_url, headers=headers, json=body)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #95284af1623633e3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:41 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39 
        response = requests.post(
            f"{self.cv_url}?features={','.join(features)}&language={self.language}&api-version={self.api_version}",
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            json={"url": url},
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3845feafab099c0b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:27 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25 
        response = requests.get(
            ENDPOINT_BASE_URL + endpoint,
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            params={"q": query, "mkt": self.lang, "count": self.results},
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #634a62de7da9a6fd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:37 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41 
        response = requests.get(url, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e5f536589b295542 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:132 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128 
            response = requests.get(
                self.base_url,
                params=params,
                headers={
                    "Authorization": f"Bearer {self.api_key}",
                },
                timeout=30,
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ca794adac944298f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:80 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81 
        response = requests.get(url, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #fc23b3730a20ad3b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:121 
            self._run.track(
                Text(llm_input),
                name="prompt",
                step=self._llm_response_step,
                context={"event_id": event_id},
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d1fb1b1499e9a7ff — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:128 
            self._run.track(
                Text(llm_output),
                name="response",
                step=self._llm_response_step,
                context={"event_id": event_id},
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #41997467dde7cbe2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:138 
                self._run.track(
                    Text(chunk),
                    name="chunk",
                    step=self._llm_response_step,
                    context={"chunk_id": chunk_id, "event_id": event_id},
                )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #92de7a9543372eae — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:10 
        from opentelemetry.exporter.otlp.proto.http.trace_exporter import (
            OTLPSpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #9670b0c088186aa1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:13 
        from opentelemetry.sdk import trace as trace_sdk

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4bc52af9d92cd61f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:14 
        from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e9aaa79ec11ba320 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:13 
from opentelemetry import context, propagate, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d090ea1e2a0c233b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:14 
from opentelemetry.sdk.resources import SERVICE_NAME, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2e2377793f579207 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:15 
from opentelemetry.sdk.trace import SpanProcessor, TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #9ecf4093baf9c04d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:16 
from opentelemetry.sdk.trace.export import (
    BatchSpanProcessor,
    ConsoleSpanExporter,
    SimpleSpanProcessor,
    SpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a86479d609286647 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:22 
from opentelemetry.trace import set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 461 low-confidence finding(s)
low env_fs production #72e046df187ce5b9 — Filesystem access.
repo/docs/examples/discover_llamaindex/document_management/group_conversations.py:30 
with open(data_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab451fbf69e16c5c — Filesystem access.
repo/docs/examples/discover_llamaindex/document_management/group_conversations.py:77 
with open("conversation_docs.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b8033d9bf72dc93 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:119 
    with open(MKDOCS_YML) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #194bf42608a0d3eb — Filesystem access.
repo/docs/scripts/prepare_for_build.py:144 
                    with open(toml_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0413aac19ba6bc8a — Filesystem access.
repo/docs/scripts/prepare_for_build.py:176 
                    with open(os.path.join(full_path, module_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6739359f49ffe28f — Filesystem access.
repo/docs/scripts/prepare_for_build.py:194 
    with open(MKDOCS_YML, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe64187597b9b43d — Filesystem access.
repo/docs/scripts/prepare_for_build.py:202 
    with open("./src/content/docs/framework/CHANGELOG.md", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fb0d972dc2660fc — Filesystem access.
repo/docs/scripts/prepare_for_build.py:210 
    with open("./src/content/docs/framework/CHANGELOG.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df2fde551131ae43 — Environment-variable access.
repo/llama-dev/llama_dev/pkg/cmd_exec.py:44 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f3a8c8ce131f33 — Filesystem access.
repo/llama-dev/llama_dev/release/changelog.py:84 
    with open(repo_root / "CHANGELOG.md", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92d4e402f9669a83 — Filesystem access.
repo/llama-dev/llama_dev/release/check.py:20 
    with open(repo_root / "llama-index-core" / "pyproject.toml", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #66898327a2e81419 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-dev/llama_dev/release/check.py:29 
        with urllib.request.urlopen(url, timeout=10) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #811e093e6918a5ae — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:16 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe1d0fcd843d6138 — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:23 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b671eab748c3fd1c — Filesystem access.
repo/llama-dev/llama_dev/utils.py:46 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7aec88f6fb76ae86 — Filesystem access.
repo/llama-dev/llama_dev/utils.py:55 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f7a9713981cea63 — Filesystem access.
repo/llama-dev/llama_dev/utils.py:74 
    with open(pyproject_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78b0bc55ac9554b6 — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:320 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d4ae175a4cb27ff — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:321 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #730da140c5e58e52 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:119 
    with open(mappings_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40a654d4ba99941e — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:206 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f59bc5002d00533 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:246 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c596d56a6334222 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:251 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d275d8a403afe724 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:257 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dd0a00df675d6d8 — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:18 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c34327dad4b47e56 — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:24 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8586cad49d3f6a76 — Environment-variable access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:43 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2ae3c23f131bdfe — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:38 
                save_file = open(
                    os.path.join(dataset_full_path, "dev_distractor.json"), "wb"
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aee8198207360b75 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:74 
        f = open(dataset_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec7e413bf7336f69 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:102 
        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3081fdc43256db92 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:108 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae6f5e952a1438bf — Environment-variable access.
repo/llama-index-core/llama_index/core/evaluation/retrieval/metrics.py:444 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b2ea70df571e130 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:24 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de102de6caf0dbdb — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:25 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d42f4417d08fe0eb — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:26 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a912228f9ac5432 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:43 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0f2d5f560b09460 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:44 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16f7568bf8369e1a — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:45 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82957ca69133e68 — Environment-variable access.
repo/llama-index-core/llama_index/core/llms/utils.py:42 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5827409e8d0e0e4 — Filesystem access.
repo/llama-index-core/llama_index/core/multi_modal_llms/generic_utils.py:44 
    with open(image_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #066c53e2454ac5b7 — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:204 
            with open(obj_node_mapping_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c16ed7b1e73b1f88 — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:217 
            with open(obj_node_mapping_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfc63239aebcbb53 — Filesystem access.
repo/llama-index-core/llama_index/core/readers/json.py:102 
            with open(input_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #962bfb44a0855d76 — Filesystem access.
repo/llama-index-core/llama_index/core/schema.py:1433 
            img_bytes = self.image_resource.path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d91caed4c29fdb52 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:56 
        if "NLTK_DATA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98b25cea3d971e82 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:57 
            self._nltk_data_dir = str(Path(os.environ["NLTK_DATA"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85583a4a4294bcfc — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:167 
        if "TIKTOKEN_CACHE_DIR" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a5e925620fe8443 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:169 
            os.environ["TIKTOKEN_CACHE_DIR"] = os.path.join(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b79e9a6b65bc8f4b — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:179 
            del os.environ["TIKTOKEN_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cf215871ef9e7cd — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:442 
    if "LLAMA_INDEX_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70c4ca53c3628ad4 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:443 
        path = Path(os.environ["LLAMA_INDEX_CACHE_DIR"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bddbffb8afd40e55 — Filesystem access.
repo/llama-index-core/llama_index/core/utils.py:664 
        data = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fff8ee0a3494746 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-adapter/llama_index/embeddings/adapter/utils.py:39 
        with open(
            os.path.join(output_path, "config.json"), "w", encoding="utf-8"
        ) as fOut:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca845a7955bcb4c2 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-adapter/llama_index/embeddings/adapter/utils.py:48 
        with open(os.path.join(input_path, "config.json"), encoding="utf-8") as fIn:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2793913b1c2e3206 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:259 
        aws_region = aws_region or os.getenv("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e5e1ed2aba113fa — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:260 
        aws_access_key_id = aws_access_key_id or os.getenv("AWS_ACCESS_KEY_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98083aaab3a25595 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:261 
        aws_secret_access_key = aws_secret_access_key or os.getenv(
            "AWS_SECRET_ACCESS_KEY"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c459b8d6765f85d9 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:264 
        aws_session_token = aws_session_token or os.getenv("AWS_SESSION_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a152a9d5fe77e968 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:52 
        if pat is None and os.environ.get("CLARIFAI_PAT") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07bc8e48d7f5ca06 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:53 
            pat = os.environ.get("CLARIFAI_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f57197223887890a — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:55 
        if not pat and os.environ.get("CLARIFAI_PAT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66c95e748ab79b68 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-cohere/llama_index/embeddings/cohere/base.py:298 
            with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29efdf9c6d98346b — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-deepinfra/llama_index/embeddings/deepinfra/base.py:75 
        self._api_token = api_token or os.getenv(ENV_VARIABLE, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be196a877542254d — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:34 
NEO4J_USERNAME = os.getenv("NEO4J_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d69ba7966215bd3 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:35 
NEO4J_PASSWORD = os.getenv("NEO4J_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #911820314ff056aa — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:36 
NEO4J_URL = os.getenv("NEO4J_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9db39be52f9c9647 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:37 
NEO4J_DATABASE = os.getenv("NEO4J_DATABASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91c4f9079a1c1035 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:327 
    args.quant_config = os.getenv("QUANT_CONFIG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01ab8332978c1672 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:200 
        api_key = api_key or os.getenv("GOOGLE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97cc7752c834ea0f — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:201 
        vertexai = vertexai_config is not None or os.getenv(
            "GOOGLE_GENAI_USE_VERTEXAI", False
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #427605096e9e1438 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:204 
        project = (vertexai_config or {}).get("project") or os.getenv(
            "GOOGLE_CLOUD_PROJECT", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #924acb4ff7c0a4d5 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:207 
        location = (vertexai_config or {}).get("location") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adc9fcc72788c4c0 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:40 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27a53cc186a0edbe — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:41 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19385d9d4db47b94 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:51 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0be000727bbefd26 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:62 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #562daed6c0b7cd8f — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:64 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b036b432000261c — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:66 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dcbca58e2b84761 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:76 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8455942d9831d181 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:81 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0a21aad3e61d885 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:90 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d23581fe70b4ff99 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-jinaai/llama_index/embeddings/jinaai/base.py:155 
    with open(file_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd4ef2334a3a3234 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-mixedbreadai/llama_index/embeddings/mixedbreadai/base.py:84 
            api_key = api_key or os.environ["MXBAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7eeaeeeaac9c055b — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-netmind/llama_index/embeddings/netmind/base.py:35 
        api_key = api_key or os.environ.get("NETMIND_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecb8e895b9e69168 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-nvidia/llama_index/embeddings/nvidia/base.py:31 
        default_factory=lambda: os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7dd6972027303ee — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-oci-genai/llama_index/embeddings/oci_genai/base.py:190 
                        with open(
                            oci_config.get("security_token_file"), encoding="utf-8"
                        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4be5222f8881f23a — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-openai/llama_index/embeddings/openai/utils.py:154 
    openai_api_key = api_key or os.environ.get("OPENAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc7268baeeb9c7c4 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-together/llama_index/embeddings/together/base.py:29 
        api_key = api_key or os.environ.get("TOGETHER_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #77e698a1dafd696a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 
                    response = requests.post(
                        DEFAULT_YANDEXGPT_API_BASE, json=payload, headers=header
                    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #b7a9e27c9f8b6c8f — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/util.py:60 
        with open(fn, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a221590d106a02bb — Environment-variable access.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 
    api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae00d12fec83a315 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:213 
            key in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09ad71d4e9895d29 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:221 
        graphd_host, graphd_port = os.environ["NEBULA_ADDRESS"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dd643dc323cc30c — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:223 
            os.environ["NEBULA_USER"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #841df2a6ff07f345 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:224 
            os.environ["NEBULA_PASSWORD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #584f1126805bd08a — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:133 
        with open(Path(persist_dir) / "multi_embed_store.pkl", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87c755eba9e10dce — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:158 
            open(Path(persist_dir) / "multi_embed_store.pkl", "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d41228d241bda27f — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:78 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fce45570ddd4ff89 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:79 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1775380aac66a5e5 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:80 
        self._base_url = os.environ.get("DASHSCOPE_BASE_URL", None) or base_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d6bcf389bd805db — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 
        workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #deeb3e7921ede76e — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 
        api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d1e0041136e75ed — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:115 
            or os.environ.get("DASHSCOPE_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18326c798f255410 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:47 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb60fa1547a4b274 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:48 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e53a260c50a224a0 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:67 
            os.environ.get("DASHSCOPE_BASE_URL", None) or DASHSCOPE_DEFAULT_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ca6d66f4038dc43 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/utils.py:25 
            self.api_key = os.getenv("LANCEDB_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fdeb049cc39e1f8 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:88 
            os.environ.get("VECTARA_CORPUS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f3a0bc9cd00852c — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:91 
        self._vectara_api_key = vectara_api_key or os.environ.get("VECTARA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #279ee8ed0e4ce409 — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:362 
        files = {"file": (filename, open(file_path, "rb"))}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a34f83a820c1b9fc — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:41 
        api_key = api_key or os.environ.get("AIBADGR_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a9650ebce7cbe43 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:42 
        api_base = os.environ.get("AIBADGR_BASE_URL", api_base)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1741fe0cf907d328 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-asi/llama_index/llms/asi/base.py:65 
        api_key = api_key or os.environ.get("ASI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a63f1ad58cecc01c — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/base.py:236 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1a8a47706c68b24 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:141 
            api_key = api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64e737ca1670a9e9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:223 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64751e194a9c785e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:32 
        api_base: str = os.environ.get("CEREBRAS_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d93e7a2d57b6f50 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:37 
        api_key = api_key or os.environ.get("CEREBRAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f45cfe64098b6787 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:83 
        if pat is None and os.environ.get("CLARIFAI_PAT") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8510d22c9ebd350 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:84 
            pat = os.environ.get("CLARIFAI_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #295adb5350a42c3a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:86 
        if not pat and os.environ.get("CLARIFAI_PAT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fd36f530bb7e4ba — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:111 
        default=os.environ.get("SNOWFLAKE_USERNAME", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05b2201a09211311 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:115 
        default=os.environ.get("SNOWFLAKE_ACCOUNT", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eda5e5edef8f9808 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:119 
        default=os.environ.get("SNOWFLAKE_KEY_FILE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9edc7e5714e35016 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:172 
        self.user = user or os.environ.get("SNOWFLAKE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f757a3b70256946 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:173 
        self.account = account or os.environ.get("SNOWFLAKE_ACCOUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9665ab5a34ac7f7 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:177 
        env_key_file = os.environ.get("SNOWFLAKE_KEY_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfa2ade71cf9a877 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:184 
                with open(jwt_token) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fb6cd537ef90983 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:22 
    with open(SPCS_TOKEN_PATH) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc7f4ef49f970d4c — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:32 
        os.path.exists(SPCS_TOKEN_PATH) and os.environ.get("SNOWFLAKE_HOST") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3723b583c3b98412 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:45 
    return os.getenv("SNOWFLAKE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f38a4ec1daeba313 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:61 
    with open(sf_private_key_filepath, "rb") as pem_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e1db668461e5260 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:36 
        api_key = api_key or os.environ.get("DATABRICKS_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d710381fec312feb — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:37 
        api_base = api_base or os.environ.get("DATABRICKS_SERVING_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb3b66fa38e622c0 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-deepseek/llama_index/llms/deepseek/base.py:36 
        api_key = api_key or os.environ.get("DEEPSEEK_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d03cff02c535f13 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-featherlessai/llama_index/llms/featherlessai/base.py:37 
        api_key = api_key or os.environ.get("FEATHERLESS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac2fcc5821f9f3e6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/examples/basic.py:301 
    args.quant_config = os.getenv("QUANT_CONFIG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b991e71bbdb957e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:98 
    args.local_rank = int(os.getenv("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fbe9b1b97be8a35 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:99 
    args.world_size = int(os.getenv("WORLD_SIZE", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44d8f992c13dbb80 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:100 
    args.global_rank = int(os.getenv("RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dce110c4447a479d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:113 
        const_marking = os.getenv("ENABLE_CONST_MARKING", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa7bc91d8c3f67bd — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:135 
    os.environ.setdefault("EXPERIMENTAL_WEIGHT_SHARING", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e05eeb8470d08b83 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:138 
        os.environ.setdefault("GRAPH_VISUALIZATION", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b32a0a4abf2dd75 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:142 
        os.environ.setdefault("PT_HPU_LAZY_ACC_PAR_MODE", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d8024a175f01369 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:143 
        os.environ.setdefault("PT_HPU_ENABLE_LAZY_COLLECTIVES", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8e589c45ff721f3 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:153 
        os.environ.setdefault("PT_HPUGRAPH_DISABLE_TENSOR_CACHE", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60442ceac7a016c9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:199 
        api_key = api_key or os.getenv("GOOGLE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4001f0d4d4031ebe — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:202 
            or os.getenv("GOOGLE_GENAI_USE_VERTEXAI", "false") != "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b942c92712e3a645 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:204 
        project = (vertexai_config or {}).get("project") or os.getenv(
            "GOOGLE_CLOUD_PROJECT", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a15054160a280b21 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:207 
        location = (vertexai_config or {}).get("location") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #643e75763d2693c9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-groq/llama_index/llms/groq/base.py:37 
        api_key = api_key or os.environ.get("GROQ_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3761299ef47b7d35 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:38 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c507078bceaac4d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:39 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8dd129afdea6a13 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:49 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a195efd3a17acd1 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:60 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c35d6268d029c79 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:62 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18e3e3b572a58933 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:64 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #668b2b92f2fbf371 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:74 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b61bbf6a420b61a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:79 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1745bbbef280819 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:88 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #44c5b1465e800efb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:50 
        response = requests.get("https://api.keywordsai.co/api/models/public")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #b0684d4b47bbd024 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:166 
    openai_api_key = api_key or os.environ.get("KEYWORDSAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a18fb478c1392b4b — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-llama-cpp/llama_index/llms/llama_cpp/base.py:232 
                with open(model_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2810e7936e4d22d5 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:138 
        self.api_key = self.api_key or os.getenv("MARITALK_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e23a751009372950 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-meta/llama_index/llms/meta/base.py:42 
        api_key = api_key or os.environ.get("LLAMA_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90a16b46b01e638b — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-minimax/llama_index/llms/minimax/base.py:43 
        api_key = api_key or os.environ.get("MINIMAX_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e233313e7cb093d3 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-modelslab/llama_index/llms/modelslab/base.py:68 
        api_key = api_key or os.environ.get("MODELSLAB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4a53d923648cde2 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nebius/llama_index/llms/nebius/base.py:42 
        api_key = api_key or os.environ.get("NEBIUS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #729aa059025d56a6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-netmind/llama_index/llms/netmind/base.py:39 
        api_key = api_key or os.environ.get("NETMIND_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb4a57166126de2f — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:182 
                with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #799ac37399c992e7 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:245 
                with open(serialize_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f885786a010ffa3f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia/llama_index/llms/nvidia/base.py:52 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9d9dc51152c6713 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-oci-genai/llama_index/llms/oci_genai/utils.py:141 
                with open(oci_config.get("security_token_file"), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #339000299cb51706 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-openai/llama_index/llms/openai/utils.py:1039 
    openai_api_key = api_key or os.environ.get("OPENAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37befdcf8f0729d0 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ovhcloud/llama_index/llms/ovhcloud/base.py:109 
            api_key = os.environ.get("OVHCLOUD_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #671e2727d01afeec — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:24 
        api_key = api_key or os.environ.get("PAIEAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c91dc2fa4db5533 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:25 
        api_base = api_base or os.environ.get("PAIEAS_API_BASE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ab224a58c1c045b — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-palm/llama_index/llms/palm/base.py:86 
        api_key = api_key or os.environ.get("PALM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f17fe0f7bde0e17f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:118 
        api_key = api_key or getenv("PPLX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4eddab17c733a1bf — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-pipeshift/llama_index/llms/pipeshift/base.py:64 
        api_key = api_key or os.environ.get("PIPESHIFT_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48ba5e700a40462a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:121 
            else os.environ.get("PREDIBASE_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62ffbf0ab679cac9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:166 
            os.environ["PREDIBASE_GATEWAY"] = "https://api.app.predibase.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de35c687c8f265bc — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-reka/llama_index/llms/reka/base.py:117 
        api_key = api_key or os.getenv("REKA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2927f7f16b6303c1 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-replicate/llama_index/llms/replicate/base.py:97 
                base_kwargs["image"] = open(self.image, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f19cbb1c17e9fdf — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-together/llama_index/llms/together/base.py:39 
        api_key = api_key or os.environ.get("TOGETHER_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a90692c40d31022 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-yi/llama_index/llms/yi/base.py:90 
        api_key = api_key or os.environ.get("YI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3240347b3bcd7452 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-you/llama_index/llms/you/base.py:125 
        return self.ydc_api_key or os.environ["YDC_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42538c35c7f8e395 — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 
        DASHSCOPE_API_KEY = os.environ.get("DASHSCOPE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e18d7cced775ba6 — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:87 
            os.getenv("DASHSCOPE_BASE_URL", "https://dashscope.aliyuncs.com")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd42a8dba846b8f3 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-aimon-rerank/llama_index/postprocessor/aimon_rerank/base.py:41 
            api_key = api_key or os.environ["AIMON_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a754e892aa4a7367 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-cohere-rerank/llama_index/postprocessor/cohere_rerank/base.py:74 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #220ad6490770a443 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-contextual-rerank/llama_index/postprocessor/contextual_rerank/base.py:45 
            api_key = api_key or os.environ["CONTEXTUAL_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4133c5ae2dd75154 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-dashscope-rerank/llama_index/postprocessor/dashscope_rerank/base.py:35 
            api_key = api_key or os.environ["DASHSCOPE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f3e7af48a82ee0d — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-google-rerank/llama_index/postprocessor/google_rerank/base.py:79 
            self.project_id = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #878afaf1c34c1851 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:37 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db61b7c163c58af3 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:38 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e2e7aa12c9c31db — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:48 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c64d6315dd592a9 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:59 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2d2dba22c2af16b — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:61 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #488bbf94bcbfbefa — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:63 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a41bff451bee313 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:73 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #177623941f51da55 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:78 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a68215478e667d55 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:87 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2db6c70d3444d62a — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-mixedbreadai-rerank/llama_index/postprocessor/mixedbreadai_rerank/base.py:56 
            api_key = api_key or os.environ["MXBAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13c46710bfe2e422 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank/llama_index/postprocessor/nvidia_rerank/base.py:72 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f31ba899056522bc — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-pinecone-native-rerank/llama_index/postprocessor/pinecone_native_rerank/base.py:38 
            api_key = api_key or os.environ["PINECONE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87cc1eb2d66a7da6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch/llama_index/readers/alibabacloud_aisearch/base.py:127 
                content=base64.b64encode(open(file_path, "rb").read()).decode(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be9bf4b125f3a3d2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch/llama_index/readers/alibabacloud_aisearch/base.py:265 
                content=base64.b64encode(open(file_path, "rb").read()).decode(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae90f5c148c7fd5a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-azstorage-blob/llama_index/readers/azstorage_blob/base.py:145 
            with open(file=download_file_path, mode="wb") as download_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2558bde5ebf5b6b5 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-azstorage-blob/llama_index/readers/azstorage_blob/base.py:245 
                with open(file=download_file_path, mode="wb") as download_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6fc1a968fe85108 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:29 
        if os.getenv("BITBUCKET_USERNAME") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41f64b932f95e7b9 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:31 
        if os.getenv("BITBUCKET_API_KEY") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3abcc1da0fec8086 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:44 
        username = os.getenv("BITBUCKET_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20a25237838370f3 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:45 
        api_token = os.getenv("BITBUCKET_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b2953c814b7f8e4 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:19 
    client_id = os.getenv("BOX_CLIENT_ID", "YOUR_BOX_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aca8d0bf2e070c3d — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:20 
    client_secret = os.getenv("BOX_CLIENT_SECRET", "YOUR_BOX_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8160fe596a9531ea — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:23 
    enterprise_id = os.getenv("BOX_ENTERPRISE_ID", "YOUR_BOX_ENTERPRISE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44167a496940beae — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:24 
    ccg_user_id = os.getenv("BOX_USER_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be1dd67cb05d8a99 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-box/llama_index/readers/box/BoxAPI/box_api.py:161 
    with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e31911cdb009433 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-chatgpt-plugin/llama_index/readers/chatgpt_plugin/base.py:24 
        self._bearer_token = bearer_token or os.getenv("BEARER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb8aba037eb139b2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:60 
        with open(custom_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cec1e240c67de403 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:204 
                api_token = os.getenv(CONFLUENCE_API_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fda84c06525cebc — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:210 
                    user_name = os.getenv(CONFLUENCE_USERNAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aafbaefbbf561edc — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:211 
                    password = os.getenv(CONFLUENCE_PASSWORD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1053f8b0e37cce03 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dad-jokes/llama_index/readers/dad_jokes/base.py:19 
        response = requests.get(
            "https://icanhazdadjoke.com/", headers={"Accept": "application/json"}
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #18129f834eb5b295 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:31 
DASHSCOPE_DEFAULT_DC_CATEGORY = os.getenv(
    "DASHSCOPE_DEFAULT_DC_CATEGORY", default="default"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2686c4d86eea6f2 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:102 
            api_key = os.getenv("DASHSCOPE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3de0853e70e08590 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:115 
            return os.getenv("DASHSCOPE_WORKSPACE_ID", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f39af2c91f4ae4a6 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:125 
            return os.getenv("DASHSCOPE_CATEGORY_ID", DASHSCOPE_DEFAULT_DC_CATEGORY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e16c452228fb2a92 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:135 
                os.getenv("DASHSCOPE_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc3aacb90b410511 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:162 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea824fc959e37cb — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/utils.py:30 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45cb57d033c75f76 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-discord/llama_index/readers/discord/base.py:114 
            discord_token = os.environ["DISCORD_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c388d6535079ebd0 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-docstring-walker/llama_index/readers/docstring_walker/base.py:116 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #880d0a5ac4eafa6b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:44 
    access_token: Optional[str] = os.environ.get("DOCUGAMI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54b0ce9ee397c94e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:87 
        access_token: Optional[str] = os.environ.get("DOCUGAMI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24d97ae0d4a47b50 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-feedly-rss/llama_index/readers/feedly_rss/base.py:37 
            auth_file.write_text(auth.strip())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed88179bab1dad14 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:109 
    app_id = os.environ.get("FEISHU_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edcbf2e1802051f8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:110 
    app_secret = os.environ.get("FEISHU_APP_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #037c20c3b97fea04 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:112 
    print(reader.load_data(document_ids=[os.environ.get("FEISHU_DOC_ID")]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #311c15d3d28199c5 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/html/base.py:36 
        with open(file, encoding="utf-8") as html_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #316aa51c569f2602 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/paged_csv/base.py:43 
        with open(file, encoding=self._encoding) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e18389d87c1afaa — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/rtf/base.py:35 
        with open(str(input_file)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af8d08e9d60a3949 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/tabular/base.py:49 
        with open(file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38469dc364669add — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:97 
            with open(env_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f48e39c11fcfe2ce — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:102 
                        os.environ[key.strip()] = value.strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #874860325b2cfd42 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:105 
    api_token = os.getenv("GITBOOK_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82f9822948a58b45 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:106 
    space_id = os.getenv("GITBOOK_SPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e050eadb07b6e147 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:24 
    with open(key_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e463dde85f066899 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:33 
    app_id = os.getenv("GITHUB_APP_ID", "123456")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14bc4e8d082bcb5f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:34 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID", "789012")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6c8b20d2e8c1ec3 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:37 
    private_key_path = os.getenv("GITHUB_PRIVATE_KEY_PATH", "path/to/your-app.private-key.pem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2b0dcbc33fa4f97 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:43 
        private_key = os.getenv("GITHUB_PRIVATE_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #babf8412d14cd864 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:83 
    app_id = os.getenv("GITHUB_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b17e00069a7c6f67 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:84 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04d1d3b42bf44b22 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:85 
    private_key = os.getenv("GITHUB_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96c007f577241039 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:119 
    app_id = os.getenv("GITHUB_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2146d41ebefdcb9e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:120 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccdcdc839b3663e1 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:121 
    private_key = os.getenv("GITHUB_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0471456f600f9d56 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:165 
    example = os.getenv("EXAMPLE", "basic")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1181d7c046fbae92 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/collaborators/github_client.py:103 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4aa38c8a750fef5b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/issues/github_client.py:104 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0256ca9beb62272 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1038 
    github_client = GithubClient(github_token=os.environ["GITHUB_TOKEN"], verbose=True)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70f69b98419bb93c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/github_client.py:329 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c496fbd66c40b533 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/calendar/base.py:137 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #715533254f429e55 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/chat/base.py:281 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5074ecc615c0781b — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/docs/base.py:125 
                with open("credentials.json") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d33d068de1623786 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/docs/base.py:133 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dea4e27f5c4a2f9 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:104 
            with open(credentials_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #835e2e82967879c2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:108 
            with open(token_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #243c5b939eeb7ec7 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:112 
            with open(service_account_key_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ae82000f80d0655 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:196 
                with open(self.token_path, "w", encoding="utf-8") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99e63cb78bd4e122 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:485 
            with open(new_file_name, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e971d13b38263d2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:728 
            with open(downloaded_file, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea9039fbb5a35f90 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/gmail/base.py:85 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d7eee7d2c18b3de — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/keep/base.py:58 
            with open("keep_credentials.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #342a5a7c52610899 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:39 
        self.api_key = api_key or os.getenv("GOOGLE_MAPS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #89f7658345ee4a97 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 
        response = requests.post(SEARCH_TEXT_BASE_URL, headers=headers, data=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #caa3f50546a7298c — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/sheets/base.py:205 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52061b93ca3d95b8 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gpt-repo/llama_index/readers/gpt_repo/base.py:44 
    with open(ignore_file_path) as ignore_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ad8f06971085a9e — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gpt-repo/llama_index/readers/gpt_repo/base.py:79 
                with open(file_path, errors="ignore", encoding=encoding) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #8300374bf3c108ba — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-guru/llama_index/readers/guru/base.py:75 
        response = requests.get(initial_url, auth=self.guru_auth)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7e8a316f933b4359 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-huggingface-fs/llama_index/readers/huggingface_fs/base.py:32 
        test_data = self.fs.read_bytes(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1004eb1717881e37 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-huggingface-fs/llama_index/readers/huggingface_fs/base.py:40 
                with open(tmp / "tmp.jsonl.gz", "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6748f8136fc02bc9 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-jaguar/llama_index/readers/jaguar/base.py:255 
        with open("/tmp/debugjaguarrdr.log", "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a82b28806b150fe3 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:73 
        if "JOPLIN_ACCESS_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f26cfff80dde73a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:74 
            return os.environ["JOPLIN_ACCESS_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5710079c1263f378 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-json/llama_index/readers/json/base.py:100 
        with open(input_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea8ba828e8290fb — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:69 
            os.environ["TIKA_SERVER_ENDPOINT"] = tika_server_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fda4188bb4d7881 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:74 
            os.environ["TIKA_SERVER_JAR"] = tika_server_jar_path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #360e63c89a127f10 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:80 
                os.environ["TIKA_SERVER_JAR"] = str(cached_jar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20078be573a43ecb — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:83 
                os.environ["TIKA_SERVER_JAR"] = str(cached_jar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89593d1545e97d8e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:90 
                os.environ["TIKA_SERVER_ENDPOINT"] = "http://localhost:9998"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7d19b2fa9184883 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:101 
        os.environ["TIKA_SERVER_ENDPOINT"] = "http://localhost:9998"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #60d7fcc8f8591b43 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 
        response = requests.post(graphql_endpoint, json=payload, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e7d705e3b532ad4f — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:277 
        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77cfe38b7db9e80f — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:858 
            with open(local_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f53063ad78babf8 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-sharepoint/llama_index/readers/microsoft_sharepoint/base.py:447 
        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e83b5dac3d6ff498 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-notion/llama_index/readers/notion/base.py:36 
            integration_token = os.getenv(INTEGRATION_TOKEN_NAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f9461521177d67d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-opendal/llama_index/readers/opendal/base.py:73 
        with open(filepath, "wb") as w:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa660657f81d412c — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-oracleai/llama_index/readers/oracleai/base.py:134 
            with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #bb216e1be5fe4f4c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:43 
        resp = requests.get(
            "https://eutils.ncbi.nlm.nih.gov/entrez/eutils/esearch.fcgi",
            params=parameters,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8c0776fe3056f648 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:126 
        resp = requests.get(
            "https://eutils.ncbi.nlm.nih.gov/entrez/eutils/esearch.fcgi",
            params=parameters,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #8189e919477a229c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:38 
            self.api_key = os.getenv("PATENTSVIEW_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a7ace26ea56ff019 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:65 
        response = requests.post(BASE_URL, json=self.json, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a4b9f58511d4ba47 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:70 
            response = requests.post(BASE_URL, json=self.json, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4d1482e8c739da69 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/utility.py:16 
CLASSIFIER_URL = os.getenv("PEBBLO_CLASSIFIER_URL", "http://localhost:8000")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d20165035fe66b52 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/utility.py:212 
        path=os.environ["PWD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c333be5e3f8489d7 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-psychic/llama_index/readers/psychic/base.py:39 
            psychic_key = os.environ["PSYCHIC_SECRET_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #236c04ca028f721f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:35 
            client_id=os.getenv("REDDIT_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #876161664219b6c7 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:36 
            client_secret=os.getenv("REDDIT_CLIENT_SECRET"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5924319a41a63a22 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:37 
            user_agent=os.getenv("REDDIT_USER_AGENT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fd5182c3164736e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:38 
            username=os.getenv("REDDIT_USERNAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2da6f984199fe85 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:39 
            password=os.getenv("REDDIT_PASSWORD"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90327e95f7cc1591 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-remote/llama_index/readers/remote/base.py:88 
                with open(filepath, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cec009e2436a1c6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/base.py:86 
                    with open(
                        f"data/{curr_tic}/{curr_year}/{curr_filing_type}.json", "w"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a678578669bf6eb1 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/base.py:92 
                    with open(
                        f"data/{curr_tic}/{curr_year[:-2]}/{curr_filing_type}_{curr_year[-2:]}.json",
                        "w",
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4e56f1af672f22b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/api/app.py:22 
allowed_origins = os.environ.get("ALLOWED_ORIGINS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #999ed9f00635c06f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/api/section.py:223 
    allowed_mimetypes_str = os.environ.get("UNSTRUCTURED_ALLOWED_MIMETYPES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f37b572f5ede9d9 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:252 
        company = os.environ.get("SEC_API_ORGANIZATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #253c3e5156dc47b2 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:254 
        email = os.environ.get("SEC_API_EMAIL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a72bf524fa5c7a20 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/sec_filings.py:345 
            company = os.environ.get("SEC_API_ORGANIZATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4422376110353ef0 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/sec_filings.py:347 
            email = os.environ.get("SEC_API_EMAIL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b7cf17d3a029045 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-semanticscholar/llama_index/readers/semanticscholar/base.py:68 
            with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ee9240d19ad5baa — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-semanticscholar/llama_index/readers/semanticscholar/base.py:126 
                    pdf = PdfReader(open(file_path, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #329b65684fe2786d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:66 
            with open(test_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a496f750a6f20678 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:147 
            with open(custom_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed57495231ff6fc0 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:208 
            with open(custom_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cf8569a405db346 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:379 
            with open(test_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01a22b1ce1973c8a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-slack/llama_index/readers/slack/base.py:62 
            slack_token = os.environ["SLACK_BOT_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25bac65316636740 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:87 
        self._api_key = api_key or os.environ.get("STACKOVERFLOW_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3952793229785c8f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:88 
        self._team_name = team_name or os.environ.get("STACKOVERFLOW_TEAM_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de693daec8bde0b3 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:107 
                    with open(fp) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1311f529aa0dee2a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:116 
                    with open(
                        os.path.join(self._cache_dir, f"{doc_type}_{page}.json"), "w"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a1d861f7ecd5ad8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:170 
        os.environ.get("STACKOVERFLOW_PAT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2582fc428be8ef8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:171 
        os.environ.get("STACKOVERFLOW_TEAM_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa5532ac944c5a09 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-uniprot/llama_index/readers/uniprot/base.py:372 
        with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3c0dd1386839857 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-uniprot/llama_index/readers/uniprot/base.py:400 
        with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e77aa42e8b0dffd — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:95 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c581aca94e68a394 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:96 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4c139596d73bc332 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 
            response = requests.post(
                LAYOUT_ANALYSIS_URL, headers=headers, files=files, data=options
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #83e67e229cf2e2d1 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:356 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5815661c74d2cc2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:388 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c38502f58bdba30 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:408 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d76e1c522375374 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:88 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49ace80b8762b1bb — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:89 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04be795077fc31a0 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:381 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc71f816530ba1a6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:413 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e553e01ac7c3a3c7 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:433 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #5225f29ba65456d0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 
            response = httpx.post(
                QUERY_DATA_ENDPOINT,
                headers=headers,
                json=payload,
                timeout=API_TIMEOUT_SECONDS,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c8b5e1d3e9612de1 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/hyperbrowser_web/base.py:36 
        api_key = api_key or os.getenv("HYPERBROWSER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #532d801f5ec8f184 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 
        response = requests.post(api_url, headers=headers, json=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b823325c5659879d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 
        response = requests.post(api_url, headers=headers, json=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a435f6ab1a928249 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/readability_web/base.py:136 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a02861ebbedbb3d4 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-whisper/llama_index/readers/whisper/base.py:92 
            with open(file_path_or_bytes, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcf96f7aae6d67f6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-whisper/llama_index/readers/whisper/base.py:125 
            with open(file_path_or_bytes, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #671849f6a5cfb5a5 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-wordlift/llama_index/readers/wordlift/base.py:285 
                with open(text) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbb8e77e3bac8a6b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-zulip/llama_index/readers/zulip/base.py:26 
        zulip_token = os.environ.get("ZULIP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4aafebfa6fda75d3 — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:214 
        with open(
            os.path.join(path, DEFAULT_PERSIST_FILENAME), "w", encoding=encoding
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f59c96011d9850c — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:225 
        with open(os.path.join(path, DEFAULT_PERSIST_FILENAME), encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76189b98cdf5a727 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:48 
            if "MONGO_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca4eb7e0e7aedb18 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:54 
                os.environ["MONGO_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #de5ba129708fdcc4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-tldw/llama_index/retrievers/tldw/base.py:74 
        res = requests.post(
            f"{API_ENDPOINT}/search",
            headers=headers,
            json={
                "collection_id": self._collection_id,
                "search_term": query_bundle.query_str,
            },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4669f1cf18ba103a — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-videodb/llama_index/retrievers/videodb/base.py:32 
            api_key = os.environ.get("VIDEO_DB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #519f383cd8181c3f — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-you/llama_index/retrievers/you/base.py:60 
        self._api_key = api_key or os.getenv("YDC_API_KEY") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f7e8fe67b6b3f60 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:84 
            output = OpenAI(model=model, api_key=os.getenv("OPENAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab6fce6096c04996 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:88 
            output = Anthropic(model=model, api_key=os.getenv("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0610a7d83bf09bef — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:92 
            output = Cohere(model=model, api_key=os.getenv("COHERE_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a3b21dea59dc49b — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:96 
            output = MistralAI(model=model, api_key=os.getenv("MISTRALAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e0190fb290ce014 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:100 
            output = TogetherLLM(model=model, api_key=os.getenv("TOGETHERAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adf8715278814859 — Environment-variable access.
repo/llama-index-integrations/storage/kvstore/llama-index-storage-kvstore-dynamodb/llama_index/storage/kvstore/dynamodb/base.py:87 
        dynamodb_url = os.getenv("DYNAMODB_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ff33d97e9ec861f — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-agentql/llama_index/tools/agentql/agentql_rest_api_tool/base.py:54 
        self._api_key = os.getenv("AGENTQL_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33abbfdb3189e227 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-aws-bedrock-agentcore/llama_index/tools/aws_bedrock_agentcore/utils.py:6 
    return os.getenv("AWS_REGION") or os.getenv("AWS_DEFAULT_REGION") or "us-west-2"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62322ed00efe7f4d — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:87 
        self.pool_management_endpoint: str = pool_management_endpoint or os.getenv(
            "AZURE_POOL_MANAGEMENT_ENDPOINT"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9992837666468ba5 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:192 
                            with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8cce67a3f5c1074 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:231 
            data = open(local_file_path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd12aa179148fccf — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:281 
            with open(local_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #49787293045343a2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-translate/llama_index/tools/azure_translate/base.py:32 
        request = requests.post(
            ENDPOINT_BASE_URL,
            params={"api-version": "3.0", "to": language},
            headers=self.headers,
            json=[{"text": text}],
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #73c3fb6bb41c582d — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:124 
        with open(output_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1af70f3c11c27e4b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:308 
        trigger_response = requests.post(
            "https://api.brightdata.com/datasets/v3/trigger",
            params={"dataset_id": dataset_id, "include_errors": True},
            headers=self._headers,
            json=[request_data],
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d7abe3f2202f173b — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:33 
        elif os.environ["OPENAI_API_KEY"]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a20431c876a31bfa — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:34 
            self.OAI_token = os.environ["OPENAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9ded2fdff139740 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:104 
                files = {"file": open(file, "rb")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7710679e31b10d3 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-dappier/llama_index/tools/dappier/ai_recommendations/base.py:35 
        self.api_key = api_key or os.environ.get("DAPPIER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07b540653c36026c — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-dappier/llama_index/tools/dappier/real_time_search/base.py:22 
        self.api_key = api_key or os.environ.get("DAPPIER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3fd25a121af0685 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-elevenlabs/llama_index/tools/elevenlabs/base.py:107 
        with open(output_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4daf9b0209115c44 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/calendar/base.py:179 
            with open(self.service_account_key_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1c0e47a095e04ce — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/calendar/base.py:202 
                with open(self.token_path, "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92e5d4b213252297 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/gmail/base.py:116 
            with open(self.service_account_key_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdf645414a9acd00 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/gmail/base.py:139 
                with open(self.token_path, "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08f121171c5f4acc — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:25 
        email: str = os.environ.get("JIRA_ACCOUNT_EMAIL", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #923777ac0b36085b — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:26 
        api_key: Optional[str] = os.environ.get("JIRA_API_KEY", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #413a6ca74e7b2f11 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:27 
        server_url: Optional[str] = os.environ.get("JIRA_SERVER_URL", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #097e794270cdae54 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-mcp/examples/mcp_server.py:38 
        access_token=os.environ.get("IPINFO_API_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47e44d626f94ec17 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:10 
    'hourly_weather': os.getenv('HOURLY_WEATHER_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da78984c58e86315 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:11 
    'daily_weather': os.getenv('DAILY_WEATHER_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e7a17ae7c2209be — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:12 
    'daily_climate': os.getenv('DAILY_CLIMATE_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac0d0d71264e0690 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:13 
    'air_quality': os.getenv('AIR_QUALITY_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3a2d589d0903ee3 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:14 
    'geocoding': os.getenv('GEOCODING_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #221906acfd0a5419 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:14 
    MOSS_PROJECT_KEY = os.getenv("MOSS_PROJECT_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f609fa10cfccf3c — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:15 
    MOSS_PROJECT_ID = os.getenv("MOSS_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb264f1d334eaef8 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:55 
    llm = OpenAI(api_key=os.environ["OPENAI_API_KEY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #269ddb7d7084af8e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-notion/llama_index/tools/notion/base.py:106 
        response = requests.post(SEARCH_URL, json=payload, headers=self.reader.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #bb648b0e9d8bbe45 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-python-file/llama_index/tools/python_file/base.py:11 
        f = open(file_name).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a791342b7d8c032 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/examples/serpex_example.py:8 
os.environ["SERPEX_API_KEY"] = "your_api_key_here"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5eb1d17b6a9781e1 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/examples/serpex_example.py:101 
    if not os.environ.get("SERPEX_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd2cc5f0cdbb4c07 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:55 
        self.api_key = api_key or os.environ.get("SERPEX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #680b6b2fe88bc308 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 
    api_key = os.environ.get("SERPEX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a74e8d8e291e6715 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-signnow/llama_index/tools/signnow/base.py:22 
    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b75e72dd25b6b79 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-signnow/llama_index/tools/signnow/base.py:55 
    candidate = explicit or os.environ.get("SIGNNOW_MCP_BIN") or "sn-mcp"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48ae3fc8acce5b0d — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-typecast/llama_index/tools/typecast/base.py:186 
        with open(output_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60dfdadda30e94de — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:10 
    api_key=os.environ["VALYU_API_KEY"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #349b1b163d93737b — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/retriever_example.py:18 
        api_key=os.environ.get("VALYU_API_KEY", "your-api-key-here"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #f69f28326bf03566 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-zapier/llama_index/tools/zapier/base.py:60 
        response = requests.get(
            "https://nla.zapier.com/api/v1/dynamic/exposed/", headers=self._headers
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #53ddc3fbf63cda18 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo/llama_index/vector_stores/azurecosmosmongo/base.py:111 
            if "AZURE_COSMOSDB_MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21f61af34eb49cae — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo/llama_index/vector_stores/azurecosmosmongo/base.py:117 
                os.environ["AZURE_COSMOSDB_MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b72a16e3096e548 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-db2/llama_index/vector_stores/db2/base.py:44 
log_level = os.getenv("LOG_LEVEL", "ERROR").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #802c9ac44c6ed206 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-docarray/llama_index/vector_stores/docarray/hnsw.py:72 
            with open(ref_docs_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ae54dac39b7276a — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-docarray/llama_index/vector_stores/docarray/hnsw.py:123 
        with open(os.path.join(self._work_dir, "ref_docs.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #698c73b5c135ae11 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-faiss/llama_index/vector_stores/faiss/map_store.py:244 
        with open(id_map_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85824275f829effe — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-faiss/llama_index/vector_stores/faiss/map_store.py:284 
        with open(id_map_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d046390ed77a0bcd — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib/llama_index/vector_stores/hnswlib/base.py:152 
        with open(config_path) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #195c739440ee47df — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib/llama_index/vector_stores/hnswlib/base.py:216 
        with open(config_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b36ac56b46a261e — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-jaguar/llama_index/vector_stores/jaguar/base.py:497 
        with open("/tmp/debugjaguar.log", "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af79186a77d713bf — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb/llama_index/vector_stores/lancedb/base.py:230 
            if api_key is None and os.getenv("LANCE_API_KEY") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c9e1e534039545f — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb/llama_index/vector_stores/lancedb/base.py:242 
                    uri, api_key=api_key or os.getenv("LANCE_API_KEY"), region=region

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d91cbffc53b883f — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:188 
            if "MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfa979af31b3d3d7 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:194 
                os.environ["MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1ebab1d7800103c — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:203 
            if "MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f322f17be5841cc7 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:209 
                os.environ["MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2034525a235c6ad7 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-moorcheh/llama_index/vector_stores/moorcheh/base.py:103 
            self.api_key = os.getenv("MOORCHEH_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3e6981593c89770 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-oracledb/llama_index/vector_stores/oracledb/base.py:51 
log_level = os.getenv("LOG_LEVEL", "ERROR").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9f49ddc7262ebe6 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:51 
    elif not api_key and not getenv("ROCKSET_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b99c630f176b6292 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:57 
            api_key=api_key or getenv("ROCKSET_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #227900952f6f87dc — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:58 
            host=api_server or getenv("ROCKSET_API_SERVER"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #283e80f683d50364 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-txtai/llama_index/vector_stores/txtai/base.py:125 
        with open(config_path, "r" if jsonconfig else "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bc6aaa1edf64b8a — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-txtai/llama_index/vector_stores/txtai/base.py:189 
        with open(
            config_path,
            "w" if jsonconfig else "wb",
            encoding="utf-8" if jsonconfig else None,
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e069335aa9c6ea12 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-vertexaivectorsearch/llama_index/vector_stores/vertexaivectorsearch/base.py:100 
    ENABLE_V2 = os.getenv("VERTEX_AI_ENABLE_V2", "true").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c047afa8e6ba9596 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:26 
EMBEDDING_MODEL = os.getenv("ARK_EMBEDDING_MODEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c96199303d1c48fd — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:30 
LLM_MODEL = os.getenv("ARK_LLM_MODEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #865da9341bc17091 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 
ARK_API_KEY = os.getenv("ARK_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0bf346cb45fd708 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:141 
    host = os.getenv("VEM_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49863aee309740c2 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:142 
    port = int(os.getenv("VEM_PORT")) if os.getenv("VEM_PORT") else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8442ee17f34b8d7 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:143 
    user = os.getenv("VEM_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d194f58a6b54ffb — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:144 
    password = os.getenv("VEM_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e56fc5b55db6a2e6 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:145 
    database = os.getenv("VEM_DATABASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20baa8413c5f5d06 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:146 
    table_name = os.getenv("VEM_TABLE", "llamaindex_demo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f13b48389e7377d — Environment-variable access.
repo/llama-index-integrations/voice_agents/llama-index-voice-agents-openai/llama_index/voice_agents/openai/base.py:74 
            openai_api_key = os.getenv("OPENAI_API_KEY", None) or self.api_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe138dfe398b1073 — Filesystem access.
repo/scripts/bulk-version-bump.py:26 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f575b3e691941e8 — Filesystem access.
repo/scripts/bulk-version-bump.py:28 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99426eba2a9252ac — Filesystem access.
repo/scripts/bulk-version-bump.py:81 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be3338cef81b3698 — Filesystem access.
repo/scripts/convert-examples.py:204 
        out.write_text(body, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dbb77037d6faa32 — Filesystem access.
repo/scripts/convert-examples.py:231 
            meta.write_text(f"label: {transform_dir_name(d.name)}\ncollapsed: true\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba6c196d4804db52 — Filesystem access.
repo/scripts/convert-examples.py:259 
    content = src.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c819d26b3f3e512a — Filesystem access.
repo/scripts/convert-examples.py:263 
    dst.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34c359fa157768ed — Filesystem access.
repo/scripts/convert-examples.py:400 
    (int_dest / "_meta.yml").write_text(
        "label: Integrations\ncollapsed: true\norder: 998\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a64ad663d29e5e8 — Filesystem access.
repo/scripts/integration_health_check.py:207 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d5f22a09dcd75d2 — Filesystem access.
repo/scripts/integration_health_check.py:273 
            with open("./core_package_metrics.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6665f8ac49ccdd74 — Filesystem access.
repo/scripts/integration_health_check.py:286 
            with open("./core_package_metrics.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffa26952c57d88fb — Filesystem access.
repo/scripts/integration_health_check.py:366 
        with open("./all_package_metrics.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #447eb1bf81489feb — Filesystem access.
repo/scripts/integration_health_check.py:374 
        with open("./all_package_metrics.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-dashscope

python first-party
high pii_flow production #f486deb97e57ca0e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 
        response = requests.put(
            base_url + UPSERT_PIPELINE_ENDPOINT,
            data=json.dumps(pipeline_create),
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b0a6f66bb4342fa4 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 
        response = requests.post(
            base_url + START_PIPELINE_ENDPOINT.format(pipeline_id=pipeline_id),
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 9 low-confidence finding(s)
low env_fs production #d41228d241bda27f — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:78 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fce45570ddd4ff89 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:79 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1775380aac66a5e5 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:80 
        self._base_url = os.environ.get("DASHSCOPE_BASE_URL", None) or base_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d6bcf389bd805db — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 
        workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #deeb3e7921ede76e — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 
        api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d1e0041136e75ed — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:115 
            or os.environ.get("DASHSCOPE_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18326c798f255410 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:47 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb60fa1547a4b274 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:48 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e53a260c50a224a0 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:67 
            os.environ.get("DASHSCOPE_BASE_URL", None) or DASHSCOPE_DEFAULT_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk

python first-party
high pii_flow production #68f378e8266f4d7d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 
        response = requests.post(self._endpoint, json=data, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6b1fa06540dcc3a1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 
            response = requests.post(
                self._endpoint, json=data, headers=headers, stream=True
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 1 low-confidence finding(s)
low env_fs production #2810e7936e4d22d5 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:138 
        self.api_key = self.api_key or os.getenv("MARITALK_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-mymagic

python first-party
high pii_flow production #d42d632774cd55c3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 
        resp = requests.post(
            self.completion_url,
            json=question_data,
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope

python first-party
high pii_flow production #521b66a3ebdee397 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91 · flow /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 → /tmp/closeopen-wcs0qyo2/repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91 
            response = requests.post(
                service_url, data=json.dumps(my_input), headers=headers
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 2 low-confidence finding(s)
low env_fs production #42538c35c7f8e395 — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 
        DASHSCOPE_API_KEY = os.environ.get("DASHSCOPE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e18d7cced775ba6 — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:87 
            os.getenv("DASHSCOPE_BASE_URL", "https://dashscope.aliyuncs.com")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/observability/llama-index-observability-otel

python first-party
medium telemetry production #e9aaa79ec11ba320 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:13 
from opentelemetry import context, propagate, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d090ea1e2a0c233b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:14 
from opentelemetry.sdk.resources import SERVICE_NAME, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2e2377793f579207 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:15 
from opentelemetry.sdk.trace import SpanProcessor, TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #9ecf4093baf9c04d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:16 
from opentelemetry.sdk.trace.export import (
    BatchSpanProcessor,
    ConsoleSpanExporter,
    SimpleSpanProcessor,
    SpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a86479d609286647 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:22 
from opentelemetry.trace import set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (python): llama-dev

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #df2fde551131ae43 — Environment-variable access.
repo/llama-dev/llama_dev/pkg/cmd_exec.py:44 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f3a8c8ce131f33 — Filesystem access.
repo/llama-dev/llama_dev/release/changelog.py:84 
    with open(repo_root / "CHANGELOG.md", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92d4e402f9669a83 — Filesystem access.
repo/llama-dev/llama_dev/release/check.py:20 
    with open(repo_root / "llama-index-core" / "pyproject.toml", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #66898327a2e81419 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-dev/llama_dev/release/check.py:29 
        with urllib.request.urlopen(url, timeout=10) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #811e093e6918a5ae — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:16 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe1d0fcd843d6138 — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:23 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b671eab748c3fd1c — Filesystem access.
repo/llama-dev/llama_dev/utils.py:46 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7aec88f6fb76ae86 — Filesystem access.
repo/llama-dev/llama_dev/utils.py:55 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f7a9713981cea63 — Filesystem access.
repo/llama-dev/llama_dev/utils.py:74 
    with open(pyproject_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-core

python first-party
expand_more 35 low-confidence finding(s)
low env_fs production #78b0bc55ac9554b6 — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:320 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d4ae175a4cb27ff — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:321 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #730da140c5e58e52 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:119 
    with open(mappings_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40a654d4ba99941e — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:206 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f59bc5002d00533 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:246 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c596d56a6334222 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:251 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d275d8a403afe724 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:257 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dd0a00df675d6d8 — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:18 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c34327dad4b47e56 — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:24 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8586cad49d3f6a76 — Environment-variable access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:43 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2ae3c23f131bdfe — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:38 
                save_file = open(
                    os.path.join(dataset_full_path, "dev_distractor.json"), "wb"
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aee8198207360b75 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:74 
        f = open(dataset_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec7e413bf7336f69 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:102 
        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3081fdc43256db92 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:108 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae6f5e952a1438bf — Environment-variable access.
repo/llama-index-core/llama_index/core/evaluation/retrieval/metrics.py:444 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b2ea70df571e130 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:24 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de102de6caf0dbdb — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:25 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d42f4417d08fe0eb — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:26 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a912228f9ac5432 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:43 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0f2d5f560b09460 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:44 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16f7568bf8369e1a — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:45 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82957ca69133e68 — Environment-variable access.
repo/llama-index-core/llama_index/core/llms/utils.py:42 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5827409e8d0e0e4 — Filesystem access.
repo/llama-index-core/llama_index/core/multi_modal_llms/generic_utils.py:44 
    with open(image_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #066c53e2454ac5b7 — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:204 
            with open(obj_node_mapping_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c16ed7b1e73b1f88 — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:217 
            with open(obj_node_mapping_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfc63239aebcbb53 — Filesystem access.
repo/llama-index-core/llama_index/core/readers/json.py:102 
            with open(input_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #962bfb44a0855d76 — Filesystem access.
repo/llama-index-core/llama_index/core/schema.py:1433 
            img_bytes = self.image_resource.path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d91caed4c29fdb52 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:56 
        if "NLTK_DATA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98b25cea3d971e82 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:57 
            self._nltk_data_dir = str(Path(os.environ["NLTK_DATA"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85583a4a4294bcfc — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:167 
        if "TIKTOKEN_CACHE_DIR" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a5e925620fe8443 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:169 
            os.environ["TIKTOKEN_CACHE_DIR"] = os.path.join(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b79e9a6b65bc8f4b — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:179 
            del os.environ["TIKTOKEN_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cf215871ef9e7cd — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:442 
    if "LLAMA_INDEX_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70c4ca53c3628ad4 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:443 
        path = Path(os.environ["LLAMA_INDEX_CACHE_DIR"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bddbffb8afd40e55 — Filesystem access.
repo/llama-index-core/llama_index/core/utils.py:664 
        data = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/graph_rag/llama-index-graph-rag-cognee

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #a221590d106a02bb — Environment-variable access.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 
    api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/graph_stores/llama-index-graph-stores-nebula

python first-party
expand_more 4 low-confidence finding(s)
low env_fs production #ae00d12fec83a315 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:213 
            key in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09ad71d4e9895d29 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:221 
        graphd_host, graphd_port = os.environ["NEBULA_ADDRESS"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dd643dc323cc30c — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:223 
            os.environ["NEBULA_USER"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #841df2a6ff07f345 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:224 
            os.environ["NEBULA_PASSWORD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-bge-m3

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #584f1126805bd08a — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:133 
        with open(Path(persist_dir) / "multi_embed_store.pkl", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87c755eba9e10dce — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:158 
            open(Path(persist_dir) / "multi_embed_store.pkl", "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-lancedb

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #6ca6d66f4038dc43 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/utils.py:25 
            self.api_key = os.getenv("LANCEDB_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-vectara

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #3fdeb049cc39e1f8 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:88 
            os.environ.get("VECTARA_CORPUS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f3a0bc9cd00852c — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:91 
        self._vectara_api_key = vectara_api_key or os.environ.get("VECTARA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #279ee8ed0e4ce409 — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:362 
        files = {"file": (filename, open(file_path, "rb"))}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-aibadgr

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #a34f83a820c1b9fc — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:41 
        api_key = api_key or os.environ.get("AIBADGR_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a9650ebce7cbe43 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:42 
        api_base = os.environ.get("AIBADGR_BASE_URL", api_base)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-asi

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #1741fe0cf907d328 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-asi/llama_index/llms/asi/base.py:65 
        api_key = api_key or os.environ.get("ASI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-azure-openai

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #a63f1ad58cecc01c — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/base.py:236 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1a8a47706c68b24 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:141 
            api_key = api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64e737ca1670a9e9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:223 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-cerebras

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #64751e194a9c785e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:32 
        api_base: str = os.environ.get("CEREBRAS_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d93e7a2d57b6f50 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:37 
        api_key = api_key or os.environ.get("CEREBRAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-clarifai

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #f45cfe64098b6787 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:83 
        if pat is None and os.environ.get("CLARIFAI_PAT") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8510d22c9ebd350 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:84 
            pat = os.environ.get("CLARIFAI_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #295adb5350a42c3a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:86 
        if not pat and os.environ.get("CLARIFAI_PAT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-cortex

python first-party
expand_more 11 low-confidence finding(s)
low env_fs production #9fd36f530bb7e4ba — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:111 
        default=os.environ.get("SNOWFLAKE_USERNAME", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05b2201a09211311 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:115 
        default=os.environ.get("SNOWFLAKE_ACCOUNT", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eda5e5edef8f9808 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:119 
        default=os.environ.get("SNOWFLAKE_KEY_FILE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9edc7e5714e35016 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:172 
        self.user = user or os.environ.get("SNOWFLAKE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f757a3b70256946 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:173 
        self.account = account or os.environ.get("SNOWFLAKE_ACCOUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9665ab5a34ac7f7 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:177 
        env_key_file = os.environ.get("SNOWFLAKE_KEY_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfa2ade71cf9a877 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:184 
                with open(jwt_token) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fb6cd537ef90983 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:22 
    with open(SPCS_TOKEN_PATH) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc7f4ef49f970d4c — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:32 
        os.path.exists(SPCS_TOKEN_PATH) and os.environ.get("SNOWFLAKE_HOST") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3723b583c3b98412 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:45 
    return os.getenv("SNOWFLAKE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f38a4ec1daeba313 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:61 
    with open(sf_private_key_filepath, "rb") as pem_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-databricks

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #5e1db668461e5260 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:36 
        api_key = api_key or os.environ.get("DATABRICKS_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d710381fec312feb — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:37 
        api_base = api_base or os.environ.get("DATABRICKS_SERVING_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-deepseek

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #fb3b66fa38e622c0 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-deepseek/llama_index/llms/deepseek/base.py:36 
        api_key = api_key or os.environ.get("DEEPSEEK_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-featherlessai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #1d03cff02c535f13 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-featherlessai/llama_index/llms/featherlessai/base.py:37 
        api_key = api_key or os.environ.get("FEATHERLESS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-gaudi

python first-party
expand_more 10 low-confidence finding(s)
low env_fs production #ac2fcc5821f9f3e6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/examples/basic.py:301 
    args.quant_config = os.getenv("QUANT_CONFIG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b991e71bbdb957e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:98 
    args.local_rank = int(os.getenv("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fbe9b1b97be8a35 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:99 
    args.world_size = int(os.getenv("WORLD_SIZE", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44d8f992c13dbb80 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:100 
    args.global_rank = int(os.getenv("RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dce110c4447a479d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:113 
        const_marking = os.getenv("ENABLE_CONST_MARKING", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa7bc91d8c3f67bd — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:135 
    os.environ.setdefault("EXPERIMENTAL_WEIGHT_SHARING", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e05eeb8470d08b83 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:138 
        os.environ.setdefault("GRAPH_VISUALIZATION", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b32a0a4abf2dd75 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:142 
        os.environ.setdefault("PT_HPU_LAZY_ACC_PAR_MODE", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d8024a175f01369 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:143 
        os.environ.setdefault("PT_HPU_ENABLE_LAZY_COLLECTIVES", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8e589c45ff721f3 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:153 
        os.environ.setdefault("PT_HPUGRAPH_DISABLE_TENSOR_CACHE", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-google-genai

python first-party
expand_more 4 low-confidence finding(s)
low env_fs production #60442ceac7a016c9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:199 
        api_key = api_key or os.getenv("GOOGLE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4001f0d4d4031ebe — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:202 
            or os.getenv("GOOGLE_GENAI_USE_VERTEXAI", "false") != "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b942c92712e3a645 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:204 
        project = (vertexai_config or {}).get("project") or os.getenv(
            "GOOGLE_CLOUD_PROJECT", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a15054160a280b21 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:207 
        location = (vertexai_config or {}).get("location") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-groq

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #643e75763d2693c9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-groq/llama_index/llms/groq/base.py:37 
        api_key = api_key or os.environ.get("GROQ_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-ibm

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #3761299ef47b7d35 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:38 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c507078bceaac4d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:39 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8dd129afdea6a13 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:49 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a195efd3a17acd1 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:60 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c35d6268d029c79 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:62 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18e3e3b572a58933 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:64 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #668b2b92f2fbf371 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:74 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b61bbf6a420b61a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:79 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1745bbbef280819 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:88 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-keywordsai

python first-party
expand_more 2 low-confidence finding(s)
low egress production #44c5b1465e800efb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:50 
        response = requests.get("https://api.keywordsai.co/api/models/public")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #b0684d4b47bbd024 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:166 
    openai_api_key = api_key or os.environ.get("KEYWORDSAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-llama-cpp

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #a18fb478c1392b4b — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-llama-cpp/llama_index/llms/llama_cpp/base.py:232 
                with open(model_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-meta

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #e23a751009372950 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-meta/llama_index/llms/meta/base.py:42 
        api_key = api_key or os.environ.get("LLAMA_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-minimax

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #90a16b46b01e638b — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-minimax/llama_index/llms/minimax/base.py:43 
        api_key = api_key or os.environ.get("MINIMAX_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-modelslab

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #e233313e7cb093d3 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-modelslab/llama_index/llms/modelslab/base.py:68 
        api_key = api_key or os.environ.get("MODELSLAB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nebius

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #b4a53d923648cde2 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nebius/llama_index/llms/nebius/base.py:42 
        api_key = api_key or os.environ.get("NEBIUS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-netmind

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #729aa059025d56a6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-netmind/llama_index/llms/netmind/base.py:39 
        api_key = api_key or os.environ.get("NETMIND_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nvidia

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #f885786a010ffa3f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia/llama_index/llms/nvidia/base.py:52 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #fb4a57166126de2f — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:182 
                with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #799ac37399c992e7 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:245 
                with open(serialize_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-oci-genai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #f9d9dc51152c6713 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-oci-genai/llama_index/llms/oci_genai/utils.py:141 
                with open(oci_config.get("security_token_file"), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-openai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #339000299cb51706 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-openai/llama_index/llms/openai/utils.py:1039 
    openai_api_key = api_key or os.environ.get("OPENAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-ovhcloud

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #37befdcf8f0729d0 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ovhcloud/llama_index/llms/ovhcloud/base.py:109 
            api_key = os.environ.get("OVHCLOUD_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-paieas

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #671e2727d01afeec — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:24 
        api_key = api_key or os.environ.get("PAIEAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c91dc2fa4db5533 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:25 
        api_base = api_base or os.environ.get("PAIEAS_API_BASE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-palm

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5ab224a58c1c045b — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-palm/llama_index/llms/palm/base.py:86 
        api_key = api_key or os.environ.get("PALM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-perplexity

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #f17fe0f7bde0e17f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:118 
        api_key = api_key or getenv("PPLX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-pipeshift

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #4eddab17c733a1bf — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-pipeshift/llama_index/llms/pipeshift/base.py:64 
        api_key = api_key or os.environ.get("PIPESHIFT_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-predibase

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #48ba5e700a40462a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:121 
            else os.environ.get("PREDIBASE_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62ffbf0ab679cac9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:166 
            os.environ["PREDIBASE_GATEWAY"] = "https://api.app.predibase.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-reka

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #de35c687c8f265bc — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-reka/llama_index/llms/reka/base.py:117 
        api_key = api_key or os.getenv("REKA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-replicate

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #2927f7f16b6303c1 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-replicate/llama_index/llms/replicate/base.py:97 
                base_kwargs["image"] = open(self.image, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-together

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #3f19cbb1c17e9fdf — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-together/llama_index/llms/together/base.py:39 
        api_key = api_key or os.environ.get("TOGETHER_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-yi

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #6a90692c40d31022 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-yi/llama_index/llms/yi/base.py:90 
        api_key = api_key or os.environ.get("YI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-you

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #3240347b3bcd7452 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-you/llama_index/llms/you/base.py:125 
        return self.ydc_api_key or os.environ["YDC_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-aimon-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #dd42a8dba846b8f3 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-aimon-rerank/llama_index/postprocessor/aimon_rerank/base.py:41 
            api_key = api_key or os.environ["AIMON_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-cohere-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #a754e892aa4a7367 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-cohere-rerank/llama_index/postprocessor/cohere_rerank/base.py:74 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-contextual-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #220ad6490770a443 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-contextual-rerank/llama_index/postprocessor/contextual_rerank/base.py:45 
            api_key = api_key or os.environ["CONTEXTUAL_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-dashscope-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #4133c5ae2dd75154 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-dashscope-rerank/llama_index/postprocessor/dashscope_rerank/base.py:35 
            api_key = api_key or os.environ["DASHSCOPE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-google-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #7f3e7af48a82ee0d — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-google-rerank/llama_index/postprocessor/google_rerank/base.py:79 
            self.project_id = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-ibm

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #878afaf1c34c1851 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:37 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db61b7c163c58af3 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:38 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e2e7aa12c9c31db — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:48 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c64d6315dd592a9 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:59 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2d2dba22c2af16b — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:61 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #488bbf94bcbfbefa — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:63 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a41bff451bee313 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:73 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #177623941f51da55 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:78 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a68215478e667d55 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:87 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-mixedbreadai-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #2db6c70d3444d62a — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-mixedbreadai-rerank/llama_index/postprocessor/mixedbreadai_rerank/base.py:56 
            api_key = api_key or os.environ["MXBAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #13c46710bfe2e422 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank/llama_index/postprocessor/nvidia_rerank/base.py:72 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-pinecone-native-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #f31ba899056522bc — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-pinecone-native-rerank/llama_index/postprocessor/pinecone_native_rerank/base.py:38 
            api_key = api_key or os.environ["PINECONE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-bm25

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #4aafebfa6fda75d3 — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:214 
        with open(
            os.path.join(path, DEFAULT_PERSIST_FILENAME), "w", encoding=encoding
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f59c96011d9850c — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:225 
        with open(os.path.join(path, DEFAULT_PERSIST_FILENAME), encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #76189b98cdf5a727 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:48 
            if "MONGO_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca4eb7e0e7aedb18 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:54 
                os.environ["MONGO_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-tldw

python first-party
expand_more 1 low-confidence finding(s)
low egress production #de5ba129708fdcc4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-tldw/llama_index/retrievers/tldw/base.py:74 
        res = requests.post(
            f"{API_ENDPOINT}/search",
            headers=headers,
            json={
                "collection_id": self._collection_id,
                "search_term": query_bundle.query_str,
            },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-videodb

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #4669f1cf18ba103a — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-videodb/llama_index/retrievers/videodb/base.py:32 
            api_key = os.environ.get("VIDEO_DB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-you

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #519f383cd8181c3f — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-you/llama_index/retrievers/you/base.py:60 
        self._api_key = api_key or os.getenv("YDC_API_KEY") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/storage/kvstore/llama-index-storage-kvstore-dynamodb

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #adf8715278814859 — Environment-variable access.
repo/llama-index-integrations/storage/kvstore/llama-index-storage-kvstore-dynamodb/llama_index/storage/kvstore/dynamodb/base.py:87 
        dynamodb_url = os.getenv("DYNAMODB_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

⚠ Higher-risk dependencies not analyzed

These higher-risk dependencies were not analyzed in this scan — treat the verdict as provisional. This is a scan-coverage limitation, not a detected data leak.

  • httpx http — scan budget exceeded
  • requests http — scan budget exceeded
  • aiohttp http — scan budget exceeded
  • azure-cosmos cloud — scan budget exceeded
  • azure-identity cloud — scan budget exceeded
  • azure-data-tables cloud — scan budget exceeded
  • google-cloud-firestore cloud — scan budget exceeded
  • google-cloud-aiplatform cloud — scan budget exceeded
  • anthropic ai — scan budget exceeded
  • azure-ai-inference cloud — scan budget exceeded
  • cohere ai — scan budget exceeded
  • opentelemetry-sdk analytics — scan budget exceeded
  • opentelemetry-api analytics — scan budget exceeded
  • opentelemetry-semantic-conventions analytics — scan budget exceeded
  • google-cloud-discoveryengine cloud — scan budget exceeded

Skipped dependencies

Production

  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-langfuse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-uptrain prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-literalai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-argilla prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-promptlayer prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-wandb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-opik prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-agentops prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-aim prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-openinference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-airweave prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-code-interpreter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-exa prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-yahoo-finance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-text-to-image prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-cassandra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-bing-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jina prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-igpt-email prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-zapier prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-brightdata prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-python-file prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-database prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-cv prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-moss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-playgrounds prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-vector-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-yelp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-openapi prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-dappier prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-aws-bedrock-agentcore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-chatgpt-plugin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-brave-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-translate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-mcp-discovery prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-salesforce prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-linkup-research prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-artifact-editor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-finance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-multion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-box prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-tavily-research prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-serpex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-measurespace prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-seltz prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jira prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-wikipedia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-parallel-web-systems prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-requests prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-weather prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-wolfram-alpha prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-waii prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-ionic-shopping prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-arxiv prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-graphql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-neo4j prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-slack prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-shopify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-valyu prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-cogniswitch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-agentql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-speech prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-signnow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-typecast prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-vectara-query prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-notion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-playwright prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jira-issue prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-mcp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-desearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-duckduckgo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-code-interpreter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-elevenlabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-metaphor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-hive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/evaluation/llama-index-evaluation-tonic-validate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/response_synthesizers/llama-index-response-synthesizers-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-guidance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-evaporate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-lmformatenforcer prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-gemini-live prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-elevenlabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-entity prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-relik prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-marvin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/selectors/llama-index-selectors-notdiamond prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-google-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-sagemaker-endpoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-isaacus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-text-embeddings-inference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-langchain prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-llamafile prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oci-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-bedrock prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-cohere prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-mistralai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-anyscale prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-deepinfra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-alephalpha prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-textembed prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ipex-llm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vllm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-alibabacloud-aisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-openvino prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-azure-inference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-clarifai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openvino-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openai-like prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-opea prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-azure-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-optimum prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vertex-endpoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-llm-rails prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-modelscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-together prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-siliconflow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-mixedbreadai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-gaudi prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-upstage prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-gigachat prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-fastembed prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-cloudflare-workersai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nomic prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-fireworks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nebius prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-databricks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ollama prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nvidia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ibm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-zhipuai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vertex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-litellm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-jinaai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-clip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-optimum-intel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-voyageai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-instructor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-adapter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-premai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-heroku prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-baseten prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-api prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oci-data-science prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-autoembeddings prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-netmind prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-xinference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oracleai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-premai/llama_index/embeddings/premai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-clickhouse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-openGauss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lindorm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-pgvecto-rs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-singlestoredb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-alibabacloud-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-jaguar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tair prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-analyticdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-weaviate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-oracledb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-kdbai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-yugabytedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-s3 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-deeplake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-oceanbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-databricks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-awsdocdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tablestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-zep prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-redis prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-txtai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-cassandra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-relyt prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-ApertureDB prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vespa prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-firestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-dashvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lantern prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurepostgresql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-astra-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-neo4jvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-gel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-alibabacloud-mysql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vectorx prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tencentvectordb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-baiduvectordb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-couchbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-faiss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-milvus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azureaisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-hologres prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosnosql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-bagel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-awadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-qdrant prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vertexaivectorsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-neptune prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-pinecone prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-db2 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-objectbox prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-bigquery prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-moorcheh prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-supabase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-duckdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-nile prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-chroma prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-postgres prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-docarray prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-wordlift prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tidbvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-dynamodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-solr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-epsilla prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-typesense prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-timescalevector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-upstash prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-mariadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/agent/llama-index-agent-agentmesh prod — scan budget exceeded
  • first-party (python): llama-index-integrations/agent/llama-index-agent-azure prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-oracleai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-arango-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-azstorage-blob prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-singlestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hatena-blog prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-kaltura prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-txtai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-steamship prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mangadex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-solr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-linear prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-smart-pdf-loader prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-minio prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-macrometa-gdn prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-deeplake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-patentsview prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bilibili prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wordpress prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-readwise prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-milvus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mangoapps-guides prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dashvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-discord prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-hubspot prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-onedrive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-guru prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-apify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-trello prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bagel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-psychic prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-opendal prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-feishu-docs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-athena prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-maps prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-jira prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-iceberg prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-faiss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-sec-filings prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docstring-walker prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-database prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-awadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-astra-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docugami prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-whisper prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-snowflake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wikipedia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wordlift prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-sharepoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-nougat-ocr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-asana prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-rayyan prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-genius prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-screenpipe prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-toggl prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-boarddocs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-memos prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-cdk prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-notion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-document360 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-service-now prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-openalex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-metal prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-confluence prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-string-iterable prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-obsidian prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-datasets prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-llama-parse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-github prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-box prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gcs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-chatgpt-plugin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-youtube-transcript prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gitbook prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docling prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-twitter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-quip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mongodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-stackoverflow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-typeform prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-azcognitive-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-semanticscholar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-whatsapp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-myscale prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdf-marker prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-spotify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-salesforce prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-assemblyai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-telegram prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-remote-depth prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-oxylabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-igpt-email prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-stripe-docs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zyte-serp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-kibela prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pathway prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-weather prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zep prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-couchdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-layoutir prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pandas-ai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gitlab prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-huggingface-fs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-paddle-ocr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-imdb-review prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-intercom prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-make-com prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-legacy-office prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-slack prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-graphql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-weaviate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-file prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-remote prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-firebase-realtimedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-feedly-rss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mbox prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-jaguar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-outlook prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-zendesk-support prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-web prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hubspot prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-gong prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-s3 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zendesk prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-firestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-chroma prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-markitdown prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-json prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-agent-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-shopify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gpt-repo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dad-jokes prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mondaydotcom prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-reddit prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hwp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-structured-data prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-preprocess prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-upstage prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bitbucket prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-couchbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-qdrant prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-earnings-call-transcript prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-joplin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pebblo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zulip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-graphdb-cypher prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-lilac prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airtable prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-papers prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdf-table prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-stripe prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-uniprot prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-azure prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-huggingface prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-qianfan prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-oracleai prod — scan budget exceeded
  • first-party (python): docs/api_reference prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-integrations/storage/subcat/pkg2 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-integrations/vector_stores/pkg1 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-packs/pack2 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-packs/pack1 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-utils/util prod — scan budget exceeded
  • httpx prod — scan budget exceeded
  • requests prod — scan budget exceeded
  • aiohttp prod — scan budget exceeded
  • azure-cosmos prod — scan budget exceeded
  • azure-identity prod — scan budget exceeded
  • azure-data-tables prod — scan budget exceeded
  • google-cloud-firestore prod — scan budget exceeded
  • google-cloud-aiplatform prod — scan budget exceeded
  • anthropic prod — scan budget exceeded
  • azure-ai-inference prod — scan budget exceeded
  • cohere prod — scan budget exceeded
  • opentelemetry-sdk prod — scan budget exceeded
  • opentelemetry-api prod — scan budget exceeded
  • opentelemetry-semantic-conventions prod — scan budget exceeded
  • google-cloud-discoveryengine prod — scan budget exceeded
  • llama-index-core prod — scan budget exceeded
  • llama-index-embeddings-openai prod — scan budget exceeded
  • llama-index-llms-openai prod — scan budget exceeded
  • nltk prod — scan budget exceeded
  • SQLAlchemy prod — scan budget exceeded
  • dataclasses-json prod — scan budget exceeded
  • deprecated prod — scan budget exceeded
  • fsspec prod — scan budget exceeded
  • nest-asyncio prod — scan budget exceeded
  • numpy prod — scan budget exceeded
  • tenacity prod — scan budget exceeded
  • tiktoken prod — scan budget exceeded
  • typing-extensions prod — scan budget exceeded
  • typing-inspect prod — scan budget exceeded
  • networkx prod — scan budget exceeded
  • dirtyjson prod — scan budget exceeded
  • tqdm prod — scan budget exceeded
  • pillow prod — scan budget exceeded
  • PyYAML prod — scan budget exceeded
  • wrapt prod — scan budget exceeded
  • pydantic prod — scan budget exceeded
  • filetype prod — scan budget exceeded
  • eval-type-backport prod — scan budget exceeded
  • banks prod — scan budget exceeded
  • aiosqlite prod — scan budget exceeded
  • llama-index-workflows prod — scan budget exceeded
  • setuptools prod — scan budget exceeded
  • platformdirs prod — scan budget exceeded
  • tinytag prod — scan budget exceeded
  • click prod — scan budget exceeded
  • packaging prod — scan budget exceeded
  • rich prod — scan budget exceeded
  • nebula3-python prod — scan budget exceeded
  • tidb-vector prod — scan budget exceeded
  • PyMySQL prod — scan budget exceeded
  • falkordb prod — scan budget exceeded
  • neo4j prod — scan budget exceeded
  • aperturedb prod — scan budget exceeded
  • ray prod — scan budget exceeded
  • llama-index-storage-kvstore-dynamodb prod — scan budget exceeded
  • llama-index-storage-kvstore-tablestore prod — scan budget exceeded
  • llama-index-storage-kvstore-mongodb prod — scan budget exceeded
  • llama-index-storage-kvstore-elasticsearch prod — scan budget exceeded
  • llama-index-storage-kvstore-duckdb prod — scan budget exceeded
  • llama-index-kvstore-couchbase prod — scan budget exceeded
  • llama-index-storage-kvstore-azure prod — scan budget exceeded
  • llama-index-storage-kv-store-azurecosmosnosql prod — scan budget exceeded
  • llama-index-storage-kvstore-firestore prod — scan budget exceeded
  • llama-index-storage-kvstore-redis prod — scan budget exceeded
  • llama-index-storage-kvstore-postgres prod — scan budget exceeded
  • llama-index-storage-kvstore-gel prod — scan budget exceeded
  • redis prod — scan budget exceeded
  • llama-index-utils-azure prod — scan budget exceeded
  • upstash_redis prod — scan budget exceeded
  • opensearch-py prod — scan budget exceeded
  • pymongo prod — scan budget exceeded
  • gel prod — scan budget exceeded
  • jinja2 prod — scan budget exceeded
  • psycopg2-yugabytedb prod — scan budget exceeded
  • sqlalchemy-yugabytedb prod — scan budget exceeded
  • aioboto3 prod — scan budget exceeded
  • boto3-stubs prod — scan budget exceeded
  • asyncpg prod — scan budget exceeded
  • psycopg prod — scan budget exceeded
  • tablestore prod — scan budget exceeded
  • duckdb prod — scan budget exceeded
  • llama-index-vector-stores-duckdb prod — scan budget exceeded
  • pyarrow prod — scan budget exceeded
  • elasticsearch prod — scan budget exceeded
  • couchbase prod — scan budget exceeded
  • psycopg2-binary prod — scan budget exceeded
  • ag-ui-protocol prod — scan budget exceeded
  • fastapi prod — scan budget exceeded
  • guidance prod — scan budget exceeded
  • llama-index-program-guidance prod — scan budget exceeded
  • mem0ai prod — scan budget exceeded
  • guardrails-ai prod — scan budget exceeded
  • llama-index-llms-openai-like prod — scan budget exceeded
  • transformers prod — scan budget exceeded
  • modelscope prod — scan budget exceeded
  • torch prod — scan budget exceeded
  • sentencepiece prod — scan budget exceeded
  • ms-swift prod — scan budget exceeded
  • pip prod — scan budget exceeded
  • octoai prod — scan budget exceeded
  • gigachat prod — scan budget exceeded
  • litellm prod — scan budget exceeded
  • mistralai prod — scan budget exceeded
  • pyjwt prod — scan budget exceeded
  • cryptography prod — scan budget exceeded
  • ibm-watsonx-ai prod — scan budget exceeded
  • reka-api prod — scan budget exceeded
  • mlx-lm prod — scan budget exceeded
  • mlx prod — scan budget exceeded
  • llama-index-llms-llama-cpp prod — scan budget exceeded
  • langchain prod — scan budget exceeded
  • llama-index-llms-huggingface prod — scan budget exceeded
  • optimum prod — scan budget exceeded
  • aleph-alpha-client prod — scan budget exceeded
  • ai21 prod — scan budget exceeded
  • llama-index-llms-anthropic prod — scan budget exceeded
  • portkey-ai prod — scan budget exceeded
  • portkey prod — scan budget exceeded
  • openvino-genai prod — scan budget exceeded
  • huggingface-hub prod — scan budget exceeded
  • dashscope prod — scan budget exceeded
  • oci prod — scan budget exceeded
  • google-genai prod — scan budget exceeded
  • premai prod — scan budget exceeded
  • google-generativeai prod — scan budget exceeded
  • sseclient-py prod — scan budget exceeded
  • cleanlab-tlm prod — scan budget exceeded
  • llama-index-utils-qianfan prod — scan budget exceeded
  • llama-cpp-python prod — scan budget exceeded
  • friendli-client prod — scan budget exceeded
  • ipex-llm prod — scan budget exceeded
  • bigdl-core-xe-21 prod — scan budget exceeded
  • bigdl-core-xe-addons-21 prod — scan budget exceeded
  • bigdl-core-xe-batch-21 prod — scan budget exceeded
  • dpcpp-cpp-rt prod — scan budget exceeded
  • intel_extension_for_pytorch prod — scan budget exceeded
  • mkl-dpcpp prod — scan budget exceeded
  • onednn prod — scan budget exceeded
  • torchvision prod — scan budget exceeded
  • clarifai prod — scan budget exceeded
  • contextual-client prod — scan budget exceeded
  • python-dotenv prod — scan budget exceeded
  • ollama prod — scan budget exceeded
  • tokenizers prod — scan budget exceeded
  • llama-index-readers-upstage prod — scan budget exceeded
  • alibabacloud-searchplat20240529 prod — scan budget exceeded
  • tritonclient prod — scan budget exceeded
  • konko prod — scan budget exceeded
  • zhipuai prod — scan budget exceeded
  • sniffio prod — scan budget exceeded
  • termcolor prod — scan budget exceeded
  • llama-index-instrumentation prod — scan budget exceeded
  • fastembed prod — scan budget exceeded
  • voyageai prod — scan budget exceeded
  • llmlingua prod — scan budget exceeded
  • aimon prod — scan budget exceeded
  • colpali-engine prod — scan budget exceeded
  • presidio-analyzer prod — scan budget exceeded
  • presidio-anonymizer prod — scan budget exceeded
  • rank-llm prod — scan budget exceeded
  • mixedbread prod — scan budget exceeded
  • pinecone prod — scan budget exceeded
  • flashrank prod — scan budget exceeded
  • docling-core prod — scan budget exceeded
  • chonkie prod — scan budget exceeded
  • llama-index-vector-stores-google prod — scan budget exceeded
  • llama-index-response-synthesizers-google prod — scan budget exceeded
  • lancedb prod — scan budget exceeded
  • pylance prod — scan budget exceeded
  • tantivy prod — scan budget exceeded
  • polars prod — scan budget exceeded
  • open-clip-torch prod — scan budget exceeded
  • llama-index-embeddings-dashscope prod — scan budget exceeded
  • llama-index-readers-dashscope prod — scan budget exceeded
  • llama-index-node-parser-dashscope prod — scan budget exceeded
  • pgml prod — scan budget exceeded
  • peft prod — scan budget exceeded
  • flagembedding prod — scan budget exceeded
  • cognee prod — scan budget exceeded
  • graphistry prod — scan budget exceeded
  • videodb prod — scan budget exceeded
  • vectorize-client prod — scan budget exceeded
  • google-auth-httplib2 prod — scan budget exceeded
  • google-auth-oauthlib prod — scan budget exceeded
  • superlinked prod — scan budget exceeded
  • pydi-client prod — scan budget exceeded
  • bm25s prod — scan budget exceeded
  • pystemmer prod — scan budget exceeded
  • honeyhive prod — scan budget exceeded
  • openinference-instrumentation-llama-index prod — scan budget exceeded
  • langfuse prod — scan budget exceeded
  • uptrain prod — scan budget exceeded
  • argilla prod — scan budget exceeded
  • argilla-llama-index prod — scan budget exceeded
  • promptlayer prod — scan budget exceeded
  • wandb prod — scan budget exceeded
  • agentops prod — scan budget exceeded
  • aim prod — scan budget exceeded
  • jwt prod — scan budget exceeded
  • airweave-sdk prod — scan budget exceeded