Close Open Privacy Scan

link https://github.com/lobehub/lobe-chat
bolt Snapshot: commit 3cae103
science engine v3
schedule 2026-07-10T22:15:39.467477+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

Incomplete scan — only 25/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 5863 finding(s)

Dependency score: 52 (Medium risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

162 high 41 medium 5660 low
First-party packages: 32
Dependency packages: 9
Ecosystem: npm

swap_horiz Confirmed data exfiltration in application code

External domains: ${process.env.VERCEL_BRANCH_URL}`;${process.env.VERCEL_PROJECT_PRODUCTION_URL}`;${process.env.VERCEL_URL}`;analytics.umami.isapi.exa.aiapi.firecrawl.devapi.github.comapi.search1api.comapi.tavily.comapp.lobehub.comapp.posthog.comapp.testcdn.example.comchrome.browserless.iocloud.langfuse.comcloudflare-proxied.comcustom-agents-url.comcustom-app.comcustom-plugins-url.comcustom:3000discord.comenv.comfyui.comenv.example.comexample.comgithub.comhost.exampleinternal-service:3210market.lobehub.commodels.github.aionlyboxes.example.comopenrouter.aiplausible.ioproxy.example.compublic.example.comqstash-eu-central-1.upstash.ioregistry.npmjs.orgrouter.huggingface.coself-hosted.example.comslack.comtest.comumami.example.comx

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:151
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:184
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:210
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:79
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:171
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:535
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:589
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:647
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:70
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:261
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:335
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:423
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:481
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:564
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:651
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:809
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:62
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:88
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:141
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:195
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → repo/apps/server/src/services/bot/platforms/discord/api.ts:90
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:54
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:92
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:207
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:120 → repo/apps/server/src/services/desktopRelease/index.ts:122
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:210
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:708
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:63
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:74 → repo/apps/server/src/services/search/impls/anspire/index.ts:71
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:64 → repo/apps/server/src/services/search/impls/bocha/index.ts:61
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:70 → repo/apps/server/src/services/search/impls/brave/index.ts:66
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:69 → repo/apps/server/src/services/search/impls/exa/index.ts:65
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → repo/apps/server/src/services/search/impls/firecrawl/index.ts:66
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:48 → repo/apps/server/src/services/search/impls/jina/index.ts:44
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:52 → repo/apps/server/src/services/search/impls/kagi/index.ts:50
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:85 → repo/apps/server/src/services/search/impls/search1api/index.ts:82
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 → repo/apps/server/src/services/search/impls/tavily/index.ts:60
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/common/auth.steps.ts:36 → repo/e2e/src/steps/common/auth.steps.ts:41
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/hooks.ts:20 → repo/e2e/src/steps/hooks.ts:42
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:134 → repo/packages/device-gateway-client/src/http.ts:127
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:179 → repo/packages/device-gateway-client/src/http.ts:175
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:257 → repo/packages/device-gateway-client/src/http.ts:250
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → repo/packages/model-runtime/src/providers/aihubmix/index.ts:181
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:33 → repo/packages/model-runtime/src/providers/azureai/index.ts:67
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:121
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:158
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:93
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:156
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → repo/packages/model-runtime/src/providers/comfyui/index.ts:101
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:135 → repo/packages/model-runtime/src/providers/google/index.ts:471
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:34 → repo/packages/model-runtime/src/providers/nebius/index.ts:31
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:46 → repo/packages/model-runtime/src/providers/straico/index.ts:44
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:33
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:124
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → repo/packages/model-runtime/src/providers/zhipu/index.ts:220
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → repo/packages/web-crawler/src/crawImpl/browserless.ts:42
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 → repo/packages/web-crawler/src/crawImpl/exa.ts:32
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 → repo/packages/web-crawler/src/crawImpl/jina.ts:17
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → repo/packages/web-crawler/src/crawImpl/search1api.ts:26
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → repo/packages/web-crawler/src/crawImpl/tavily.ts:33
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/docsWorkflow/utils.ts:87 → repo/scripts/docsWorkflow/utils.ts:96
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:131 → repo/scripts/serverLauncher/startServer.js:141
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:168 → repo/scripts/serverLauncher/startServer.js:185
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/features/Auth/SignIn/useSignIn.ts:154 → repo/src/features/Auth/SignIn/useSignIn.ts:158
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/server/workflows/runGuard/qstashCancel.ts:79 → repo/src/server/workflows/runGuard/qstashCancel.ts:93
high first-party (npm): e2e User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/common/auth.steps.ts:36 → repo/e2e/src/steps/common/auth.steps.ts:41
high first-party (npm): e2e User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/hooks.ts:20 → repo/e2e/src/steps/hooks.ts:42
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:151
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:184
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:210
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:79
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:171
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:535
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:589
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:647
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:70
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:261
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:335
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:423
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:481
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:564
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:651
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:809
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:62
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:88
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:141
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:195
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → repo/apps/server/src/services/bot/platforms/discord/api.ts:90
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:54
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:92
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:207
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:120 → repo/apps/server/src/services/desktopRelease/index.ts:122
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:210
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:708
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:63
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:74 → repo/apps/server/src/services/search/impls/anspire/index.ts:71
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:64 → repo/apps/server/src/services/search/impls/bocha/index.ts:61
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:70 → repo/apps/server/src/services/search/impls/brave/index.ts:66
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:69 → repo/apps/server/src/services/search/impls/exa/index.ts:65
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → repo/apps/server/src/services/search/impls/firecrawl/index.ts:66
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:48 → repo/apps/server/src/services/search/impls/jina/index.ts:44
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:52 → repo/apps/server/src/services/search/impls/kagi/index.ts:50
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:85 → repo/apps/server/src/services/search/impls/search1api/index.ts:82
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 → repo/apps/server/src/services/search/impls/tavily/index.ts:60
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → repo/packages/web-crawler/src/crawImpl/browserless.ts:42
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 → repo/packages/web-crawler/src/crawImpl/exa.ts:32
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 → repo/packages/web-crawler/src/crawImpl/jina.ts:17
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → repo/packages/web-crawler/src/crawImpl/search1api.ts:26
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → repo/packages/web-crawler/src/crawImpl/tavily.ts:33
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → repo/packages/model-runtime/src/providers/aihubmix/index.ts:181
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:33 → repo/packages/model-runtime/src/providers/azureai/index.ts:67
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:121
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:158
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:93
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:156
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → repo/packages/model-runtime/src/providers/comfyui/index.ts:101
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:135 → repo/packages/model-runtime/src/providers/google/index.ts:471
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:34 → repo/packages/model-runtime/src/providers/nebius/index.ts:31
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:46 → repo/packages/model-runtime/src/providers/straico/index.ts:44
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:33
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:124
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → repo/packages/model-runtime/src/providers/zhipu/index.ts:220
high first-party (npm): packages/device-gateway-client User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:134 → repo/packages/device-gateway-client/src/http.ts:127
high first-party (npm): packages/device-gateway-client User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:179 → repo/packages/device-gateway-client/src/http.ts:175
high first-party (npm): packages/device-gateway-client User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:257 → repo/packages/device-gateway-client/src/http.ts:250
medium first-party (npm) Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767
medium first-party (npm): apps/server Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767
hub Dependency data flows (1)
high @fal-ai/client dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/npm/@[email protected]/src/request.js:29 → pkgs/npm/@[email protected]/src/request.js:52

</> First-Party Code

first-party (npm)

npm first-party
high pii_flow production #92f864cee3560c16 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:151 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:151 
    const response = await fetch(zipUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5597168ccb9a3b25 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:184 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:184 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d204a38805094b42 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:210 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:210 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #945ec446db11cd6b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:79 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:79 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b59eb4fc41e70bff — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:171 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:171 
    const response = await fetch(forkUrl, {
      body: JSON.stringify({
        identifier: item.identifier,
        name: item.name,
        status: item.status,
        versionNumber: item.versionNumber,
        visibility: item.visibility,
      }),
      headers,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d646844cbbb16abd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:535 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:535 
        const response = await fetch(url, { headers, method: 'GET' });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4c57b5d5620b28ca — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:589 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:589 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9e7c1a6c3957b4b3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:647 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:647 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7cda8468b5763c3d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:70 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:70 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b52a3d6a9d31574f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:261 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:261 
        const response = await fetch(deprecateUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b5249ac06567113f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:335 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:335 
        const response = await fetch(forkUrl, {
          body: JSON.stringify({
            identifier: input.identifier,
            name: input.name,
            status: input.status,
            versionNumber: input.versionNumber,
            visibility: input.visibility,
          }),
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4b6a0a098a3248b3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:423 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:423 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a1bda22aadbf0c27 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:481 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:481 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #991258523435fe5a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:564 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:564 
        const response = await fetch(listUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #81cff19aa234974d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:651 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:651 
        const response = await fetch(publishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #537315f254c996bd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:809 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:809 
        const response = await fetch(unpublishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2ce07f7b71c56848 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(skillId),
                assetType: 'skill',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #71be410d2646a958 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(pluginId),
                assetType: 'plugin',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #592ce1fa57fa4d51 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 
      const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/scan`, {
        headers,
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #fd5d66787042d126 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 
        const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/submit-repo`, {
          body: JSON.stringify({
            branch: input.branch,
            gitUrl: input.gitUrl,
            type: input.type,
          }),
          headers: {
            ...headers,
            'Content-Type': 'application/json',
            ...(input.actAs === undefined
              ? {}
              : { 'x-lobe-owner-account-id': String(input.actAs) }),
          },
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #37f82daa2558e849 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #04d22e20784664a9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 
    const data = (await this.rest.post(Routes.userChannels(), {
      body: { recipient_id: recipientId },
    })) as { id: string };

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #18cbc4d471c53243 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:54 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:54 
      const res = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9d90f563cbfe8169 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:92 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:92 
      const response = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #aabcdf110e5eead1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:207 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:207 
        const res = await fetch(url);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8e6ce277dd4265fb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:122 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/desktopRelease/index.ts:120 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/desktopRelease/index.ts:122 
  const res = await fetch(`https://api.github.com/repos/${owner}/${repo}/releases/latest`, {
    headers: {
      ...(token ? { Authorization: `Bearer ${token}` } : {}),
      'Accept': 'application/vnd.github+json',
      'User-Agent': 'lobehub-server',
    },
    next: { revalidate: 300, tags: [FetchCacheTag.DesktopRelease] },
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #14b17796006dc484 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:210 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:210 
    const response = await fetch(userInfoUrl, {
      // @ts-ignore
      headers: this.market.headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2c8bb72b37b669c9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:708 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:708 
    const response = await fetch(uploadUrl, {
      body: formData,
      headers: authHeaders,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b2e43dfec1ce2394 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 
    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        device_code: deviceCode,
        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3ff9c5c6a03409b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 
    const response = await fetch(GithubCopilotOAuthService.TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `token ${oauthToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cdf8bfb23ad401cc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:71 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/anspire/index.ts:74 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/anspire/index.ts:71 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': '*/*',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Connection': 'keep-alive ',
          'Content-Type': 'application/json',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c45040de5b0fabdc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:61 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/bocha/index.ts:64 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/bocha/index.ts:61 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ab0646e06e3ff421 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:66 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/brave/index.ts:70 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/brave/index.ts:66 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': 'application/json',
          'Accept-Encoding': 'gzip',
          'X-Subscription-Token': this.apiKey ? this.apiKey : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #bdb28e8ba9b28ec5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:65 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/exa/index.ts:69 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/exa/index.ts:65 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Content-Type': 'application/json',
          'x-api-key': this.apiKey ? this.apiKey : '',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6e89b3e0a510dc4f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6e056915dd49a501 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:44 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/jina/index.ts:48 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/jina/index.ts:44 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Accept': 'application/json',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
          'X-Respond-With': 'no-content',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #37065e1aead0002b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:50 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/kagi/index.ts:52 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/kagi/index.ts:50 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          Authorization: this.apiKey ? `Bot ${this.apiKey}` : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d2b036c5d779dd76 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:82 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/search1api/index.ts:85 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/search1api/index.ts:82 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7ef2bbc834ba754d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:60 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/tavily/index.ts:40 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/tavily/index.ts:60 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #46f1900f02042dd3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/common/auth.steps.ts:41 · flow /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/common/auth.steps.ts:36 → /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/common/auth.steps.ts:41 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #da86be32d9c075a5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/hooks.ts:42 · flow /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/hooks.ts:20 → /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/hooks.ts:42 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0311306a4b469964 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:127 · flow /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:134 → /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:127 
    const res = await this.post(
      '/api/device/tool-call',
      {
        deviceId: params.deviceId,
        operationId: params.operationId,
        timeout: params.timeout,
        toolCall,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9e71688710e48023 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:175 · flow /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:179 → /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:175 
    const res = await this.post('/api/device/message-api', {
      api,
      deviceId: params.deviceId,
      timeout: params.timeout,
      userId: params.userId,
      workspaceId: params.workspaceId,
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5cab2df28b35795c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:250 · flow /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:257 → /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:250 
    const res = await this.post(
      '/api/device/rpc',
      {
        deviceId: params.deviceId,
        method: rpc.method,
        params: rpc.params,
        timeout: params.timeout,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8f5174f41625719b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8ce2976d161812a7 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 
  const response = await fetch(`${baseURL}/videos`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #26cd15937ff063f1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 
      const response = await fetch(urlJoin(rootBaseURL, '/api/v1/models'), {
        headers: {
          'Authorization': `Bearer ${apiKey}`,
          'APP-Code': 'LobeHub',
        },
        signal: controller.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a6bdf7d933a97027 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:67 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/azureai/index.ts:33 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/azureai/index.ts:67 
      const response = this.client.path('/chat/completions').post({
        body: {
          messages: updatedMessages as OpenAI.ChatCompletionMessageParam[],
          model,
          ...params,
          stream: enableStreaming,
          temperature: model.includes('o3') || model.includes('o4') ? undefined : temperature,
          tool_choice: params.tools ? 'auto' : undefined,
          top_p: model.includes('o3') || model.includes('o4') ? undefined : top_p,
        },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #47010cbbad75a70a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 
  const response = await fetch(url, {
    body: JSON.stringify(payload),
    headers: {
      'Content-Type': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #421dc9c15680fea1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 
  const response = await fetch(pollingUrl, {
    headers: {
      'accept': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #efc8b50dcc56535e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 
      response = await fetch(url, {
        body: JSON.stringify({ tools: functions, ...restPayload }),
        headers: { 'Content-Type': 'application/json', ...headers },
        method: 'POST',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9b34e26466276484 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${this.apiKey}`,
        'Content-Type': 'application/json',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2d589408768dfb16 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:101 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/comfyui/index.ts:101 
      const response = await fetch(`${appUrl}/webapi/create-image/comfyui`, {
        body: JSON.stringify({
          model: payload.model,
          options: this.options,
          params: payload.params,
        }),
        headers,
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2ef9e2cc97e2b755 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:471 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/google/index.ts:135 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/google/index.ts:471 
      const response = await fetch(url, {
        headers: {
          'x-goog-api-key': this.apiKey!,
        },
        method: 'GET',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #addd36e642cf1758 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #61574b6a86925397 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cb94941f690f129c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 
  const response = await fetch(`${baseURL}/video_generation`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5330e38c150bd7b4 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:31 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/nebius/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/nebius/index.ts:31 
    const res = await fetch(url, {
      headers: {
        Accept: 'application/json',
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6a45761b54c951be — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 
  const response = await fetch(statusUrl, {
    body: JSON.stringify({ requestId }),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e31f5b9114b4aebd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 
  const response = await fetch(`${baseURL}/video/submit`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f518e2b9b91a5119 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:44 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/straico/index.ts:46 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6655c66322d50bf5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 
  const response = await fetch(`${baseURL}/contents/generations/tasks`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0b218afa45e0c5db — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #07d887c74d01cb87 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 
  const response = await fetch(`${baseURL}/video/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a6fb6f6d257b96ab — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #132b40ba64b6fa87 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #462ec6c3f34bfb8e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #bf16929bb89130ca — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 
  const response = await fetch(endpoint, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ac2b5236df94f25b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #65b4ad758f3a57f3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #12c088615031fc48 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #97d677b43dea87b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:42 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/browserless.ts:42 
        fetch(
          qs.stringifyUrl({
            query: {
              blockAds: BROWSERLESS_BLOCK_ADS,
              launch: JSON.stringify({ stealth: BROWSERLESS_STEALTH_MODE }),
              token: BROWSERLESS_TOKEN,
            },
            url: urlJoin(BASE_URL, '/content'),
          }),
          {
            body: JSON.stringify(input),
            headers: {
              'Content-Type': 'application/json',
            },
            method: 'POST',
            signal,
          },
        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c24bf7fa35015ea6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/exa.ts:25 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9fcc8200d5f795d8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 
        fetch(`${baseUrl}/scrape`, {
          body: JSON.stringify({
            formats: ['markdown'], // ["markdown", "html"]
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b634399157add431 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:17 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/jina.ts:11 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/jina.ts:17 
        fetch(`${getJinaReaderBaseUrl()}/${url}`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': token ? `Bearer ${token}` : '',
            'x-send-from': 'LobeChat Community',
          },
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0cd9ded226b49990 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #87abc9fbd1db7ffb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #433f96bd3cdcbe9a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/docsWorkflow/utils.ts:96 · flow /tmp/closeopen-yp75nq7n/repo/scripts/docsWorkflow/utils.ts:87 → /tmp/closeopen-yp75nq7n/repo/scripts/docsWorkflow/utils.ts:96 
    const response = await fetch(url, { headers });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d92ef88e66a4ebb6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:141 · flow /tmp/closeopen-yp75nq7n/repo/scripts/serverLauncher/startServer.js:131 → /tmp/closeopen-yp75nq7n/repo/scripts/serverLauncher/startServer.js:141 
      const res = await fetch(url, {
        method: 'POST',
        headers: {
          'Authorization': `Bearer ${KEY_VAULTS_SECRET}`,
          'Content-Type': 'application/json',
        },
        body: JSON.stringify({}),
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c314a3e691e74e94 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:185 · flow /tmp/closeopen-yp75nq7n/repo/scripts/serverLauncher/startServer.js:168 → /tmp/closeopen-yp75nq7n/repo/scripts/serverLauncher/startServer.js:185 
    const res = await fetch(url, {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${QSTASH_TOKEN}`,
        'Content-Type': 'application/json',
        'Upstash-Method': 'POST',
        'Upstash-Cron': '*/10 * * * *',
        'Upstash-Schedule-Id': 'lobe-task-schedule-dispatch',
      },
      body: JSON.stringify({}),
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8dd77fc11d2ec3c1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185 · flow /tmp/closeopen-yp75nq7n/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → /tmp/closeopen-yp75nq7n/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185 
          const response = await fetch(userInfoUrl, {
            headers: {
              'Content-Type': 'application/json',
              'x-lobe-trust-token': trustedClientToken,
            },
            method: 'GET',
          });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c74adc06e6f13ee6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/features/Auth/SignIn/useSignIn.ts:158 · flow /tmp/closeopen-yp75nq7n/repo/src/features/Auth/SignIn/useSignIn.ts:154 → /tmp/closeopen-yp75nq7n/repo/src/features/Auth/SignIn/useSignIn.ts:158 
      const response = await fetch('/api/auth/check-user', {
        body: JSON.stringify({ email: targetEmail }),
        headers: { 'Content-Type': 'application/json' },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a6c61f460a030168 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150 · flow /tmp/closeopen-yp75nq7n/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → /tmp/closeopen-yp75nq7n/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150 
    const response = await fetch(tokenUrl, {
      body: body.toString(),
      headers: {
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #68dc6e468467e520 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/server/workflows/runGuard/qstashCancel.ts:93 · flow /tmp/closeopen-yp75nq7n/repo/src/server/workflows/runGuard/qstashCancel.ts:79 → /tmp/closeopen-yp75nq7n/repo/src/server/workflows/runGuard/qstashCancel.ts:93 
  const response = await fetch(new URL('/v2/workflows/runs', qstashUrl), {
    body: JSON.stringify({ workflowUrl: [workflowUrlPrefix] }),
    headers: {
      'Authorization': `Bearer ${token}`,
      'Content-Type': 'application/json',
    },
    method: 'DELETE',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow production #6cf0bbc3ba6bc9df — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #be90a5c4395a3dd5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/apps/server/src/services/user/index.ts:45 
    analytics?.track({
      name: 'user_register_completed',
      properties: {
        spm: 'user_service.init_user.user_created',
      },
      userId: user.id,
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3186072bb0f6253d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/agentStreamPipeline.ts:137 
      const payload = this.codexTracker ? await this.codexTracker.track(raw as any) : raw;

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #7b1ca9a707c66c8e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:28 
    await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4fe8bdcb82c5f6b5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:43 
    const enriched = await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2314e30e85c29613 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:88 
    await tracker.track({
      item: {
        changes: [],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #420c78ed967da543 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:99 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: updatePath }],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c8cca9be57b58f9a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:128 
    await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #33fee39258910d8a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:139 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #1026d7342f1cefa2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:168 
    await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #203104295f1da920 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:179 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c0b40dd951159f1f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:209 
    await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #38589d2e88671cde — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:220 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #6d76fdd5a4669486 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/components/Analytics/HomePageTracker.tsx:15 
      analytics.track({
        name: 'main_page_view',
        properties: {
          spm: 'homepage.main_page.view',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0ede1d904dd5153c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/AgentSetting/store/action.ts:316 
        analytics.track({
          name: 'agent_meta_updated',
          properties: {
            assistant_avatar: mergedMeta.avatar,
            assistant_background_color: mergedMeta.backgroundColor,
            assistant_description: mergedMeta.description,
            assistant_name: mergedMeta.title,
            assistant_tags: mergedMeta.tags,
            is_inbox: id === 'inbox',
            session_id: id || 'unknown',
            timestamp: Date.now(),
            user_id: useUserStore.getState().user?.id || 'anonymous',
          },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ebc35611a89a16fc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/Carousel.tsx:132 
      analytics?.track({
        name: 'billboard_cta_clicked',
        properties: {
          billboard_slug: billboardSlug,
          item_id: item.id,
          link_url: item.linkUrl,
          position,
          spm: 'billboard.cta.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d8a9ee212b732463 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/Carousel.tsx:231 
      void analytics.track({
        name: 'billboard_served',
        properties: {
          billboard_slug: set.slug,
          item_count: set.items.length,
          spm: 'billboard.card.served',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #76944bd2a5ea6a6f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/index.tsx:48 
      analytics?.track({
        name: 'billboard_dismissed',
        properties: {
          billboard_slug: billboard.slug,
          item_count: billboard.items.length,
          spm: 'billboard.dismiss.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e7bab9a5f2bb1a43 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/User/UserLoginOrSignup/trackLoginOrSignupClicked.ts:23 
    await analytics.track({
      name: 'login_or_signup_clicked',
      properties: {
        ...(lhCid && { lh_cid: lhCid }),
        ...(provider && { provider }),
        spm,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0b2954ffd2931550 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/libs/analytics/productUsageEvent.ts:27 
    await analytics.track(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #7d271c6cd233b8fa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:177 
        analytics?.track({ name: eventName, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a60c92d55b48d2db — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:188 
        analytics?.track({
          name: 'home_footer_menu_clicked',
          properties: { key, spm: `homepage.footer.${key}.clicked` },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #999eb52c55180d0e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:451 
        analytics?.track({
          name: 'home_footer_menu_opened',
          properties: { keys: trackedMenuKeys.join(','), spm: 'homepage.footer.opened' },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a8bd60c16039d0dd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(mobile)/(home)/features/SessionListContent/List/index.tsx:65 
                analytics?.track({
                  name: 'switch_session',
                  properties: {
                    assistant_name: session.meta?.title || 'Untitled Agent',
                    assistant_tags: session.meta?.tags || [],
                    group_id: sessionGroupId,
                    group_name: groupName,
                    session_id: id,
                    spm: 'homepage.chat.session_list_item.click',
                    user_id: userId || 'anonymous',
                  },
                });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #794b369429c438f1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/services/onboardingFeedback/index.ts:62 
    options.analytics?.track({
      name: FEEDBACK_EVENT_NAME,
      properties: {
        rating: payload.rating,
        spm: FEEDBACK_SPM,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d596d8b8b3044f1d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/services/onboardingMetrics/index.ts:34 
    client.track({ name, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #806a44804f53c86a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/store/agent/slices/agent/action.ts:119 
      analytics.track({
        name: 'new_agent_created',
        properties: {
          agent_id: result.agentId,
          assistant_name: params.config?.title || 'Untitled Agent',
          assistant_tags: params.config?.tags || [],
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #d2d8c2b4796c4dc5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/store/session/slices/session/action.ts:80 
      analytics.track({
        name: 'new_agent_created',
        properties: {
          assistant_name: newSession.meta?.title || 'Untitled Agent',
          assistant_tags: newSession.meta?.tags || [],
          session_id: id,
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 2246 low-confidence finding(s)
low env_fs production #a443b3d3606e6d64 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:39 
        return [file, await readFile(path.join(rootDir(), file), 'utf8')];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f8e253300a78fab — Filesystem access.
repo/.agents/scripts/check/autofix.ts:62 
      current = await readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #269c247dfa5c8d51 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:69 
    await writeFile(origCopy, original);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f04c9b2e2aa47058 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:85 
  await writeFile(diffFile, diffs.map((entry) => entry.diff).join('\n\n') + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eef370d9bdd7ecdf — Filesystem access.
repo/.agents/scripts/check/check.test.ts:84 
    const pkg = JSON.parse(await readFile(path.join(repoRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59bb786d7354658b — Filesystem access.
repo/.agents/scripts/check/delegate.ts:29 
    content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20116e0a05165159 — Filesystem access.
repo/.agents/scripts/check/delegate.ts:41 
    const pkg = JSON.parse(await readFile(path.join(hostRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ac9aaf45696476a — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:99 
  const raw = await readFile(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #effc8519defeddde — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:204 
  const raw = await readFile(resultPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf0ef5495f5d6587 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:209 
    await writeFile(resultPath, `${JSON.stringify(result, null, 2)}\n`, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7966fa25ea0d524 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:99 
    checkItemId: process.env.AGENT_BROWSER_KLM_CHECK || process.env.KLM_CHECK_ITEM_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da0dceace4cf161f — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:100 
    label: process.env.AGENT_BROWSER_KLM_LABEL || process.env.KLM_LABEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3348ac3f4e0e5122 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:101 
    phaseId: process.env.AGENT_BROWSER_KLM_PHASE || process.env.KLM_PHASE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9379e07c360df49 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:102 
    surface: process.env.AGENT_BROWSER_KLM_SURFACE || process.env.KLM_SURFACE || 'web',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73d50abd39c5dfe3 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:103 
    commandTimeoutMs: parseNumber(process.env.AGENT_BROWSER_KLM_COMMAND_TIMEOUT_MS, undefined),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d400d15aec1d05a — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:105 
      process.env.AGENT_BROWSER_KLM_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40018fb736ac0fbf — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:106 
      process.env.INTERACTION_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e86abe36699c4bf — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:109 
  let binary = process.env.AGENT_BROWSER_BIN || 'agent-browser';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a118fc269df0c14b — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:325 
    const text = readFileSync(file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa1c74f076741419 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze-events.ts:32 
const raw = readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d37213debb8c901e — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze.mjs:29 
const raw = JSON.parse(fs.readFileSync(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9cfaabd7d99bfd7 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:26 
const WS_BASE = process.env.GATEWAY_WS || 'ws://localhost:8787';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c184aea7475e7b1 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:30 
  const m = readFileSync(p, 'utf8').match(/^JWKS_KEY=(.*)$/m);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60fafc5573aaa1a0 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:34 
  process.env.JWKS_KEY?.trim() ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d00feaf8ef70d3cd — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:35 
  fromFile(process.env.JWKS_SOURCE) ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9dc79affafb3a2d9 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/run.ts:153 
  writeFileSync(dumpPath, json, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2c20d8a49e8b177 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/cdp-capture.cjs:108 
  fs.writeFileSync(OUT, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a60883fc4d9623a2 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:17 
const map: Record<string, string> = JSON.parse(readFileSync(mapPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6236cdc93bee394c — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:28 
  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e909a9c546df32d7 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:65 
    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #130c18441418decd — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:5 
  readFileSync('/tmp/family-map.json', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d40b975af7763046 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:14 
  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f21160ff7beebeb5 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:45 
    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd93c75885f3bd1b — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:11 
const ids: string[] = JSON.parse(readFileSync('/tmp/model-ids.json', 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0c0a78befa26ada — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:235 
  writeFileSync('/tmp/family-map.json', JSON.stringify(map, null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0a0ccd428c46496 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/extract-model-ids.ts:22 
writeFileSync(out, JSON.stringify([...ids].sort(), null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #530b9414328d48d7 — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:95 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f000728ae0ae4ddb — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:101 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f2bfc3ef81986a3 — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:102 
  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobe-chat';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #777a21a05c246d69 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:157 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1adcca8b0bae6ade — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:160 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5b3bbfe33899a38 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:161 
  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1546f64c92d2c74 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:162 
  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84d0692df73284ac — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:13 
    validateEnv: process.env.ERROR_VALIDATE_ENV || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2570e3045ebc2bcd — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:14 
    rebaseAttempt: process.env.ERROR_REBASE_ATTEMPT || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1d97ecff849aa7a — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:15 
    createBranch: process.env.ERROR_CREATE_BRANCH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6179ddad71b78557 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:16 
    installDeps: process.env.ERROR_INSTALL_DEPS || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08ddc9fe9a45361d — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:17 
    runI18n: process.env.ERROR_RUN_I18N || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ecbcd8e3f949ea7 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:18 
    commitPush: process.env.ERROR_COMMIT_PUSH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccf4fdb18e3558db — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:23 
    validateEnv: process.env.STEP_VALIDATE_ENV || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c19699aa5731da6 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:24 
    checkBranch: process.env.STEP_CHECK_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afe04708f7a17bd5 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:25 
    rebaseAttempt: process.env.STEP_REBASE_ATTEMPT || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #033fa4ca89e5fc07 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:26 
    createBranch: process.env.STEP_CREATE_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d156c394ab2faf8 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:27 
    installDeps: process.env.STEP_INSTALL_DEPS || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46ee12359f256fdc — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:28 
    runI18n: process.env.STEP_RUN_I18N || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36685116c3bf62a0 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:29 
    commitPush: process.env.STEP_COMMIT_PUSH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ad2eada0aeaaf4d — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:30 
    createPr: process.env.STEP_CREATE_PR || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9005f87628e815b9 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:77 
- **Runner OS:** ${process.env.RUNNER_OS || 'Unknown'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #587fbbfd935955db — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:78 
- **Bun Version:** ${process.env.BUN_VERSION || 'Default'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acff776092f75a42 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:63 
  const outputPath = process.env.GITHUB_OUTPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08d625427a5cd77e — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:105 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #919c7b92641fa1f5 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:108 
  const repository = process.env.GITHUB_REPOSITORY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8c9a0a16734fc75 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:110 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || repositoryOwner || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #391c92383064c0c8 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:111 
  const repo = process.env.GITHUB_REPOSITORY_NAME || repositoryName || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45be65f9a83a6b28 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:112 
  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a11ac10128ef0a6e — Filesystem access.
repo/.i18nrc.js:37 
      fs.readFileSync(path.join(__dirname, 'docs/glossary.mdx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74c6b411201ed5c9 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:16 
const AGENT_ID = process.env.AGENT_FS_E2E_AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00aab94f13cd65e1 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'LOBEHUB_CLI_HOME=.lobehub-dev bun src/index.ts';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e34d9f1e9368933 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:23 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30de00264bfbe513 — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:26 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04467592edb4d10e — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:27 
const AGENT_ID = process.env.AGENT_SIGNAL_AGENT_ID || process.env.AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43dddc31617c39d7 — Filesystem access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:33 
const golden = JSON.parse(readFileSync(goldenPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb5e10ab715a0456 — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:38 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #313079b710918ed5 — Environment-variable access.
repo/apps/cli/e2e/agent.e2e.test.ts:18 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da6914567bf931e3 — Environment-variable access.
repo/apps/cli/e2e/agent.e2e.test.ts:24 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d798e5bd663b8f37 — Environment-variable access.
repo/apps/cli/e2e/doc.e2e.test.ts:19 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4829a19f0347f3c1 — Environment-variable access.
repo/apps/cli/e2e/doc.e2e.test.ts:25 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e4c1a5a75ca428d — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:146 
      fs.writeFileSync(tmpFile, '# File Content\nFrom body-file flag');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b212f391243fc10 — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:197 
      fs.writeFileSync(tmpFile, '# Created from file\nTest content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2aa83e6581178094 — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:229 
      fs.writeFileSync(tmpFile, JSON.stringify(docs));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41da6c79694d639e — Environment-variable access.
repo/apps/cli/e2e/file.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca8749d4ec2babf2 — Environment-variable access.
repo/apps/cli/e2e/file.e2e.test.ts:23 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71002672b7d4b4fc — Filesystem access.
repo/apps/cli/e2e/file.e2e.test.ts:88 
      fs.writeFileSync(tmpFile, 'hello from lh e2e upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64ec53f766e93ee8 — Filesystem access.
repo/apps/cli/e2e/file.e2e.test.ts:101 
      fs.writeFileSync(tmpFile, 'hello from lh e2e --file upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d3c6c496e936ad — Environment-variable access.
repo/apps/cli/e2e/generate.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1772fd2a4292696e — Environment-variable access.
repo/apps/cli/e2e/generate.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbad034945a8219f — Environment-variable access.
repo/apps/cli/e2e/kb.e2e.test.ts:19 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #010201ba1c03c435 — Environment-variable access.
repo/apps/cli/e2e/kb.e2e.test.ts:25 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cdffa6f18ee7097 — Filesystem access.
repo/apps/cli/e2e/kb.e2e.test.ts:221 
      fs.writeFileSync(tmpFile, 'E2E upload test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c61c48dec6c692fb — Environment-variable access.
repo/apps/cli/e2e/memory.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eeed39eb095f5ae9 — Environment-variable access.
repo/apps/cli/e2e/memory.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c90f6e64f9e70357 — Environment-variable access.
repo/apps/cli/e2e/message.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b41e6895a9766710 — Environment-variable access.
repo/apps/cli/e2e/message.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dd274fc564bd9cc — Environment-variable access.
repo/apps/cli/e2e/model.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e843c5ff5bbeb9e — Environment-variable access.
repo/apps/cli/e2e/model.e2e.test.ts:24 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92406c95aee10bfc — Environment-variable access.
repo/apps/cli/e2e/plugin.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67ea1f202ae30cec — Environment-variable access.
repo/apps/cli/e2e/plugin.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60d1a9bec5462a18 — Environment-variable access.
repo/apps/cli/e2e/provider.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6db5acd795e0c57 — Environment-variable access.
repo/apps/cli/e2e/provider.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b30da20153695e44 — Environment-variable access.
repo/apps/cli/e2e/search.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59c594096d2c8fd4 — Environment-variable access.
repo/apps/cli/e2e/search.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52493ea1df325516 — Environment-variable access.
repo/apps/cli/e2e/skill.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8ae24b15e6f90f1 — Environment-variable access.
repo/apps/cli/e2e/skill.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11a7b7833b34c4f1 — Environment-variable access.
repo/apps/cli/e2e/topic.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca15b2dec7f3c11f — Environment-variable access.
repo/apps/cli/e2e/topic.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fdd85835fe17f30 — Environment-variable access.
repo/apps/cli/src/api/client.ts:22 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71f403de581e583a — Environment-variable access.
repo/apps/cli/src/api/client.ts:32 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ea25f37b45f02f3 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:19 
  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71c997ed6dda036f — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:20 
  const originalWorkspaceId = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f69404d2897632e6 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:24 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75e9ae98ec8bd11f — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:25 
    delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #581b81b780b9ed59 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:29 
    if (originalJwt === undefined) delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f6701fc2cb2cd25 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:30 
    else process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5add62903c11a99 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:32 
    if (originalWorkspaceId === undefined) delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #939e093947ced754 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:33 
    else process.env.LOBEHUB_WORKSPACE_ID = originalWorkspaceId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f6e6e37189eb184 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:37 
    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3eda62bbe391e2c7 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:38 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e34a108112e5a87 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:56 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9ec643b7e0320bf — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:71 
    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1894706a0ceec0 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:72 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5187724cd91b3a0 — Environment-variable access.
repo/apps/cli/src/api/http.ts:16 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #286dcf2203e5c2e6 — Environment-variable access.
repo/apps/cli/src/api/http.ts:33 
    if (process.env[CLI_API_KEY_ENV]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24d800c2e9410685 — Environment-variable access.
repo/apps/cli/src/api/http.ts:80 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bfa023789e55fe9 — Environment-variable access.
repo/apps/cli/src/api/http.ts:90 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87a14e0050918320 — Environment-variable access.
repo/apps/cli/src/api/workspace.ts:10 
  const fromEnv = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #671e3689f55b3dad — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:63 
      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9dda036b36f240c5 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:93 
      fs.writeFileSync(credentialsFile, JSON.stringify(testCredentials));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d68a8d9b4b17a620 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:100 
      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efbd158e7f6b7e5a — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:106 
      fs.writeFileSync(credentialsFile, 'not-valid-base64-or-json!!!');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #295c7b80d7cc6e39 — Environment-variable access.
repo/apps/cli/src/auth/credentials.ts:12 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28df03295c2549f0 — Filesystem access.
repo/apps/cli/src/auth/credentials.ts:48 
  fs.writeFileSync(CREDENTIALS_FILE, encrypted, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e9a9269af29fd90 — Filesystem access.
repo/apps/cli/src/auth/credentials.ts:53 
    const data = fs.readFileSync(CREDENTIALS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d2c9c95d6eceea9 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:16 
    (process.env.LOBEHUB_SERVER || 'https://app.lobehub.com').replace(/\/$/, ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b486b11d06abee4 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:37 
  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #940326c2406d475d — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:38 
  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efc006acb18ceacc — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:39 
  const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83fdb997e0e42d62 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:45 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb9a4378f7f002fe — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:46 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #569df98ab2c46981 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:47 
    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5280bd2d36540d91 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:51 
    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0770bdeba5a0749 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:52 
    process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e559cfdcd3210827 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:53 
    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16e0e2cf0dd9152a — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:109 
      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf3541dcb4ec6eab — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:124 
      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e156d33cd735ebc — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:125 
      process.env.LOBEHUB_SERVER = 'https://self-hosted.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8548e762742c2c35 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.ts:38 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90ab4cc655d6c926 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.ts:73 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53652fb642d05181 — Filesystem access.
repo/apps/cli/src/commands/agent.test.ts:162 
    await writeFile(graphFile, JSON.stringify(graph), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0e38319d100493d — Filesystem access.
repo/apps/cli/src/commands/agent.ts:22 
  const content = await readFile(graphFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d7172bb9c14197b — Filesystem access.
repo/apps/cli/src/commands/agent/spaceFs.ts:275 
    return readFileSync(options.contentFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cb967f750d9f9f6 — Filesystem access.
repo/apps/cli/src/commands/botMessage.test.ts:99 
    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89ac9948ce1f94b1 — Filesystem access.
repo/apps/cli/src/commands/botMessage.ts:87 
  const bytes = await readFile(raw);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dbbe4e0a2ff5700 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:8 
  const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68e19940279dc5d5 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:16 
    delete process.env.LOBEHUB_COMP_CWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #796ee59bffa1df39 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:17 
    process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c00da23a381c3344 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:39 
    process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4807eafebca24398 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:58 
    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9eb0275424889ca — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:67 
    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68c02ec04d5ee2ef — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:76 
    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1dea7eef25a5c3e — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:85 
    process.env.LOBEHUB_COMP_CWORD = '2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e9fcfdf44ce7631 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:94 
    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #149fd469bf31f2c4 — Environment-variable access.
repo/apps/cli/src/commands/completion.ts:23 
      const currentWordIndex = parseCompletionWordIndex(process.env.LOBEHUB_COMP_CWORD, words);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a41191bd23b587e7 — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:91 
      const isServiceChild = options.serviceChild || process.env.LOBEHUB_CONNECT_SERVICE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbe01923eb687a93 — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:93 
        options.daemonChild || isServiceChild || process.env.LOBEHUB_DAEMON === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c61bfd287f6bcd4 — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:344 
  const channel = process.env.LOBEHUB_CLI_CHANNEL || 'cli';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efe2517a1be3f538 — Filesystem access.
repo/apps/cli/src/commands/doc.ts:18 
    return fs.readFileSync(options.bodyFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c81d1c16165196a2 — Filesystem access.
repo/apps/cli/src/commands/doc.ts:168 
        const raw = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17728426d2432801 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:220 
      fs.writeFileSync(tmpFile, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57cb20520847f686 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:257 
      fs.writeFileSync(tmpFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #672ebad6ffca5163 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:281 
      fs.writeFileSync(tmpFile, 'dedup me');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecdb05b00e652bb6 — Filesystem access.
repo/apps/cli/src/commands/generate.test.ts:376 
      await fsWriteFile(bigPath, Buffer.alloc(4 * 1024 * 1024));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cba1547034bb6aa — Filesystem access.
repo/apps/cli/src/commands/generate/asr.ts:59 
            await writeFile(tempPath, downloaded.bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1c8fcbdde7ceeae — Filesystem access.
repo/apps/cli/src/commands/generate/asr.ts:90 
            const bytes = await readFile(localPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0b673e4cf4f1cb2 — Filesystem access.
repo/apps/cli/src/commands/generate/tts.ts:54 
        writeFileSync(options.output, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ef1bc72e42ba03d — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:434 
    await writeFile(
      file,
      JSON.stringify([
        { text: 'analyze', type: 'text' },
        { source: { type: 'url', url: 'https://x/y.png' }, type: 'image' },
      ]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e17eedd5b7db538 — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:1127 
    const meta = JSON.parse(await readFile(path.join(sessionDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb4b67f8a65b64f7 — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:1131 
    const stderrDump = await readFile(path.join(sessionDir, 'attempt-1.stderr.log'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #882b9b7d49bfb17c — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:141 
  return readFile(location, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55725513941b0a5e — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:388 
      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify({ ...meta, operationId, startedAt: new Date().toISOString() }, null, 2)}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18cde77006a4d55d — Environment-variable access.
repo/apps/cli/src/commands/hetero.ts:494 
      process.env.LOBEHUB_ASSISTANT_MESSAGE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cc3c23ed0246deb — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:529 
    await writeFile(
      askMcpConfigPath,
      JSON.stringify({
        mcpServers: {
          lobe_cc: {
            alwaysLoad: true,
            type: 'http',
            url: askServer.urlForOperation(operationId),
          },
        },
      }),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61cf29f0b4f711eb — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:44 
  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfb5dcc7a154c11a — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:45 
  const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e66f30c493e4f8d0 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:46 
  const originalPathext = process.env.PATHEXT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4832d68a35af4da — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:47 
  const originalSystemRoot = process.env.SystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2601dd44aa163e4c — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:54 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdf681280a35d7c8 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:60 
    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51383ea6575cb05e — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:61 
    process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6b52a6f607cae47 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:62 
    process.env.PATHEXT = originalPathext;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d762d8ea0b46032a — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:63 
    process.env.SystemRoot = originalSystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c51052d73939588 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:145 
    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fac75207cf22327 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:187 
    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f66ac705e69e6a3 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:346 
    process.env.PATH = 'C:\\Tools';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea03ceb1948e362d — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:347 
    process.env.PATHEXT = '.EXE;.CMD';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89bba3eef03d8281 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:348 
    process.env.SystemRoot = 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10cf52c00b469b80 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:65 
      const apiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd9171253d211e97 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:270 
  const pathValue = process.env.PATH || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea658152c0ac25ae — Environment-variable access.
repo/apps/cli/src/commands/login.ts:275 
    const pathext = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d010945f7495b21 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:280 
    const systemRoot = process.env.SystemRoot || process.env.WINDIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7502fe0165a37f87 — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.test.ts:73 
  fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9062d86ee11cfacb — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.test.ts:279 
      fs.writeFileSync(binPath, Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x00, 0x00, 0x01]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c052c9804862ca5 — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:198 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81ca87ed4d9e9c1d — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:231 
    ig.add(fs.readFileSync(gitignorePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e1140d87fd12b37 — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:432 
            const content = fs.readFileSync(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab158f8c2819fef1 — Filesystem access.
repo/apps/cli/src/commands/topic.ts:148 
        const content = fs.readFileSync(options.file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52830a8cc4732299 — Environment-variable access.
repo/apps/cli/src/commands/update.ts:31 
  const ua = process.env.npm_config_user_agent;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c89c212a9c656d9c — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:203 
    expect(readFileSync(path.join(skillDir, 'SKILL.md'), 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9772c07d1e46def — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:204 
    expect(readFileSync(path.join(skillDir, 'references/plan-format.md'), 'utf8')).toBe('plan');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #034611cae1313f6c — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:205 
    expect(readFileSync(path.join(skillDir, 'surfaces/cli.md'), 'utf8')).toBe('cli');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85dade664eec7cab — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:221 
    expect(readFileSync(skillFile, 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ea23013bb6711ce — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:224 
    expect(readFileSync(skillFile, 'utf8')).toBe('# Updated SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b6cba81d744270e — Filesystem access.
repo/apps/cli/src/commands/verify.ts:67 
    const buffer = readFileSync(file);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdbd6af8f9ac77b0 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:164 
    const parsed = JSON.parse(readFileSync(p, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb86062911e7d99d — Filesystem access.
repo/apps/cli/src/commands/verify.ts:173 
    writeFileSync(path.join(dir, RUN_SIDECAR), `${JSON.stringify({ verifyRunId }, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63224ad04e089145 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:223 
          writeFileSync(dest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02ba4ad931c6a3d9 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:1070 
          result = JSON.parse(readFileSync(resultPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a5e8ec83022f5df — Filesystem access.
repo/apps/cli/src/commands/verify.ts:1079 
        const content = existsSync(reportMdPath) ? readFileSync(reportMdPath, 'utf8') : undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db567de240f59fe6 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:75 
      await writeFile(path.join(mockDir, 'daemon.pid'), 'not-a-number');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d4480668db1727a — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:220 
      const content = fs.readFileSync(getLogPath(), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb5a80ea38c2595b — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:231 
      await writeFile(logPath, bigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0df366b7642e9f29 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:243 
      await writeFile(logPath, 'small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c894f7f38eaa0aa5 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:248 
      expect(fs.readFileSync(logPath, 'utf8')).toBe('small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa7cb2a4f976acdc — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:40 
    const raw = fs.readFileSync(getPidPath(), 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17f315d243ddb489 — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:50 
  fs.writeFileSync(getPidPath(), String(pid), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a033580a237ccee6 — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:123 
  fs.writeFileSync(getStatusPath(), JSON.stringify(status, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #458f712c86fede1d — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:128 
    return JSON.parse(fs.readFileSync(getStatusPath(), 'utf8')) as DaemonStatus;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91289a9ede45b454 — Filesystem access.
repo/apps/cli/src/daemon/taskRegistry.ts:26 
    return JSON.parse(fs.readFileSync(getRegistryPath(), 'utf8')) as Record<string, TaskEntry>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb3ad72a4004f6ee — Filesystem access.
repo/apps/cli/src/daemon/taskRegistry.ts:35 
  fs.writeFileSync(getRegistryPath(), JSON.stringify(entries, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2f31daaf600720f — Filesystem access.
repo/apps/cli/src/man/generate.ts:14 
  writeFile(`${outputDir}lh.1`, generateRootManPage(program, cliVersion)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10f94f31ee51d3d7 — Filesystem access.
repo/apps/cli/src/man/generate.ts:15 
  writeFile(`${outputDir}lobe.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7985ad9af203eca4 — Filesystem access.
repo/apps/cli/src/man/generate.ts:16 
  writeFile(`${outputDir}lobehub.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a11355ab9d50687 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:51 
    fs.writeFileSync(entryPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63f33f9c7031286a — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:59 
    delete process.env.LOBEHUB_CLI_HOME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #737922c66ab2d998 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:60 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46b7ad4571ce339d — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:61 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5586404c9b6fbf80 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:62 
    delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45a3c70bcb6630e7 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:63 
    delete process.env.AWS_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99931d6b1f100486 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:101 
    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fd548d3a6e58879 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:104 
    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #262a81f561b5bc81 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:140 
    process.env.ANTHROPIC_API_KEY = 'anthropic-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0db999b95f80f17b — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:141 
    process.env.AWS_SECRET_ACCESS_KEY = 'aws-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cea64f6f78d91d2 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:142 
    process.env.LOBEHUB_CLI_API_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e83678416ca993fa — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:143 
    process.env.QUOTED_ENV = 'value with "quotes", \\slashes, and $dollars';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d98903291287b1a3 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:148 
    const envFile = fs.readFileSync(envFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6db4bc79670c6435 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:166 
    process.env.LOBEHUB_CLI_API_KEY = 'rotated-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61a9b34d229474ea — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:170 
    expect(fs.readFileSync(path.join(tmpDir, '.lobehub', 'connect-service.env'), 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90cd93a57600f2bc — Environment-variable access.
repo/apps/cli/src/service/connect.ts:35 
    process.env.LOBEHUB_CONNECT_SERVICE_UNIT_DIR ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #741da695c73692e3 — Environment-variable access.
repo/apps/cli/src/service/connect.ts:41 
  return path.join(os.homedir(), process.env.LOBEHUB_CLI_HOME || '.lobehub');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #383eb3976ef04be7 — Filesystem access.
repo/apps/cli/src/service/connect.ts:144 
  fs.writeFileSync(envFilePath, `${lines.join('\n')}\n`, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dffc764c523b42da — Environment-variable access.
repo/apps/cli/src/service/connect.ts:162 
  if (process.env.LOBEHUB_JWT || process.env[CLI_API_KEY_ENV] || loadCredentials()) return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50d47f588b2213bd — Filesystem access.
repo/apps/cli/src/service/connect.ts:176 
  fs.writeFileSync(path.join(getUserServiceDir(), SERVICE_NAME), renderUnit(), { mode: 0o644 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7949dbf51eb7d9c — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:19 
const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #461eb4b809b49dfd — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:41 
    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #148e4013bffb2a00 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:46 
    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50de5caa1d9c2421 — Filesystem access.
repo/apps/cli/src/settings/index.test.ts:71 
    fs.writeFileSync(settingsFile, '{invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa87fec4f4003859 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:86 
    process.env.LOBEHUB_SERVER = 'https://env.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #746f77b1969707d5 — Environment-variable access.
repo/apps/cli/src/settings/index.ts:15 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e20c8e1482a9f51a — Environment-variable access.
repo/apps/cli/src/settings/index.ts:27 
  const envServerUrl = normalizeUrl(process.env.LOBEHUB_SERVER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #368327f171eda6c1 — Environment-variable access.
repo/apps/cli/src/settings/index.ts:34 
  const envUrl = normalizeUrl(process.env.AGENT_GATEWAY_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bed4f78bafa1227 — Filesystem access.
repo/apps/cli/src/settings/index.ts:58 
  fs.writeFileSync(SETTINGS_FILE, JSON.stringify(normalized, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd3c7d271ba37d8e — Filesystem access.
repo/apps/cli/src/settings/index.ts:70 
    const existing = fs.readFileSync(CONNECTION_ID_FILE, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #016eeaf92464cf93 — Filesystem access.
repo/apps/cli/src/settings/index.ts:79 
    fs.writeFileSync(CONNECTION_ID_FILE, id, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1af59c153f86929 — Filesystem access.
repo/apps/cli/src/settings/index.ts:90 
    const data = fs.readFileSync(SETTINGS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da4cd817531d2cf9 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:40 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #126c89292a9ce65c — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:54 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6b2262e5977ef91 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:59 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2129fbac46cbc184 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:72 
    await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2e46c1965556751 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:80 
    await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe13fd06eb0b3fb5 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:81 
    await writeFile(path.join(tmpDir, 'b.js'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bedac5aced23cc2 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:90 
    await writeFile(path.join(tmpDir, 'search.txt'), 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51c5205495611d5e — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:99 
    await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c41124239c11819 — Filesystem access.
repo/apps/cli/src/tools/getAgentProfile.ts:32 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfff12c70140e824 — Filesystem access.
repo/apps/cli/src/tools/getAgentProfile.ts:126 
    const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21a3baa18f8e325e — Environment-variable access.
repo/apps/cli/src/tools/heteroTask.ts:16 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3daed0a3d464ff2 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:21 
    const data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5bbfdff7bc46e71 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:34 
    data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<string, string>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d862d79fc71dfb2 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:40 
  fs.writeFileSync(HERMES_SESSIONS_FILE, JSON.stringify(data), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0f4e9416214bf1d — Environment-variable access.
repo/apps/cli/src/tools/heteroTask.ts:171 
    const openclawAgent = process.env.OPENCLAW_AGENT_ID ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc5e612834ddef7d — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:35 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fc6d85a95bdef33 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:56 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72ef5dd7f3ca2953 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:61 
    await writeFile(filePath, 'legacy hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a22a6bf907363731 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:114 
    await writeFile(filePath, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f9cb09bd5240bf7 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:127 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('new content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9190cca7430b312 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:139 
    await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1f2166a916e1e59 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:157 
    await writeFile(path.join(tmpDir, 'grep.txt'), `${pattern} here`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b39a07edda543f25 — Environment-variable access.
repo/apps/cli/src/tools/isolatedWorker.ts:8 
  ISOLATED_TOOL_APIS.has(apiName) && process.env[TOOL_WORKER_ENV] !== '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7f813585a0564d7 — Filesystem access.
repo/apps/cli/src/tools/localSystemRuntime.ts:141 
      return runtime.readFile({
        endLine: p.loc?.[1],
        path: p.path,
        startLine: p.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ce37b6e0466ffaf — Filesystem access.
repo/apps/cli/src/tools/localSystemRuntime.ts:149 
      return runtime.writeFile(args as WriteFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7154c91ba3aabe3 — Environment-variable access.
repo/apps/cli/src/utils/completion.ts:120 
  const fallbackShell = process.env.SHELL?.split('/').pop() || 'zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79304f19d9a9d5b9 — Filesystem access.
repo/apps/cli/src/utils/uploadLocalFile.ts:143 
  const fileBuffer = fs.readFileSync(resolved);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11d514e7940fe7d8 — Environment-variable access.
repo/apps/cli/tsdown.config.ts:12 
  minify: !!process.env.MINIFY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a6befb7e1555e0a — Filesystem access.
repo/apps/desktop/electron-builder.mjs:24 
const packageJSON = JSON.parse(await fs.readFile(path.join(__dirname, 'package.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64599c0e8913c165 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:26 
const channel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29fd44cb8f8fc0a6 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:28 
const hasAppleCertificate = Boolean(process.env.CSC_LINK);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b01ebb06f05d61d — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:31 
const updateServerUrl = process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9bed70a498a4b40 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:82 
  process.env.CSC_IDENTITY_AUTO_DISCOVERY = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1605225f83b678e5 — Filesystem access.
repo/apps/desktop/electron-builder.mjs:132 
      await fs.readFile(path.resolve(__dirname, '../cli/package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fdf72fc32597c02 — Filesystem access.
repo/apps/desktop/electron-builder.mjs:134 
    await fs.writeFile(
      path.resolve(__dirname, 'resources/cli-package.json'),
      JSON.stringify({ name: cliPkg.name, type: 'module', version: cliPkg.version }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f18c098c1d26c72 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:326 
    releaseNotes: process.env.RELEASE_NOTES || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ecf52f6e50569c8 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:24 
const DEV_VITE_PORT = Number(process.env.LOBE_DESKTOP_VITE_PORT) || 5173;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #269e4055b0d391eb — Filesystem access.
repo/apps/desktop/electron.vite.config.ts:183 
      return injectDynamicBusinessFeatureFlag(readFileSync(sourcePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6d4f6932c88fbf7 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:200 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36631a4bab68fa07 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:203 
const isCloudDesktopBuild = process.env.CLOUD_DESKTOP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dac777b5823a4466 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:204 
const mode = process.env.NODE_ENV === 'production' ? 'production' : 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8110edbbb8d10f33 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:207 
const updateChannel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a523d587ec5ea934 — Filesystem access.
repo/apps/desktop/electron.vite.config.ts:209 
  readFileSync(path.resolve(__dirname, 'package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e90bd59cd49a5fc5 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:218 
  process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS ?? (isCloudDesktopBuild ? 'stripe.com' : '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08a4388702fb7d56 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:291 
      'process.env.UPDATE_CHANNEL': JSON.stringify(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #241dd9b781c663da — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:292 
      'process.env.UPDATE_SERVER_URL': JSON.stringify(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee0a1451d7c01890 — Filesystem access.
repo/apps/desktop/module-deps.config.mjs:32 
    const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #874767b088995ff1 — Environment-variable access.
repo/apps/desktop/native-deps.config.mjs:27 
  return process.env.npm_config_platform || os.platform();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #867aae1b65e0f659 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:58 
  const configuredArch = process.env.npm_config_arch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82b1220c6515284d — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:76 
    const installedVersion = readFileSync(
      path.join(electronDir, 'dist', 'version'),
      'utf8',
    ).replace(/^v/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f18135b3e67a3dfb — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:80 
    const installedPath = readFileSync(path.join(electronDir, 'path.txt'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71cef51cf5c16a5a — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:135 
  const platform = process.env.npm_config_platform || process.platform;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fcc8a777ca6ff0d — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:153 
    cacheRoot: process.env.electron_config_cache,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e74c2b1b24a9bb6 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:155 
      process.env.electron_use_remote_checksums ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cb86dc6d909bd32 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:156 
      process.env.npm_config_electron_use_remote_checksums

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f53af151ebb10a2 — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:168 
  writeFileSync(path.join(electronDir, 'path.txt'), platformPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #859b29740c48766f — Filesystem access.
repo/apps/desktop/scripts/i18nWorkflow/utils.ts:9 
  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65bee81fc3299cb5 — Filesystem access.
repo/apps/desktop/scripts/i18nWorkflow/utils.ts:15 
  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c864a1a03be8d17 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:357 
        readLocalFile: (p) => local.readFile(p),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00e55ad84eaac5b4 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:428 
        return runtime.readFile({
          endLine: p.loc?.[1],
          path: p.path,
          startLine: p.loc?.[0],
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bb41c5480bf11d5 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:458 
        return runtime.writeFile(args as WriteLocalFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f1b896264a2e6c4 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:702 
      const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #897dd72218fff963 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:772 
      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d6030d32b8f653b — Environment-variable access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:818 
      const openclawAgent = process.env['OPENCLAW_AGENT_ID'] ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bed6cfa7e05e310c — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:549 
      String(process.env.LOBE_CLAUDE_CODE_SDK ?? '').toLowerCase(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d76ce8e5e0246d18 — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:567 
    if (process.env.NODE_ENV === 'test') return false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9144a755f261d392 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:668 
      await writeFile(path.join(rootDir, '.last-live-trace'), `${dir}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cfefb4330a4eb3f — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:669 
      await writeFile(path.join(dir, 'stdout.jsonl'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17c7ed367ced42d8 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:670 
      await writeFile(path.join(dir, 'stderr.log'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4a4058597ba31b9 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:672 
        await writeFile(path.join(dir, 'stdin.txt'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e518a6e01089c17c — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:674 
      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify(
          {
            agentSessionId: session.agentSessionId,
            agentType: session.agentType,
            args: cliArgs,
            attachments: imageList.map((image) => this.getAttachmentTraceSummary(image)),
            command: session.command,
            createdAt: createdAt.toISOString(),
            cwd,
            envKeys: session.env ? Object.keys(session.env).sort() : [],
            model: session.model,
            modelSource: session.modelSource,
            resumeSessionId: session.resumeSessionId,
            sessionId: session.sessionId,
            stdinBytes: stdinPayload === undefined ? 0 : Buffer.byteLength(stdinPayload),
            stdinFile: stdinPayload === undefined ? undefined : 'stdin.txt',
            stderrFile: 'stderr.log',
            stdoutFile: 'stdout.jsonl',
            verifiedModel: session.verifiedModel,
            verifiedModelContextWindow: session.verifiedModelContextWindow,
            verifiedModelProvider: session.verifiedModelProvider,
            verifiedModelSessionId: session.verifiedModelSessionId,
            verifiedModelSourceFile: session.verifiedModelSourceFile,
          },
          null,
          2,
        )}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bffcb1c53c7b286 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:745 
    return this.queueCliTraceWrite(trace, () => writeFile(filePath, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33b3d49c0a06ac3a — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:823 
    await writeFile(tmpConfigPath, JSON.stringify(config), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b49d713f82dcc4f — Filesystem access.
repo/apps/desktop/src/main/controllers/LocalFileCtr.ts:329 
    const data = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #846cc9b00ad703b9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:191 
    originalClaudeSdkLabEnv = process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8fc80c8b7368a8c2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:197 
    delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #557cc75d9fe19b8b — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:201 
    if (originalClaudeSdkLabEnv === undefined) delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #351681bfe23c80f9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:202 
    else process.env.LOBE_CLAUDE_CODE_SDK = originalClaudeSdkLabEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8fc9d9c399376f09 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:264 
      await writeFile(outOfRootDataPath, 'SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #99bec3d058ca6052 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:265 
      await writeFile(
        outOfRootMetaPath,
        JSON.stringify({ id: traversalId, mimeType: 'text/plain' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #80744f1e04dcf1dd — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:284 
      await expect(readFile(outOfRootDataPath, 'utf8')).resolves.toBe('SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8d7a36a95e35d451 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:417 
      process.env.LOBE_CLAUDE_CODE_SDK = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #457fd25c222e3f1e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:521 
        ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #626259f1e1c537a1 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:522 
        ANTHROPIC_AUTH_TOKEN: process.env.ANTHROPIC_AUTH_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8057513480fb19e0 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:523 
        ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59561b88d5e0e618 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:525 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #087096cf9ac0af7d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:526 
      process.env.ANTHROPIC_AUTH_TOKEN = 'host-token-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #80596b4a1ee03dc2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:527 
      process.env.ANTHROPIC_BASE_URL = 'https://host.example/should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e92073fc639c15c9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:536 
        expect(options.env.PATH).toBe(process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8bdcea9bb32d87d8 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:539 
          if (value === undefined) delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d80127fbcdfa09e9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:540 
          else process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41b65502ee4b161f — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:546 
      const originalKey = process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e910ab78718377d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:547 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ba2920022a22ffd4 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:557 
        if (originalKey === undefined) delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b657d6a059362c4a — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:558 
        else process.env.ANTHROPIC_API_KEY = originalKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e32c15d8ca2d33b1 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:818 
        Promise.all(imagePaths.map((filePath) => readFile(filePath, 'utf8'))),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #273d802918df83d8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:833 
      await expect(readFile(imagePaths[0], 'utf8')).resolves.toBe('PNG_TEST');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ecfb4e0b61806be9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:853 
      await expect(readFile(imagePaths[0])).resolves.toEqual(pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a96ff90db0f25777 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:925 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b459ca0d8ddd169e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:926 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d910259e7ff83387 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:945 
        await expect(readFile(path.join(traceRoot, '.last-live-trace'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef838a2a35390161 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:948 
        await expect(readFile(path.join(traceDir, 'stdin.txt'), 'utf8')).resolves.toBe(prompt);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6fea2a95096284b9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:949 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ff404ece6aa60094 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:950 
        await expect(readFile(path.join(traceDir, 'stderr.log'), 'utf8')).resolves.toBe('');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b08aabdc12c18fab — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:951 
        await expect(readFile(path.join(traceDir, 'exit.json'), 'utf8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #829ec14926d2207f — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:955 
        const meta = JSON.parse(await readFile(path.join(traceDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4033959222a523f — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:968 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #48360a6d74b36f9c — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:973 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #67456fd64182de37 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:975 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #799e26554a2c234e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:994 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4592680777808d2f — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:999 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b6226f1c51dbca73 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1002 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #62763a77fc5af9e7 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1022 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7101a7017b7210fd — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1027 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e72a469654933eb6 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1033 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #caf91c19e4145eac — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1034 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c78dca99a33c4c9b — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1046 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #adcff2e32027008c — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1052 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #26066cdf29add31a — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1053 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #580b2ec79641202d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1062 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8a4c8ee5763b2084 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1433 
      await writeFile(tmpConfigPath, '{"mcpServers":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2ed976d8730848f2 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:60 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fbb53692734c86d5 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:62 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6a9d1aa871738677 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:80 
      await writeFile(filePath, 'line1\nline2\nline3\nline4\nline5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b3afb2bdccd2e8a8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:82 
      const result = await localFileCtr.readFile({ loc: [1, 3], path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5cf2add71892f4bb — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:101 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6ba8e7fc7260ffe0 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:103 
      const result = await localFileCtr.readFile({ fullContent: true, path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0141d869d7ae3ca9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:120 
      const result = await localFileCtr.readFile({
        path: path.join(tmpDir, 'does-not-exist.txt'),
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #456f6195452fab07 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:143 
      await writeFile(file1, 'content a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e288af5a3776329e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:144 
      await writeFile(file2, 'content b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #038cc84fe49a4ca6 — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:102 
    process.env.PATH = `${process.env.PATH}${pathSep}${getCliWrapperDir()}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d82e14cc129c1745 — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:475 
    const ipcId = process.env.LOBE_IPC_ID || name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17280a47f4f18b74 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:450 
    const current = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e7a94e64b3c7b08 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:453 
    process.env.PATH = current ? `${current}${sep}${dir}` : dir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36f474048e84aa29 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:552 
    await writeFile(tmpMarker, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9968a84c50ba0193 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:554 
    await writeFile(markerPath, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc1e49f7c8531049 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:630 
      const raw = await readFile(this.installedMarkerPath(name), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27beb26db5d22ee9 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:138 
          const buffer = await readFile(realResolvedPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78c1f96e59604234 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:289 
    const buffer = await readFile(realFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2a622fdb0a80fc3 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/RendererProtocolManager.ts:195 
    const buffer = await readFile(targetPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ef922b08ba57373 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/RendererUrlManager.ts:98 
    const electronRendererUrl = process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #30fc120f9a948fba — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:52 
  await writeFile(path.join(dir, fileName), fileContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #00be2a3bce12af3f — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:53 
  await writeFile(path.join(cacheRoot, name, '.installed'), version, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6672f3ae2dd61fa6 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:65 
  originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #75406e1c1d655584 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:69 
  process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5df5b2d5971558f — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:176 
      await writeFile(path.join(cacheRoot, 'foo', '.installed'), '1.0.0', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0467d2fac6eeb57b — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:201 
      const before = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd0f5705f3009c3b — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:206 
      expect((process.env.PATH ?? '').split(sep)).toContain(installDir);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28dedb9d2bd39496 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:210 
      const segments = (process.env.PATH ?? '').split(sep);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eadc1948ae1734a0 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:212 
      expect(process.env.PATH).toContain(before);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #028ebab5d0411061 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:54 
    delete process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c94bc81c8502bd4 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:95 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #babbeddb843c3adb — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:121 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7a8a6c8bacc1b2c9 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:142 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cfed2ea761a03e0 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:55 
  DESKTOP_BACKEND_PROXY_RETHROW_ERRORS: process.env.DESKTOP_BACKEND_PROXY_RETHROW_ERRORS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #546da8aee72151ae — Environment-variable access.
repo/apps/desktop/src/main/env.ts:56 
  DESKTOP_EXTERNAL_NAVIGATION_HOSTS: process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9dd51ba7f1a7a4f — Environment-variable access.
repo/apps/desktop/src/main/env.ts:57 
  UPDATE_CHANNEL: process.env.UPDATE_CHANNEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae1bc95bba13cb4a — Environment-variable access.
repo/apps/desktop/src/main/env.ts:58 
  UPDATE_SERVER_URL: process.env.UPDATE_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #172dcf1a787cc9ce — Environment-variable access.
repo/apps/desktop/src/main/env.ts:107 
      UPDATE_CHANNEL: z.string().optional().default(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0a82bf0855351c6 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:111 
      UPDATE_SERVER_URL: z.string().optional().default(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3bd3f7c8ab7fb49 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:189 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4548c9dd0668bd1f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:190 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1ee7c192ca78808f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:191 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e7590a4ca60cde7e — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:192 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c5b000e1b08c21c8 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:211 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41d5456a8b122f0a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:212 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ca5c52d266ee3230 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:213 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a0089f8b98b875e — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:218 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1bc33235d13ab48c — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:219 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5cf431d34b5cb3c3 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:220 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d4d69b247f28ef76 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:221 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e41b802840cb77b7 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:236 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6bb7690dd5f3e8ee — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:237 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7035cc9ab57d5f17 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:238 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0f3b4aca241240ba — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:243 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6fa48e83f23eec98 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:244 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5fb995292fbb091b — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:247 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2eb64ac2c35d53a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:248 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2e080d922e4cfba9 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:267 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10da8834dce2c3ac — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:268 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b511983029d7c58 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:269 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aa93f95d529045ce — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:274 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c38a4dea73ff2f68 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:275 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #888443cd3542effe — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:276 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c68afec8ed976d01 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:277 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #83e832c385c2e73f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:295 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f61ecad4a0fff34b — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:296 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1350423404e9f1c — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:297 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e57dfe1113ca2f72 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:313 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4ac04d21c1c99950 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:314 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9282400f496169f7 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:315 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f75cd5d57d9644c4 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:316 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #504b6acccae61e31 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:354 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #831927a37fd13e26 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:355 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45f64c4f5c9e5516 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:16 
  if (process.platform === 'linux' && process.env.APPIMAGE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84e2029ed32ce2f3 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:17 
    return process.env.APPIMAGE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a6a6081b5b0364a — Filesystem access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:95 
  await writeFile(tmpPath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63db6bd3ce79e306 — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:55 
): string | undefined => (options.env && key in options.env ? options.env[key] : process.env[key]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91f1f3fadcb07a4c — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:133 
    return parseCredentialsJson(await readFile(path.join(configDir, '.credentials.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a00249cdd6ebb0dd — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:150 
  asNonEmpty(process.env.CLAUDE_CONFIG_DIR);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #622b8a5c91a0a095 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:310 
    const response = await fetch(OAUTH_USAGE_URL, {
      headers: {
        'Authorization': `Bearer ${lookup.credentials.accessToken}`,
        'Content-Type': 'application/json',
        'User-Agent': OAUTH_USER_AGENT,
        'anthropic-beta': OAUTH_BETA_HEADER,
      },
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d76556ede0c341f8 — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:98 
  codexHomePath ?? env?.CODEX_HOME ?? process.env.CODEX_HOME ?? path.join(homedir(), '.codex');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ed0ca90cd0df413 — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:195 
    auth = JSON.parse(await readFile(authPath, 'utf8')) as CodexAuthFile;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ca218f4cf915b365 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:230 
    const response = await fetch(CODEX_RATE_LIMIT_RESET_CREDITS_URL, {
      ...auth,
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a7baecd577617ac5 — Filesystem access.
repo/apps/desktop/src/main/modules/openInApp/iconExtractor.ts:145 
    const buf = await readFile(outPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e578d75a66a42c4 — Environment-variable access.
repo/apps/desktop/src/main/pre-app-init.ts:20 
  const userDataOverride = process.env.LOBE_DESKTOP_USER_DATA_DIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8421bf43bc065d39 — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:100 
      await writeFile(savedPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e159268ccf0893 — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:112 
      await writeFile(metaFilePath, JSON.stringify(metadata, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #785eccfe590c7423 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:39 
        delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bb27aa8274beaba — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:100 
    process.env.OPENAI_MODEL_LIST = '+gpt-4,+gpt-3.5-turbo';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9577d01996e4af5e — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:118 
    process.env.CUSTOM_OPENAI_MODELS = '+custom-model';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4643c727c027e810 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:134 
    process.env.OPENAI_MODEL_LIST = '+gpt-4->deployment1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec3df07f99055df2 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.ts:47 
        process.env[providerConfig.modelListKey ?? `${providerUpperCase}_MODEL_LIST`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a054147c594569a6 — Environment-variable access.
repo/apps/server/src/globalConfig/index.ts:64 
      fetchOnClient: isDesktop ? false : !process.env.OLLAMA_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86b65097041417e4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:7 
const originalWorkflowParallelism = process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #392c7daa68a8008b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:12 
      delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f68808610f8f248b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:16 
    process.env[WORKFLOW_PARALLELISM_ENV] = originalWorkflowParallelism;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b0c028f7ba98c7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:20 
    delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6907078a873f4254 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:26 
    process.env[WORKFLOW_PARALLELISM_ENV] = '17';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13f677147e8d5e6d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:32 
    process.env[WORKFLOW_PARALLELISM_ENV] = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00d9db0ceb24f5cc — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:36 
    process.env[WORKFLOW_PARALLELISM_ENV] = 'abc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42900a9336bd6f75 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:107 
  const apiKey = process.env.MEMORY_USER_MEMORY_GATEKEEPER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dff79605f3d76982 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:108 
  const baseURL = process.env.MEMORY_USER_MEMORY_GATEKEEPER_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ed69549efbab57a — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:109 
  const model = process.env.MEMORY_USER_MEMORY_GATEKEEPER_MODEL || DEFAULT_MINI_MODEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40734923c3e0217e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:110 
  const provider = process.env.MEMORY_USER_MEMORY_GATEKEEPER_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba2393d94d2c86c9 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:111 
  const language = process.env.MEMORY_USER_MEMORY_GATEKEEPER_LANGUAGE || 'English';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50bc14d2fe0e4720 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:123 
  const model = process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_MODEL || fallback.model;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56343756f42d9c7d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:125 
    process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b3be8e8d0d394f0 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:130 
    apiKey: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_API_KEY ?? fallback.apiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5f5b4b20857acb2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:131 
    baseURL: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_BASE_URL ?? fallback.baseURL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0e4cc84d671cec4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:132 
    language: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_LANGUAGE ?? fallback.language,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0301605fefbf91eb — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:139 
  const apiKey = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #261ca509f583daaa — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:140 
  const baseURL = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b37577a02e55c3d3 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:141 
  const model = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fb60db9731ae2c5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:142 
  const provider = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc806eb3e211640e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:145 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_CONTEXT_LIMIT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5d3207858e90887 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:151 
      const override = (process.env as Record<string, string | undefined>)[envKey];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b740f62f42265872 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:176 
  const model = process.env.MEMORY_USER_MEMORY_EMBEDDING_MODEL || fallbackModel || defaultModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dc006ef316baff8 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:178 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e9329b237d0c7cd — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:184 
    apiKey: process.env.MEMORY_USER_MEMORY_EMBEDDING_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13e0d1c3773e6f46 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:185 
    baseURL: process.env.MEMORY_USER_MEMORY_EMBEDDING_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b9f6ff496136d4e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:188 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_EMBEDDING_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6acede4f5096ab8f — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:199 
  const model = process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7afee2f73c7c240 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:201 
    process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffcfec36d634e147 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:206 
    apiKey: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba29a25bf766b65f — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:207 
    baseURL: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0111a07c329aad81 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:209 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1b284047ff36105 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:216 
  const accessKeyId = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ACCESS_KEY_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46a6bdf7529b469c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:217 
  const secretAccessKey = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6827e280cc433f06 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:218 
  const bucketName = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_BUCKET_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #975bcdcaf0d66cf5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:219 
  const region = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #483deece816357d2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:220 
  const endpoint = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99e07beeda2ad58b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:221 
  const forcePathStyle = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_FORCE_PATH_STYLE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f27ff9e70568eb68 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:222 
  const pathPrefix = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_PATH_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f971afbe3700adde — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:268 
    enableBenchmarkLoCoMo: process.env.MEMORY_USER_MEMORY_FEATURE_FLAG_BENCHMARK_LOCOMO === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60fa0cc349632f91 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:270 
  const concurrencyRaw = process.env.MEMORY_USER_MEMORY_CONCURRENCY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #100f5770811a0cc2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:278 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_PROCESS_USER_TOPICS_PARALLELISM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24eb260c03589949 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:282 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_MAX_TOPICS_PER_USER_PER_RUN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c073c97a2b620e3c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:286 
  const whitelistUsers = process.env.MEMORY_USER_MEMORY_WHITELIST_USERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13fe0c4b1338c1e7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:290 
  const webhookHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90f40d00497b8bf5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:300 
  const upstashWorkflowExtraHeaders = process.env.MEMORY_USER_MEMORY_WORKFLOW_EXTRA_HEADERS?.split(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c643313a0c31e02 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:313 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd33f5bbe1f735f9 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:316 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #745510c2d4309bc5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:319 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6aecf2e6fcb3df71 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:322 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d3d8dff4cde8a8b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:325 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb437999d5c9d853 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:328 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faed45a88ac9ffb1 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:348 
      baseUrl: process.env.MEMORY_USER_MEMORY_WEBHOOK_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd8922813470b673 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:12 
    originalSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b29bd0863f2a1b7 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:13 
    process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b2a6c8fb177b061 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:19 
    process.env.KEY_VAULTS_SECRET = originalSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67f8a21de2f09c84 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:41 
    process.env.KEY_VAULTS_SECRET = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb988e6f75130c41 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:52 
    process.env.KEY_VAULTS_SECRET = Buffer.from('short').toString('base64');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7e41da51d644a57 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:86 
      process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8419333f5a6bba9 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:36 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1743ae2a1d906710 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:44 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb20e687e3ff8a08 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:61 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bdfe3e65928dfea — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:72 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51f3839ff54ffd7d — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:95 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c7c98a7a9cc2cdf — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:107 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d09c4806f0762695 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:120 
      process.env.API_KEY_SELECT_MODE = nanoid();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4fea1857c22ce47 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:504 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a76b88ed08e4b41 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:514 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87adddf02af77756 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:188 
      const baseURL = payload?.baseURL || process.env[`${upperProvider}_PROXY_URL`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #009c3d5bd20d26e6 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:194 
      const baseURL = payload?.baseURL || process.env.OLLAMA_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3ceecc0de77477b — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:335 
  const rawCredentials = payload.apiKey || process.env.VERTEXAI_CREDENTIALS || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90ba298d00e7d762 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:340 
  const projectFromEnv = process.env.VERTEXAI_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6001e56f6a85f8dc — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:346 
    process.env.VERTEXAI_LOCATION ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ffa35cd0bcd410d9 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:173 
      const originalEnv = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2af5839c1f8c261b — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:174 
      process.env.VERCEL_AUTOMATION_BYPASS_SECRET = 'test-bypass-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9ed28630a620bac — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:186 
        process.env.VERCEL_AUTOMATION_BYPASS_SECRET = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c6b0d37054a88a4 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:188 
        delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1174e1a20483508 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:193 
      delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d613df1d8e70714 — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:22 
  if (process.env.VERCEL_AUTOMATION_BYPASS_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1ae9d62b76b3faf — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:23 
    headers['x-vercel-protection-bypass'] = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #95b031090eeb3ed9 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cba23a9707f2606e — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgents.integration.test.ts:23 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d7ca271e6edf8dc4 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execGroupAgent.integration.test.ts:24 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #89e1bd64087a52f5 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/multiRoundTools.integration.test.ts:25 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #162e9ceb95cd8337 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverCallAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #95cdb7c4463d6d2a — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverSubAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223b25349e2279aa — Environment-variable access.
repo/apps/server/src/routers/lambda/composio.ts:146 
      const callbackUrl = `${process.env.APP_URL || process.env.NEXTAUTH_URL || ''}/api/composio/oauth/callback`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efb3af050c4b1683 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:28 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e970de7e980bdbdc — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:37 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d49090621770598 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:41 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1907a310d6187e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:50 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b394e7717e6d932 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:54 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #706337547079374d — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:65 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7435be9f7d166622 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:69 
          process.env.OPENAI_MODEL_LIST = '-gpt-4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d0db12e21e48d22 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:77 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ceb20ee02d19bf1 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:81 
          process.env.OPENAI_MODEL_LIST = '+gpt-4-1106-preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f46f4b0013ff759 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:91 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81c84d0bf42e8fc4 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:95 
          process.env.OPENAI_MODEL_LIST = 'model1,model2,model3，model4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b59266c27adf0a7 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:130 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84de1c3705d1326e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:136 
          process.env.OPENROUTER_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0edfa5df359fbabb — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:146 
          process.env.OPENROUTER_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69294d5de99bf6f8 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:151 
        const originalApiKey = process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d63dcb16e4017e0e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:152 
        delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d4865ac851c9f0d — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:159 
          delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #676576467223159a — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:161 
          process.env.DEEPSEEK_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcaff1d4fd4d4e35 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:169 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25efef01be742279 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:181 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2601a1a46dc7789 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:185 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ca35244e42b2116 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:197 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c048f5999c027a22 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/routers/lambda/exporter.ts:37 
  const response = await fetch(REGULAR_FONT_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e16458ab9285c787 — Environment-variable access.
repo/apps/server/src/routers/lambda/image/index.ts:143 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #066a48da34235b5e — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agent.ts:15 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #291528ca66ab7af7 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f173701ddff6c05 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:703 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94a283e6f293e38e — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:712 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d3d3611505fc76e — Environment-variable access.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed3486782970b7e8 — Environment-variable access.
repo/apps/server/src/routers/lambda/userMemories.ts:931 
      if (process.env.NODE_ENV !== 'production' && process.env.DEV_DISABLE_AUTO_MEMORY === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a7f9ec6381ad86e — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:139 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dac1557806ed88ab — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:255 
        const callbackBaseUrl = process.env.WEBHOOK_PROXY_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5710a9500b9e8455 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:164 
    process.env.AGENT_RUNTIME_BASE_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b94e40750db81a99 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:196 
    delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78efebb90d481b6b — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:202 
      delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff8d315357a9fc17 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:208 
      process.env.AGENT_RUNTIME_BASE_URL = 'http://custom:3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1388b7e4bd3ce9a — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:88 
if (process.env.VERCEL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79a1d88630ba75ac — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:284 
    const baseUrl = process.env.AGENT_RUNTIME_BASE_URL || appEnv.APP_URL || 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7642eb6c72827a2 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:31 
    : urlJoin(process.env.INTERNAL_APP_URL || process.env.APP_URL || '', url);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72a2dc79d68c3868 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:35 
      const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d670e689a708e7 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:48 
          ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93c0db54c8f5df2b — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:49 
            'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #83317d4127febf18 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:273 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5535b8428b178b0 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:278 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3be08b9e6f0532b — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:282 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c6f8c5c3790a186 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:283 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88825e152bc97642 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:305 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42afc26e3f087f52 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:8 
  const explicitValue = process.env.ENABLE_AGENT_S3_TRACING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75a3dd8a159cc2ab — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:12 
  return process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaeab221c52985b6 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:49 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #734440e0c97042fd — Filesystem access.
repo/apps/server/src/services/agentSignal/__tests__/promptBoundaries.test.ts:9 
const read = (filePath: string) => readFileSync(path.join(root, filePath), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f83e0078dd4de7de — Environment-variable access.
repo/apps/server/src/services/aiAgent/__tests__/execAgent.memory.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #156648a323994a70 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/bot/platforms/discord/client.ts:514 
      const res = await fetch('https://discord.com/api/v10/users/@me', {
        headers: { Authorization: `Bot ${credentials.botToken}` },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f5f8b239e5de5142 — Environment-variable access.
repo/apps/server/src/services/changelog/index.test.ts:261 
        process.env.DOC_S3_PUBLIC_DOMAIN = 'https://cdn.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8d93d45f4f4255d — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:15 
const docCdnPrefix = process.env.DOC_S3_PUBLIC_DOMAIN || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #270dcf87efbd0867 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:34 
    branch: process.env.DOCS_BRANCH || 'main',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b476e8680846bc83 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:41 
    urlTemplate: process.env.CHANGELOG_URL_TEMPLATE || URL_TEMPLATE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #845a24787fad358b — Environment-variable access.
repo/apps/server/src/services/comfyui/core/comfyUIClientService.ts:70 
        options.baseURL || process.env.COMFYUI_DEFAULT_URL || COMFYUI_DEFAULTS.BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44f4f440452a226e — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:120 
  const token = options?.token || process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b3d4d5793c06992 — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:175 
    options?.baseUrl || process.env.DESKTOP_UPDATE_SERVER_URL || process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef7743d331d912e0 — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:104 
      process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0d5d12c07bad69a — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:113 
      if (process.env.VERCEL_PROJECT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88e5671a8a13f656 — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:114 
        return process.env.VERCEL_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dca80017bee534d — Filesystem access.
repo/apps/server/src/services/doc/index.tsx:18 
    const text: string = readFileSync(localPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0ea1f8269fecbe0 — Environment-variable access.
repo/apps/server/src/services/gateway/GatewayManager.ts:253 
      appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0120ca0ab77e625 — Environment-variable access.
repo/apps/server/src/services/gateway/index.ts:105 
const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc0b59ff89854b7e — Filesystem access.
repo/apps/server/src/services/generation/video.ts:74 
        fs.readFile(String(tempVideoPath)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c4fa96828840699 — Filesystem access.
repo/apps/server/src/services/generation/video.ts:99 
      const coverBuffer = await fs.readFile(String(tempCoverPath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f42bce319b094e10 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:500 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b448751fcc1e66d8 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:501 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6606c47fbb6356a1 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:537 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #70bbf0159090282e — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:538 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a558528500f5b5a0 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:543 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d0dcb62c251443e4 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:544 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c950f2badae24d2 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:545 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb66b9ee725f070b — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:546 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8af86bf39db5c7dd — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:594 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5169973dfb2b7f7c — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:595 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b6800295af88cec — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:645 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #df10e241418eb54f — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:646 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e6459f4f301fbaf — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:652 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aa20a54133273bdd — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:653 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a61f02f1f8b9e0e — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:654 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8c9a331895b15fab — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:655 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #341c8950e10ac7d0 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/sandboxRunner.ts:193 
  const serverUrl = process.env.LOBEHUB_HETERO_SERVER_URL ?? appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8955662c740ca31a — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:261 
  if (process.env.ENABLE_LLM_GENERATION_TRACING_S3 === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #186ee44e43ac7765 — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:272 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1159e7c6bff3082 — Environment-variable access.
repo/apps/server/src/services/market/index.ts:13 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01aba8b55de46705 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2748 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43f5e6ab52f27d40 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2753 
  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e035836b83f233dc — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2754 
    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fc3e21d5ec8a4a4f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/oauth/slackOAuth.ts:29 
  const url = new URL(SLACK_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #03c0347964e1fc29 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:81 
  const url = new URL(DISCORD_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0d6176262e3fe422 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:108 
  const tokenResponse = await fetch(DISCORD_TOKEN_URL, {
    body,
    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
    method: 'POST',
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0139380f68129a07 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:132 
    const userResponse = await fetch(`${DISCORD_API_BASE}/users/@me`, {
      headers: { Authorization: `Bearer ${data.access_token}` },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d734d9a43a3314b9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/slack/oauth.ts:103 
  const url = new URL('https://slack.com/app/open');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only #460c7730a07e85b8 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:128 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb984c975e8eb7bd — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:139 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8c25ef906b3cb765 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:148 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #18f0ebc5a0f97447 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:153 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3c005c34f40d4c86 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:161 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5752971570e5880 — Environment-variable access.
repo/apps/server/src/services/queue/impls/index.ts:26 
    const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97c8f2c93c10f90d — Environment-variable access.
repo/apps/server/src/services/search/impls/anspire/index.ts:21 
    return process.env.ANSPIRE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #931bfb8db55be380 — Environment-variable access.
repo/apps/server/src/services/search/impls/bocha/index.ts:28 
    return process.env.BOCHA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8788cf5eaf47cfaf — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:30 
    process.env.BRAVE_API_KEY = 'test-brave-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a1d5b5884bffbf9 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:35 
    delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bffe3fcd01f93a9c — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:145 
      delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #868f40693eb98bdc — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.ts:28 
    return process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fca8dad374ab2f46 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:27 
    process.env.EXA_API_KEY = 'test-exa-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23b8f35614022f0e — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:32 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d82f6a9fc3d39780 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:153 
      delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d24dc12e3418fe4 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.ts:21 
    return process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98220caac40cf368 — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:28 
    return process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5ff9ed219f109eb — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:33 
    return process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1b15cbc6635f727 — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:28 
    return process.env.GOOGLE_PSE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b3a72427444b2ff — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:32 
    return process.env.GOOGLE_PSE_ENGINE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3722fee9c0d87dcc — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:21 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #614a9a86fd3e84c4 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:22 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e913a3299abdd83a — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:23 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ffe4f9301e35b5b — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73d632b37e281a4a — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8095ec4838a6637f — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db1a0472074453cf — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:34 
    process.env.JINA_READER_API_KEY = 'test-jina-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf22fc451134eccf — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:79 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #435954d0f99403cd — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.ts:22 
    return process.env.JINA_READER_API_KEY || process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c9fbdc23bf716d0 — Environment-variable access.
repo/apps/server/src/services/search/impls/kagi/index.ts:21 
    return process.env.KAGI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd2911f053106b91 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.integration.test.ts:7 
const apiKey = process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9fe327baca5a97d — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:39 
    process.env.SEARCH1API_SEARCH_API_KEY = 'test-search1api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02ada6a91cd23851 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:40 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #247754d4b56298d6 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:45 
    delete process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6edee08f305a726a — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:46 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #621eff9d2fdd55d2 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.ts:41 
    return process.env.SEARCH1API_SEARCH_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #550aa5d2a6577c02 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:27 
    process.env.TAVILY_API_KEY = 'test-tavily-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f0911dc7f07876c — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:28 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e50acbf8d7d155d9 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:33 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7471a5a7700ac7e — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:34 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c7e50c77451afcb — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:147 
      process.env.TAVILY_SEARCH_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a888622d8ef1e48a — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:170 
      delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba284ce7ab88c8fe — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:21 
    return process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6612c3bf14e19f18 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 
      search_depth: process.env.TAVILY_SEARCH_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d59426478b192da9 — Filesystem access.
repo/apps/server/src/services/skill/importer.ts:92 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14874545e7b2aeec — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:825 
      await writeFile(testZipPath, zipped);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d46953e89c14c8e — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:851 
      await writeFile(invalidZipPath, Buffer.from([1, 2, 3, 4]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #806d78e30ac6072c — Filesystem access.
repo/apps/server/src/services/skill/parser.ts:61 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7470fec4abeb647b — Environment-variable access.
repo/apps/server/src/services/taskScheduler/impls/index.ts:24 
    const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31cdab0b55dc2cf2 — Environment-variable access.
repo/apps/server/src/services/taskTemplate/index.ts:23 
  process.env.VERCEL_PROJECT_ID || process.env.VERCEL_PROJECT_PRODUCTION_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dd6f6534588e750 — Environment-variable access.
repo/apps/server/src/services/toolExecution/serverRuntimes/agentDocuments.ts:22 
    return process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75443e110877db50 — Filesystem access.
repo/apps/server/src/utils/tempFileManager.ts:29 
      writeFileSync(filePath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbda5e265c757da4 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:25 
    process.env.VERCEL = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae10a33e2eeef69e — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:26 
    process.env.VERCEL_ENV = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46eb6681cfd3b749 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:35 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e9d5c101c5117e4 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:36 
    process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cb755c10d12e4d0 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:37 
    process.env.VERCEL_URL = 'preview-url.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4374a68b344b9a76 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:46 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a205396b4877a50b — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:47 
    process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc8f5320b2a2a304 — Environment-variable access.
repo/apps/server/src/utils/url.ts:3 
const isVercelPreview = process.env.VERCEL === '1' && process.env.VERCEL_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ce2104820f6a997 — Environment-variable access.
repo/apps/server/src/utils/url.ts:5 
const vercelPreviewUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0627be0f4c14c793 — Environment-variable access.
repo/apps/server/src/workflows/agentEvalRun/index.ts:127 
  const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7098a0a1c6a80cb3 — Environment-variable access.
repo/apps/server/src/workflows/agentSignal/run.ts:104 
  if (process.env.NODE_ENV !== 'development') return null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92bf26edc40fce7f — Environment-variable access.
repo/drizzle.config.ts:10 
let connectionString = process.env.DATABASE_URL!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce2e7d26bae745ad — Environment-variable access.
repo/e2e/cucumber.config.js:4 
const reportsEnabled = !['0', 'false'].includes(String(process.env.E2E_REPORTS).toLowerCase());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #835b80d26c23804d — Environment-variable access.
repo/e2e/cucumber.config.js:5 
const parsedParallel = Number(process.env.E2E_PARALLEL || process.env.CUCUMBER_PARALLEL || 1);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0f16d30d7e5cf3e — Environment-variable access.
repo/e2e/cucumber.config.js:7 
const canRunInParallel = Boolean(process.env.BASE_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea41d694cc9c1262 — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:36 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78691ded2f212b3f — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:37 
  const baseURL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17aea38dd194e696 — Environment-variable access.
repo/e2e/src/steps/home/sidebarAgent.steps.ts:62 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a638e5256820ee6d — Environment-variable access.
repo/e2e/src/steps/home/sidebarGroup.steps.ts:22 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0436d7350fc91d08 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:9 
process.env['E2E'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6165532f2e3af00 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:20 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c32547ecbd9880c — Environment-variable access.
repo/e2e/src/steps/hooks.ts:21 
  baseUrl = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cbf65c660380844 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:29 
  if (!process.env.BASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bcf53b9132cbf72 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:33 
      reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67ca0dd513cac040 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:138 
  if (!process.env.BASE_URL && process.env.CI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efbd3bb54514d009 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:5 
const runId = process.env.E2E_RUN_ID || process.env.GITHUB_RUN_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e303b62d7dec524b — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:6 
const workerId = process.env.CUCUMBER_WORKER_ID || process.env.E2E_WORKER_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff7353b500d2a717 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:33 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a1df0a6d3468382 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:106 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ee1beaeaa297c06 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:142 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3121eea988fab609 — Environment-variable access.
repo/e2e/src/support/webServer.ts:37 
  const envHost = process.env.HOST?.trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dbfc94793b98c2b — Filesystem access.
repo/e2e/src/support/webServer.ts:108 
    writeFileSync(LOCK_FILE, String(process.pid));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c809bdcd4ffddb5 — Environment-variable access.
repo/e2e/src/support/world.ts:27 
      headless: process.env.HEADLESS !== 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a983bd1a9dc4b76c — Environment-variable access.
repo/e2e/src/support/world.ts:66 
    const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52e9330d3f4d5afd — Environment-variable access.
repo/e2e/src/support/world.ts:67 
    const BASE_URL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bff9963bc3d22b9c — Filesystem access.
repo/e2e/src/support/world.ts:110 
    fs.writeFileSync(filepath, screenshot);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09feaf88d97de8aa — Environment-variable access.
repo/next.config.ts:3 
const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a6e62e4fdd712fb — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:10 
    apiKey: process.env.OPENAI_API_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c010bd5f625fd2bb — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:237 
  if (!process.env.OPENAI_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bc81a8c5fbcf32b0 — Filesystem access.
repo/packages/agent-runtime/src/agents/__tests__/GraphAgent.test.ts:104 
    readFileSync(path.join(TEST_DIR, 'fixtures/goal-loop.graph.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #232e1037f5a8a298 — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:57 
      out.push(JSON.parse(await readFile(path.join(dir, f), 'utf8')));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63bda779ffdaf6bd — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:195 
            snapshot = JSON.parse(await readFile(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e40959eeb7b34b3e — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:27 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcc306b69d29aa89 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:46 
      const content = await fs.readFile(path.join(this.dir, match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad333248c521e944 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:66 
        const content = await fs.readFile(path.join(this.dir, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #136dc244ccdd1dc4 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:81 
      const content = await fs.readFile(realPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7de67158853ee972 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:88 
      const content = await fs.readFile(path.join(this.dir, files[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #391f79c7247dbae7 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:122 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2551010f7457284d — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:129 
      const content = await fs.readFile(path.join(this.partialDir(), match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5483f948d9ab63f0 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:136 
      const content = await fs.readFile(this.partialPath(operationId), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #def043ccaf492b8c — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:145 
    await fs.writeFile(this.partialPath(operationId), JSON.stringify(partial), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d72af8461b9b4095 — Environment-variable access.
repo/packages/agent-tracing/src/store/remote-store.ts:57 
  if (process.env.TRACING_BASE_URL) return process.env.TRACING_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7331665d0e969e2 — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:63 
    const content = await fs.readFile(envPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fed3f88b6f75be5a — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:92 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23a7a13ee25953fe — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:148 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #494bad43a9d528f5 — Environment-variable access.
repo/packages/app-config/src/composio.ts:8 
      COMPOSIO_API_KEY: process.env.COMPOSIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b76de23c0c4fccb8 — Environment-variable access.
repo/packages/app-config/src/composio.ts:9 
      COMPOSIO_AUTH_CONFIG_IDS: process.env.COMPOSIO_AUTH_CONFIG_IDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f115e93867fdc7a7 — Environment-variable access.
repo/packages/app-config/src/db.ts:7 
      DATABASE_DRIVER: process.env.DATABASE_DRIVER || 'neon',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #904554c680fdfbc5 — Environment-variable access.
repo/packages/app-config/src/db.ts:8 
      DATABASE_STATEMENT_TIMEOUT: process.env.DATABASE_STATEMENT_TIMEOUT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc1f157f60de94b1 — Environment-variable access.
repo/packages/app-config/src/db.ts:9 
      DATABASE_TEST_URL: process.env.DATABASE_TEST_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51bd604105b8141c — Environment-variable access.
repo/packages/app-config/src/db.ts:10 
      DATABASE_URL: process.env.DATABASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91bd89f0654a5228 — Environment-variable access.
repo/packages/app-config/src/db.ts:12 
      KEY_VAULTS_SECRET: process.env.KEY_VAULTS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e36de30a7aa87e1e — Environment-variable access.
repo/packages/app-config/src/db.ts:14 
      REMOVE_GLOBAL_FILE: process.env.DISABLE_REMOVE_GLOBAL_FILE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0b5a9a273300457 — Environment-variable access.
repo/packages/app-config/src/featureFlags/index.ts:11 
    FEATURE_FLAGS: process.env.FEATURE_FLAGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ee3969cca740f9b — Environment-variable access.
repo/packages/app-config/src/featureFlags/schema.ts:5 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6ed4b5d4bd44aeb — Environment-variable access.
repo/packages/app-config/src/messenger.ts:36 
      LOBE_LINK_TOKEN_TTL_SECONDS: process.env.LOBE_LINK_TOKEN_TTL_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e4876f80a1d44ee — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:101 
    const result = await runtime.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ce313f6933311c5 — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:110 
    const result = await runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc308d2e47c3406f — Environment-variable access.
repo/packages/builtin-tool-creds/src/ExecutionRuntime/index.ts:167 
      const appUrl = (process.env.APP_URL || 'https://app.lobehub.com').replace(/\/+$/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #738826f64fe4cd03 — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:105 
      const result = await this.runtime.readFile({
        endLine: params.loc?.[1],
        path: params.path,
        startLine: params.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #973a10ae6943937f — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:154 
      const result = await this.runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a04087bd48638d5 — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:320 
        const content = await this.deviceFileAccess.readFile(fullPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f40a4aca5e8df5b — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:408 
        let content = await this.deviceFileAccess.readFile(projectSkill.location);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2ad88c72916c72c0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/chat-adapter-qq/src/api.ts:29 
    const response = await fetch(AUTH_URL, {
      body: JSON.stringify({
        appId: this.appId,
        clientSecret: this.clientSecret,
      }),
      headers: { 'Content-Type': 'application/json' },
      method: 'POST',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #61c2b2935d64483f — Environment-variable access.
repo/packages/database/src/core/getTestDB.ts:19 
const isServerDBMode = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cbe20771fc54966 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:14 
  if (process.env.NODE_ENV === 'test') return {} as LobeChatDatabase;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69d36ef71eed66c0 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:57 
  if (process.env.MIGRATION_DB === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #561d3805842688bc — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:21 
  originalKeyVaultsSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7fcc2d565e913164 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:22 
  process.env.KEY_VAULTS_SECRET = validKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9ecc85b6b94f6374 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:31 
  process.env.KEY_VAULTS_SECRET = originalKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b34aefdd4a84052b — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:177 
      process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7baf4e455b905ee6 — Environment-variable access.
repo/packages/database/src/models/__tests__/messages/message.query.test.ts:1487 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f319aa20bfd7bc15 — Environment-variable access.
repo/packages/database/src/models/__tests__/session.test.ts:287 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dfa8cb9972ef364d — Environment-variable access.
repo/packages/database/src/models/__tests__/topics/topic.query.test.ts:1553 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d551ba0638049c2 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/activity.test.ts:240 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14dfb58d331b7051 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/experience.test.ts:437 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #674c4fd3ecbb15d1 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/identity.test.ts:455 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3c2544488155d310 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/model.test.ts:523 
      const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c57f04c910816ee2 — Environment-variable access.
repo/packages/database/src/repositories/home/__tests__/index.test.ts:457 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14cc04c043dea756 — Environment-variable access.
repo/packages/database/src/repositories/home/index.test.ts:788 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ebac5a214b2a415 — Environment-variable access.
repo/packages/database/src/repositories/search/index.test.ts:36 
const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a07b8c74729d324 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:66 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #475cbf2a24003e11 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:120 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9c760d790f586c84 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:175 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #829ba26905482703 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:209 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a91de0e1daf89f17 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:234 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a46fdfdf85d96ef2 — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:25 
  process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a0a8ef0a5dce76f6 — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:31 
  process.env.KEY_VAULTS_SECRET = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #305ccf9f075d57e5 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:19 
  await writeFile(
    path.join(root, '.agents', 'skills', 'spa-routes', 'SKILL.md'),
    '---\nname: spa-routes\ndescription: SPA routing\n---\nbody',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #698801b9eb5f38c7 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:23 
  await writeFile(path.join(root, 'AGENTS.md'), '# Agents');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #449d7da4e14cfbdb — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:79 
    await writeFile(
      path.join(deviceSkillRoot, 'device-writer', 'SKILL.md'),
      '---\nname: device-writer\ndescription: Device writer\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c7a7faa38211028 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:84 
    await writeFile(
      path.join(deviceSkillRoot, 'spa-routes', 'SKILL.md'),
      '---\nname: spa-routes\ndescription: Device duplicate\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #02b395c7ed78cd68 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:112 
    await writeFile(
      path.join(root, '.agents', 'skills', 'agent-testing', 'SKILL.md'),
      [
        '---',
        'name: agent-testing',
        'description: >',
        '  Agentic end-to-end testing for LobeHub: backend verification via the CLI,',
        '  frontend verification via agent-browser (Electron).',
        '---',
        'body',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #261e305c1245f7fa — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:165 
    await writeFile(oldPath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5631c86dd7a5963b — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:180 
    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ee3ad50d17adf954 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:202 
    expect(await readFile(filePath, 'utf8')).toBe('remote edit');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9099f0944654df2d — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:15 
  await writeFile(path.join(root, 'note.txt'), 'hello preview\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ea8a27bcf99e949 — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:16 
  await writeFile(path.join(root, 'pic.png'), Buffer.from([0x89, 0x50, 0x4e, 0x47, 1, 2, 3]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e95c29ace906dde4 — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:17 
  await writeFile(path.join(outside, 'secret.txt'), 'do not read\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8a16acd1981e1815 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:25 
    await writeFile(path.join(dir, 'src', 'index.ts'), 'export const a = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d3fc89538eab3cdb — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:26 
    await writeFile(path.join(dir, 'README.md'), '# hi\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #76cbf5d4a99c37f9 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:30 
    await writeFile(path.join(dir, 'scratch.txt'), 'tmp\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #069861fc6a22c119 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:49 
    await writeFile(path.join(dir, 'one.txt'), '1\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7876e935528c3d57 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:50 
    await writeFile(path.join(dir, 'nested', 'deep', 'two.txt'), '2\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3362a619a70710e7 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:51 
    await writeFile(path.join(dir, '.agents', 'config.md'), '# cfg\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1f29c5342f49376 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:80 
    await writeFile(
      path.join(dir, 'src', 'components', 'Button.tsx'),
      'export const Button = 1;\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a7079ad799d0289b — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:84 
    await writeFile(path.join(dir, 'src', 'components', 'Input.tsx'), 'export const Input = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c86c9ba4886f72da — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:102 
    await writeFile(path.join(dir, 'nested', 'deep', 'target-file.ts'), 'target\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #536a6ca42e9b2ffc — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:103 
    await writeFile(path.join(dir, 'nested', 'deep', 'other.ts'), 'other\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e65831d30156c998 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:119 
    await writeFile(path.join(dir, '.agents', 'skills', 'target-skill.md'), 'skill\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed7a73aa95bc9e73 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:45 
    await expect(readFile(path.join(result.extractedDir, 'SKILL.md'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #921830b8d637c0bf — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:49 
      readFile(path.join(result.extractedDir, 'scripts', 'run.sh'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #126c043b746ed658 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:51 
    const marker = JSON.parse(await readFile(path.join(result.extractedDir, '.prepared'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5a17809c838acde — Filesystem access.
repo/packages/device-control/src/filePreview.ts:121 
    const buffer = await readFile(realFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b1b535e48c9e4c6 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:99 
      await writeFile(zipPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38e7e87e94ff65b3 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:111 
        await writeFile(targetPath, Buffer.from(fileContent as Uint8Array));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89afd76d032f6a56 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:114 
      await writeFile(
        path.join(stagingDir, '.prepared'),
        JSON.stringify({ preparedAt: Date.now(), url, zipHash }),
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d868f0b76ee6be7f — Filesystem access.
repo/packages/device-control/src/workspace.ts:142 
          const raw = await readFile(skillFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7781fcf796e5e52 — Filesystem access.
repo/packages/device-control/src/workspace.ts:204 
      const raw = await readFile(path.join(root, source), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3f2528883af47d0 — Filesystem access.
repo/packages/electron-server-ipc/src/ipcClient.ts:48 
        const socketInfo = JSON.parse(fs.readFileSync(socketInfoPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea44fa7566a17b65 — Filesystem access.
repo/packages/electron-server-ipc/src/ipcServer.ts:56 
        fs.writeFileSync(socketInfoPath, JSON.stringify({ socketPath: this.socketPath }), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #50655d118199a3ee — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:19 
    process.env.PLAUSIBLE_DOMAIN = 'example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #61fcfffc56f2e71f — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:20 
    process.env.POSTHOG_KEY = 'posthog_key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a67fe4c0ce4c1274 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:21 
    process.env.UMAMI_WEBSITE_ID = 'umami_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #34976c412cf8477b — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:22 
    process.env.CLARITY_PROJECT_ID = 'clarity_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77f5bd86d7bb005e — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:23 
    process.env.ENABLE_VERCEL_ANALYTICS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #08c4c26d39f61e85 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:24 
    process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID = 'ga_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4795e9cd57fb2743 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:25 
    process.env.X_ADS_PIXEL_ID = 'tw-pixel_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c21ab3ade63d1311 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:26 
    process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID = 'tw-pixel_id-login_or_signup_clicked';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #61d464c56dbc89a5 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:27 
    process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID = 'tw-pixel_id-main_page_view';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5cfe4c8cfedccaec — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:28 
    process.env.X_ADS_PURCHASE_EVENT_ID = 'tw-pixel_id-purchase_event_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2a607adb0046c012 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:23 
      process.env.AGENTS_INDEX_URL = 'https://custom-agents-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #23db837140d3a992 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:24 
      process.env.PLUGINS_INDEX_URL = 'https://custom-plugins-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5ffd9d2f085cbfb — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:32 
      process.env.AGENTS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #58b03a8bec0a43b0 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:33 
      process.env.PLUGINS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27184c2e4b9cf61a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:48 
      process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef51c8e0d1cd7677 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:49 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #94567feefc7fd731 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:57 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3744ccd23fac3e1d — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:58 
      process.env.INTERNAL_APP_URL = 'http://localhost:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d8e9060e3c1fda42 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:66 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0cc40077b67c3ee9 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:67 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2bac5f16c7d63fa4 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:76 
      process.env.APP_URL = 'https://cloudflare-proxied.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a30d72c042e7a367 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:77 
      process.env.INTERNAL_APP_URL = 'http://127.0.0.1:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9dc7aebbf2b89727 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:90 
    delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed00f863f86d9c14 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:91 
    delete process.env.VERCEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c38376fa9e9f7cdb — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:92 
    delete process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d97567f6693ec21 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:93 
    delete process.env.VERCEL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #099c338f416e1c23 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:94 
    delete process.env.VERCEL_BRANCH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65458d78a70dcf7a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:95 
    delete process.env.VERCEL_PROJECT_PRODUCTION_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c78e0b11bedbe095 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:99 
    process.env.APP_URL = 'https://custom-app.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #76ee96ef15c9688e — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:100 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d622006bfd3ac3d0 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:109 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a903d4e617f91226 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:110 
      process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #82e4a133be310814 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:111 
      process.env.VERCEL_PROJECT_PRODUCTION_URL = 'lobechat.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77ad5d2b47d6ff00 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:112 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-main-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #12aaaea2663e415c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:113 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a03e28c6fa481f64 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:121 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e44f7376932fa791 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:122 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #475f303d6fb096c8 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:123 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ec98c864f8f2a334 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:124 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e84e881c31012a7c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:132 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #85093bb4bf16b97b — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:133 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #978818a232cff510 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:134 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8f141042f2aa5635 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:13 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c010b1e762b6ffc9 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:14 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf0b618cba910ff2 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:15 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9196b1e76a84cf0b — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:16 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14dbbd3ddb29fa08 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:17 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0378772d91776826 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:18 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #96db48597f6243ae — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:27 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #901e0e9e43126706 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:28 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4efd0e34a8828db2 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:29 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5639f80b50913f2f — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:30 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eef02355c113c946 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:31 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #64f7989fa0a1c6d6 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:32 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #36d52a6c64800b53 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:7 
    delete process.env.SANDBOX_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd82042e4a4b4492 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:8 
    delete process.env.ONLYBOXES_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #94471eb098cce11f — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:9 
    delete process.env.ONLYBOXES_JIT_ISSUER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b09271331387d56f — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:10 
    delete process.env.ONLYBOXES_JIT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #98ee43dd97a878e5 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:11 
    delete process.env.ONLYBOXES_JIT_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2e6009955a69de7 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:12 
    delete process.env.ONLYBOXES_LEASE_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c123d76c9f5d9d1 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:16 
    process.env.SANDBOX_PROVIDER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a4ffc21dcc04fb5 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:17 
    process.env.ONLYBOXES_BASE_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #87bf5ede4c8c5754 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:18 
    process.env.ONLYBOXES_JIT_ISSUER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4523f58a3a9ac221 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:19 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4cb45b4879f7d51 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:20 
    process.env.ONLYBOXES_JIT_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #057b3a436e0ef3e2 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:21 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #22b7dea015b756a6 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:35 
    process.env.SANDBOX_PROVIDER = 'onlyboxes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8dc88a4ea2f91b07 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:36 
    process.env.ONLYBOXES_BASE_URL = 'https://onlyboxes.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #53f3b761b78b7de4 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:37 
    process.env.ONLYBOXES_JIT_ISSUER = 'lobehub-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9afb14b5e4e14030 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:38 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = 'jit-signing-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27631d1f74b0ae8d — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:39 
    process.env.ONLYBOXES_JIT_TTL_SEC = '900';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d31535197e9de53b — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:40 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '3600';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80b152128819861a — Environment-variable access.
repo/packages/env/src/analytics.ts:39 
      ENABLED_PLAUSIBLE_ANALYTICS: !!process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b50a46419878c41b — Environment-variable access.
repo/packages/env/src/analytics.ts:40 
      PLAUSIBLE_DOMAIN: process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db55ab3c335dd0ae — Environment-variable access.
repo/packages/env/src/analytics.ts:41 
      PLAUSIBLE_SCRIPT_BASE_URL: process.env.PLAUSIBLE_SCRIPT_BASE_URL || 'https://plausible.io',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63db2587776db503 — Environment-variable access.
repo/packages/env/src/analytics.ts:44 
      ENABLED_POSTHOG_ANALYTICS: !!process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #906d8dd6745df3b7 — Environment-variable access.
repo/packages/env/src/analytics.ts:45 
      POSTHOG_KEY: process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34e1481f7c791d1c — Environment-variable access.
repo/packages/env/src/analytics.ts:46 
      POSTHOG_HOST: process.env.POSTHOG_HOST || 'https://app.posthog.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74b4830f4d5cccaf — Environment-variable access.
repo/packages/env/src/analytics.ts:47 
      DEBUG_POSTHOG_ANALYTICS: process.env.DEBUG_POSTHOG_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e77b2e79a3d3dd3e — Environment-variable access.
repo/packages/env/src/analytics.ts:50 
      ENABLED_UMAMI_ANALYTICS: !!process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d0659df5fdb97d1 — Environment-variable access.
repo/packages/env/src/analytics.ts:51 
      UMAMI_SCRIPT_URL: process.env.UMAMI_SCRIPT_URL || 'https://analytics.umami.is/script.js',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1f898b30db54dd4 — Environment-variable access.
repo/packages/env/src/analytics.ts:52 
      UMAMI_WEBSITE_ID: process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #121d13d81b141c64 — Environment-variable access.
repo/packages/env/src/analytics.ts:55 
      ENABLED_CLARITY_ANALYTICS: !!process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #905dd14dd2587344 — Environment-variable access.
repo/packages/env/src/analytics.ts:56 
      CLARITY_PROJECT_ID: process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e6fa1ad5c7ff17a — Environment-variable access.
repo/packages/env/src/analytics.ts:59 
      ENABLE_VERCEL_ANALYTICS: process.env.ENABLE_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a74203253b8925e — Environment-variable access.
repo/packages/env/src/analytics.ts:60 
      DEBUG_VERCEL_ANALYTICS: process.env.DEBUG_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3643c47c106a6a55 — Environment-variable access.
repo/packages/env/src/analytics.ts:63 
      ENABLE_GOOGLE_ANALYTICS: !!process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28110ee04aa35ece — Environment-variable access.
repo/packages/env/src/analytics.ts:64 
      GOOGLE_ANALYTICS_MEASUREMENT_ID: process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26a02a7f91d0d59f — Environment-variable access.
repo/packages/env/src/analytics.ts:67 
      ENABLED_X_ADS: !!process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e4afe01ca312a21 — Environment-variable access.
repo/packages/env/src/analytics.ts:68 
      X_ADS_PIXEL_ID: process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aea3174c953381f6 — Environment-variable access.
repo/packages/env/src/analytics.ts:69 
      X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID: process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faa724c3c0c73d23 — Environment-variable access.
repo/packages/env/src/analytics.ts:70 
      X_ADS_MAIN_PAGE_VIEW_EVENT_ID: process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59feba97aec723ed — Environment-variable access.
repo/packages/env/src/analytics.ts:71 
      X_ADS_PURCHASE_EVENT_ID: process.env.X_ADS_PURCHASE_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5679e35d330f872c — Environment-variable access.
repo/packages/env/src/analytics.ts:75 
      REACT_SCAN_MONITOR_API_KEY: process.env.REACT_SCAN_MONITOR_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61f0c2a6cc25c510 — Environment-variable access.
repo/packages/env/src/app.ts:4 
const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd4a3476215a2ccc — Environment-variable access.
repo/packages/env/src/app.ts:11 
  if (process.env.VERCEL_ENV === 'production' && process.env.VERCEL_PROJECT_PRODUCTION_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7006c1b6bad5a867 — Environment-variable access.
repo/packages/env/src/app.ts:12 
    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e19c59ae8d4d945b — Environment-variable access.
repo/packages/env/src/app.ts:14 
  if (process.env.VERCEL_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22a83484f56d0023 — Environment-variable access.
repo/packages/env/src/app.ts:15 
    return `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6a9ffefa5700ff9 — Environment-variable access.
repo/packages/env/src/app.ts:17 
  return `https://${process.env.VERCEL_BRANCH_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65fa69412d70a146 — Environment-variable access.
repo/packages/env/src/app.ts:20 
const APP_URL = process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d419b4087bf5428 — Environment-variable access.
repo/packages/env/src/app.ts:21 
  ? process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97b157250edae2e3 — Environment-variable access.
repo/packages/env/src/app.ts:24 
    : process.env.NODE_ENV === 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1279581a66ce26 — Environment-variable access.
repo/packages/env/src/app.ts:25 
      ? `http://localhost:${process.env.PORT || 3010}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdbbd19e63b2e6af — Environment-variable access.
repo/packages/env/src/app.ts:26 
      : `http://localhost:${process.env.PORT || 3210}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9d0fbf59ab586cc — Environment-variable access.
repo/packages/env/src/app.ts:30 
const INTERNAL_APP_URL = process.env.INTERNAL_APP_URL || APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e53433bb2edb69f4 — Environment-variable access.
repo/packages/env/src/app.ts:92 
      NEXT_PUBLIC_ENABLE_SENTRY: !!process.env.NEXT_PUBLIC_SENTRY_DSN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c784abf914a7739 — Environment-variable access.
repo/packages/env/src/app.ts:94 
      AGENTS_INDEX_URL: !!process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #860fccfbd858caed — Environment-variable access.
repo/packages/env/src/app.ts:95 
        ? process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48b0f4c0dbad907b — Environment-variable access.
repo/packages/env/src/app.ts:98 
      DEFAULT_AGENT_CONFIG: process.env.DEFAULT_AGENT_CONFIG || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58f459b312362d28 — Environment-variable access.
repo/packages/env/src/app.ts:99 
      SYSTEM_AGENT: process.env.SYSTEM_AGENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4a627d32c5938e8 — Environment-variable access.
repo/packages/env/src/app.ts:101 
      PLUGINS_INDEX_URL: !!process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c658c960371af13 — Environment-variable access.
repo/packages/env/src/app.ts:102 
        ? process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d47c5b1e6857f269 — Environment-variable access.
repo/packages/env/src/app.ts:105 
      PLUGIN_SETTINGS: process.env.PLUGIN_SETTINGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74c3cbf012a6ba96 — Environment-variable access.
repo/packages/env/src/app.ts:107 
      VERCEL_EDGE_CONFIG: process.env.VERCEL_EDGE_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea825ebe53b834f — Environment-variable access.
repo/packages/env/src/app.ts:111 
      MIDDLEWARE_REWRITE_THROUGH_LOCAL: process.env.MIDDLEWARE_REWRITE_THROUGH_LOCAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12161c7917821ab6 — Environment-variable access.
repo/packages/env/src/app.ts:113 
      CUSTOM_FONT_FAMILY: process.env.CUSTOM_FONT_FAMILY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ab39219ec01ea49 — Environment-variable access.
repo/packages/env/src/app.ts:114 
      CUSTOM_FONT_URL: process.env.CUSTOM_FONT_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9dce005b380be23f — Environment-variable access.
repo/packages/env/src/app.ts:115 
      CDN_USE_GLOBAL: process.env.CDN_USE_GLOBAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13c79ceb98b7cdbb — Environment-variable access.
repo/packages/env/src/app.ts:117 
      SSRF_ALLOW_PRIVATE_IP_ADDRESS: process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c23785b7a3c18e7 — Environment-variable access.
repo/packages/env/src/app.ts:118 
      SSRF_ALLOW_IP_ADDRESS_LIST: process.env.SSRF_ALLOW_IP_ADDRESS_LIST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #183129ce8533b62a — Environment-variable access.
repo/packages/env/src/app.ts:119 
      MARKET_BASE_URL: process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f820db43ebfc7128 — Environment-variable access.
repo/packages/env/src/app.ts:121 
      MARKET_TRUSTED_CLIENT_SECRET: process.env.MARKET_TRUSTED_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23a83369d8184252 — Environment-variable access.
repo/packages/env/src/app.ts:122 
      MARKET_TRUSTED_CLIENT_ID: process.env.MARKET_TRUSTED_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc68d8799da84c1d — Environment-variable access.
repo/packages/env/src/app.ts:124 
      AGENT_GATEWAY_SERVICE_TOKEN: process.env.AGENT_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d84da76e4ca72006 — Environment-variable access.
repo/packages/env/src/app.ts:125 
      ENABLE_AGENT_GATEWAY: process.env.ENABLE_AGENT_GATEWAY === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ce3161dfb623e95 — Environment-variable access.
repo/packages/env/src/app.ts:126 
      AGENT_GATEWAY_URL: process.env.AGENT_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a83541f27588d0d1 — Environment-variable access.
repo/packages/env/src/app.ts:127 
      enableQueueAgentRuntime: process.env.AGENT_RUNTIME_MODE === 'queue',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16592e9c12129d20 — Environment-variable access.
repo/packages/env/src/app.ts:128 
      TELEMETRY_DISABLED: process.env.TELEMETRY_DISABLED === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ceb93fc93c360713 — Environment-variable access.
repo/packages/env/src/auth.ts:202 
      AUTH_EMAIL_VERIFICATION: process.env.AUTH_EMAIL_VERIFICATION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8ec9dd4505b3580 — Environment-variable access.
repo/packages/env/src/auth.ts:203 
      AUTH_ENABLE_MAGIC_LINK: process.env.AUTH_ENABLE_MAGIC_LINK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6507074e4481ccaf — Environment-variable access.
repo/packages/env/src/auth.ts:204 
      AUTH_SECRET: process.env.AUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223f4fac4d18c0e9 — Environment-variable access.
repo/packages/env/src/auth.ts:205 
      AUTH_SSO_PROVIDERS: process.env.AUTH_SSO_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd9c98871ffbda65 — Environment-variable access.
repo/packages/env/src/auth.ts:206 
      AUTH_TRUSTED_ORIGINS: process.env.AUTH_TRUSTED_ORIGINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3541a741488f739d — Environment-variable access.
repo/packages/env/src/auth.ts:207 
      AUTH_ALLOWED_EMAILS: process.env.AUTH_ALLOWED_EMAILS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92b820c72026ab04 — Environment-variable access.
repo/packages/env/src/auth.ts:208 
      AUTH_DISABLE_EMAIL_PASSWORD: process.env.AUTH_DISABLE_EMAIL_PASSWORD === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec7394935201a233 — Environment-variable access.
repo/packages/env/src/auth.ts:211 
      AUTH_COGNITO_DOMAIN: process.env.AUTH_COGNITO_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9024719b7f5894dc — Environment-variable access.
repo/packages/env/src/auth.ts:212 
      AUTH_COGNITO_REGION: process.env.AUTH_COGNITO_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc6b7d635157e648 — Environment-variable access.
repo/packages/env/src/auth.ts:213 
      AUTH_COGNITO_USERPOOL_ID: process.env.AUTH_COGNITO_USERPOOL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2545f357d4638ae8 — Environment-variable access.
repo/packages/env/src/auth.ts:216 
      AUTH_GOOGLE_ID: process.env.AUTH_GOOGLE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e2af8371d68298d — Environment-variable access.
repo/packages/env/src/auth.ts:217 
      AUTH_GOOGLE_SECRET: process.env.AUTH_GOOGLE_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bb8b33f55f67e3f — Environment-variable access.
repo/packages/env/src/auth.ts:219 
      AUTH_APPLE_CLIENT_ID: process.env.AUTH_APPLE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2df308923fc2d365 — Environment-variable access.
repo/packages/env/src/auth.ts:220 
      AUTH_APPLE_CLIENT_SECRET: process.env.AUTH_APPLE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dafd97b6a150bca — Environment-variable access.
repo/packages/env/src/auth.ts:221 
      AUTH_APPLE_APP_BUNDLE_IDENTIFIER: process.env.AUTH_APPLE_APP_BUNDLE_IDENTIFIER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc5771467ac409bf — Environment-variable access.
repo/packages/env/src/auth.ts:223 
      AUTH_GITHUB_ID: process.env.AUTH_GITHUB_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fc0f9e5ff4d6d57 — Environment-variable access.
repo/packages/env/src/auth.ts:224 
      AUTH_GITHUB_SECRET: process.env.AUTH_GITHUB_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3e821e5428243ac — Environment-variable access.
repo/packages/env/src/auth.ts:226 
      AUTH_MICROSOFT_AUTHORITY_URL: process.env.AUTH_MICROSOFT_AUTHORITY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2ef9fe9f8919260 — Environment-variable access.
repo/packages/env/src/auth.ts:227 
      AUTH_MICROSOFT_ID: process.env.AUTH_MICROSOFT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #766a960157f39a4f — Environment-variable access.
repo/packages/env/src/auth.ts:228 
      AUTH_MICROSOFT_SECRET: process.env.AUTH_MICROSOFT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff37424691926377 — Environment-variable access.
repo/packages/env/src/auth.ts:229 
      AUTH_MICROSOFT_TENANT_ID: process.env.AUTH_MICROSOFT_TENANT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #830fd6cc5d1e5e7b — Environment-variable access.
repo/packages/env/src/auth.ts:231 
      AUTH_COGNITO_ID: process.env.AUTH_COGNITO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cdc0cf84ad0dee9 — Environment-variable access.
repo/packages/env/src/auth.ts:232 
      AUTH_COGNITO_SECRET: process.env.AUTH_COGNITO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #449b569db7351855 — Environment-variable access.
repo/packages/env/src/auth.ts:233 
      AUTH_COGNITO_ISSUER: process.env.AUTH_COGNITO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83e416f8130aa82b — Environment-variable access.
repo/packages/env/src/auth.ts:235 
      AUTH_AUTH0_ID: process.env.AUTH_AUTH0_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c3e49fdd791bfee — Environment-variable access.
repo/packages/env/src/auth.ts:236 
      AUTH_AUTH0_SECRET: process.env.AUTH_AUTH0_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3894445b0ddff9b4 — Environment-variable access.
repo/packages/env/src/auth.ts:237 
      AUTH_AUTH0_ISSUER: process.env.AUTH_AUTH0_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c2af04d74f5dd11 — Environment-variable access.
repo/packages/env/src/auth.ts:239 
      AUTH_AUTHELIA_ID: process.env.AUTH_AUTHELIA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #088dcc027dc87d83 — Environment-variable access.
repo/packages/env/src/auth.ts:240 
      AUTH_AUTHELIA_SECRET: process.env.AUTH_AUTHELIA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a92688ca614ab1f — Environment-variable access.
repo/packages/env/src/auth.ts:241 
      AUTH_AUTHELIA_ISSUER: process.env.AUTH_AUTHELIA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d80a4dbfcd4687b — Environment-variable access.
repo/packages/env/src/auth.ts:243 
      AUTH_AUTHENTIK_ID: process.env.AUTH_AUTHENTIK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1157eb5df18117ad — Environment-variable access.
repo/packages/env/src/auth.ts:244 
      AUTH_AUTHENTIK_SECRET: process.env.AUTH_AUTHENTIK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62ead5a85fb6ee4e — Environment-variable access.
repo/packages/env/src/auth.ts:245 
      AUTH_AUTHENTIK_ISSUER: process.env.AUTH_AUTHENTIK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083fe48f3d383e0f — Environment-variable access.
repo/packages/env/src/auth.ts:247 
      AUTH_CASDOOR_ID: process.env.AUTH_CASDOOR_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90e23ad65293f5ab — Environment-variable access.
repo/packages/env/src/auth.ts:248 
      AUTH_CASDOOR_SECRET: process.env.AUTH_CASDOOR_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fa74cb194a478d2 — Environment-variable access.
repo/packages/env/src/auth.ts:249 
      AUTH_CASDOOR_ISSUER: process.env.AUTH_CASDOOR_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73bff2f0d543d919 — Environment-variable access.
repo/packages/env/src/auth.ts:251 
      AUTH_CLOUDFLARE_ZERO_TRUST_ID: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9572ca841d8fd848 — Environment-variable access.
repo/packages/env/src/auth.ts:252 
      AUTH_CLOUDFLARE_ZERO_TRUST_SECRET: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91a1a564a32b77f7 — Environment-variable access.
repo/packages/env/src/auth.ts:253 
      AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e9fff5a187df36e — Environment-variable access.
repo/packages/env/src/auth.ts:255 
      AUTH_FEISHU_APP_ID: process.env.AUTH_FEISHU_APP_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3570917f2a645fe — Environment-variable access.
repo/packages/env/src/auth.ts:256 
      AUTH_FEISHU_APP_SECRET: process.env.AUTH_FEISHU_APP_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d53aa30f89a8be04 — Environment-variable access.
repo/packages/env/src/auth.ts:258 
      AUTH_GENERIC_OIDC_ID: process.env.AUTH_GENERIC_OIDC_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #493c8e34fad34291 — Environment-variable access.
repo/packages/env/src/auth.ts:259 
      AUTH_GENERIC_OIDC_SECRET: process.env.AUTH_GENERIC_OIDC_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #926620068d6535d5 — Environment-variable access.
repo/packages/env/src/auth.ts:260 
      AUTH_GENERIC_OIDC_ISSUER: process.env.AUTH_GENERIC_OIDC_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa95cec487f9386a — Environment-variable access.
repo/packages/env/src/auth.ts:262 
      AUTH_KEYCLOAK_ID: process.env.AUTH_KEYCLOAK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3efe0a93f732d54 — Environment-variable access.
repo/packages/env/src/auth.ts:263 
      AUTH_KEYCLOAK_SECRET: process.env.AUTH_KEYCLOAK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d985750d0d85702d — Environment-variable access.
repo/packages/env/src/auth.ts:264 
      AUTH_KEYCLOAK_ISSUER: process.env.AUTH_KEYCLOAK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #982a20943d68bcd3 — Environment-variable access.
repo/packages/env/src/auth.ts:266 
      AUTH_LOGTO_ID: process.env.AUTH_LOGTO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03b9b39092b03564 — Environment-variable access.
repo/packages/env/src/auth.ts:267 
      AUTH_LOGTO_SECRET: process.env.AUTH_LOGTO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc6c00afd9ab3588 — Environment-variable access.
repo/packages/env/src/auth.ts:268 
      AUTH_LOGTO_ISSUER: process.env.AUTH_LOGTO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0b7ac717c1cb193 — Environment-variable access.
repo/packages/env/src/auth.ts:270 
      AUTH_OKTA_ID: process.env.AUTH_OKTA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #027d6a0f59789031 — Environment-variable access.
repo/packages/env/src/auth.ts:271 
      AUTH_OKTA_SECRET: process.env.AUTH_OKTA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f379b7cde8dfc78 — Environment-variable access.
repo/packages/env/src/auth.ts:272 
      AUTH_OKTA_ISSUER: process.env.AUTH_OKTA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16d109433e136701 — Environment-variable access.
repo/packages/env/src/auth.ts:274 
      AUTH_WECHAT_ID: process.env.AUTH_WECHAT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e2354869c1cd07b — Environment-variable access.
repo/packages/env/src/auth.ts:275 
      AUTH_WECHAT_SECRET: process.env.AUTH_WECHAT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d9a71d9119bea5c — Environment-variable access.
repo/packages/env/src/auth.ts:277 
      AUTH_ZITADEL_ID: process.env.AUTH_ZITADEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e66f9dd38b196a8f — Environment-variable access.
repo/packages/env/src/auth.ts:278 
      AUTH_ZITADEL_SECRET: process.env.AUTH_ZITADEL_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d115bc10ad4978cf — Environment-variable access.
repo/packages/env/src/auth.ts:279 
      AUTH_ZITADEL_ISSUER: process.env.AUTH_ZITADEL_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d49a5b6f2919127 — Environment-variable access.
repo/packages/env/src/auth.ts:282 
      LOGTO_WEBHOOK_SIGNING_KEY: process.env.LOGTO_WEBHOOK_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e785bed99143600c — Environment-variable access.
repo/packages/env/src/auth.ts:285 
      CASDOOR_WEBHOOK_SECRET: process.env.CASDOOR_WEBHOOK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1810f8d306a07cc — Environment-variable access.
repo/packages/env/src/auth.ts:287 
      JWKS_KEY: process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c259a81a8d9fae7 — Environment-variable access.
repo/packages/env/src/auth.ts:288 
      ENABLE_OIDC: !!process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea840e7a5b3fb337 — Environment-variable access.
repo/packages/env/src/auth.ts:291 
      INTERNAL_JWT_EXPIRATION: process.env.INTERNAL_JWT_EXPIRATION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b669b942c790e489 — Environment-variable access.
repo/packages/env/src/debug.ts:16 
  DEBUG_MODE: process.env.NEXT_PUBLIC_DEVELOPER_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e82c70e4bca090 — Environment-variable access.
repo/packages/env/src/debug.ts:19 
  I18N_DEBUG: process.env.NEXT_PUBLIC_I18N_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c08ee8dc4f6a7c32 — Environment-variable access.
repo/packages/env/src/debug.ts:20 
  I18N_DEBUG_BROWSER: process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1f3222a7bebb18d — Environment-variable access.
repo/packages/env/src/debug.ts:21 
  I18N_DEBUG_SERVER: process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cad8f1a558411837 — Environment-variable access.
repo/packages/env/src/email.ts:35 
      SMTP_FROM: process.env.SMTP_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0185e7a2b73b30cc — Environment-variable access.
repo/packages/env/src/email.ts:36 
      SMTP_HOST: process.env.SMTP_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d08a1fb706e397a3 — Environment-variable access.
repo/packages/env/src/email.ts:37 
      SMTP_PORT: process.env.SMTP_PORT ? Number(process.env.SMTP_PORT) : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #043500a1e7835288 — Environment-variable access.
repo/packages/env/src/email.ts:38 
      SMTP_SECURE: process.env.SMTP_SECURE === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc047f3377470b22 — Environment-variable access.
repo/packages/env/src/email.ts:39 
      SMTP_USER: process.env.SMTP_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b78802dc180b398 — Environment-variable access.
repo/packages/env/src/email.ts:40 
      SMTP_PASS: process.env.SMTP_PASS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16c27a571b1f6d19 — Environment-variable access.
repo/packages/env/src/email.ts:41 
      EMAIL_SERVICE_PROVIDER: process.env.EMAIL_SERVICE_PROVIDER

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12f9323af1f86fe3 — Environment-variable access.
repo/packages/env/src/email.ts:42 
        ? process.env.EMAIL_SERVICE_PROVIDER.toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c7f8a0c57f1e54d — Environment-variable access.
repo/packages/env/src/email.ts:44 
      RESEND_API_KEY: process.env.RESEND_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3270a360516d3466 — Environment-variable access.
repo/packages/env/src/email.ts:45 
      RESEND_FROM: process.env.RESEND_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea30f6810292c08f — Environment-variable access.
repo/packages/env/src/file.ts:7 
  if (!!process.env.NEXT_PUBLIC_S3_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6c56c358e35ee98 — Environment-variable access.
repo/packages/env/src/file.ts:13 
  const S3_PUBLIC_DOMAIN = process.env.S3_PUBLIC_DOMAIN || process.env.NEXT_PUBLIC_S3_DOMAIN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #260f9189c9d58370 — Environment-variable access.
repo/packages/env/src/file.ts:25 
      CHUNKS_AUTO_EMBEDDING: process.env.CHUNKS_AUTO_EMBEDDING !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #838b47ebdd9a3ca1 — Environment-variable access.
repo/packages/env/src/file.ts:26 
      CHUNKS_AUTO_GEN_METADATA: process.env.CHUNKS_AUTO_GEN_METADATA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58b39ac6119cac94 — Environment-variable access.
repo/packages/env/src/file.ts:27 
      EMBEDDING_BATCH_SIZE: process.env.EMBEDDING_BATCH_SIZE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2b262efc3b67fa6 — Environment-variable access.
repo/packages/env/src/file.ts:28 
      EMBEDDING_CONCURRENCY: process.env.EMBEDDING_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a18bd43a2ff1c6c — Environment-variable access.
repo/packages/env/src/file.ts:30 
      NEXT_PUBLIC_S3_DOMAIN: process.env.NEXT_PUBLIC_S3_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #097d34028113c949 — Environment-variable access.
repo/packages/env/src/file.ts:31 
      NEXT_PUBLIC_S3_FILE_PATH: process.env.NEXT_PUBLIC_S3_FILE_PATH || DEFAULT_S3_FILE_PATH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54e5a9d1d5dc2ee7 — Environment-variable access.
repo/packages/env/src/file.ts:33 
      S3_ACCESS_KEY_ID: process.env.S3_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f08ce12c6a6af03e — Environment-variable access.
repo/packages/env/src/file.ts:34 
      S3_BUCKET: process.env.S3_BUCKET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #763e3c61bc931daa — Environment-variable access.
repo/packages/env/src/file.ts:35 
      S3_ENABLE_PATH_STYLE: process.env.S3_ENABLE_PATH_STYLE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #553dcf755cecc095 — Environment-variable access.
repo/packages/env/src/file.ts:36 
      S3_ENDPOINT: process.env.S3_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4320645938c5aaca — Environment-variable access.
repo/packages/env/src/file.ts:37 
      S3_PREVIEW_URL_EXPIRE_IN: parseInt(process.env.S3_PREVIEW_URL_EXPIRE_IN || '7200'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a36812f0494464e9 — Environment-variable access.
repo/packages/env/src/file.ts:39 
      S3_REGION: process.env.S3_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7306131d0e5e5681 — Environment-variable access.
repo/packages/env/src/file.ts:40 
      S3_SECRET_ACCESS_KEY: process.env.S3_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e96a60e2b19a3679 — Environment-variable access.
repo/packages/env/src/file.ts:41 
      S3_SET_ACL: process.env.S3_SET_ACL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bab306932ddf5bd7 — Environment-variable access.
repo/packages/env/src/gateway.ts:7 
      DEVICE_GATEWAY_SERVICE_TOKEN: process.env.DEVICE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0085724a7876c38 — Environment-variable access.
repo/packages/env/src/gateway.ts:8 
      DEVICE_GATEWAY_URL: process.env.DEVICE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #849b08f76bf75e3a — Environment-variable access.
repo/packages/env/src/gateway.ts:9 
      MESSAGE_GATEWAY_ENABLED: process.env.MESSAGE_GATEWAY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5ef7af7a0240ba3 — Environment-variable access.
repo/packages/env/src/gateway.ts:10 
      MESSAGE_GATEWAY_SERVICE_TOKEN: process.env.MESSAGE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a389b0eea29af819 — Environment-variable access.
repo/packages/env/src/gateway.ts:11 
      MESSAGE_GATEWAY_URL: process.env.MESSAGE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a57fb0cc1c3bfb78 — Environment-variable access.
repo/packages/env/src/image.ts:9 
      AI_IMAGE_DEFAULT_IMAGE_NUM: process.env.AI_IMAGE_DEFAULT_IMAGE_NUM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d25fb816611c236b — Environment-variable access.
repo/packages/env/src/knowledge.ts:6 
    DEFAULT_FILES_CONFIG: process.env.DEFAULT_FILES_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13ab6c9fb5186083 — Environment-variable access.
repo/packages/env/src/knowledge.ts:7 
    FILE_TYPE_CHUNKING_RULES: process.env.FILE_TYPE_CHUNKING_RULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89858a44f52eb0d2 — Environment-variable access.
repo/packages/env/src/knowledge.ts:8 
    UNSTRUCTURED_API_KEY: process.env.UNSTRUCTURED_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56e6790ed437c303 — Environment-variable access.
repo/packages/env/src/knowledge.ts:9 
    UNSTRUCTURED_SERVER_URL: process.env.UNSTRUCTURED_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b062bf05ef45635b — Environment-variable access.
repo/packages/env/src/langfuse.ts:7 
      ENABLE_LANGFUSE: process.env.ENABLE_LANGFUSE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8618d45b897ba152 — Environment-variable access.
repo/packages/env/src/langfuse.ts:8 
      LANGFUSE_SECRET_KEY: process.env.LANGFUSE_SECRET_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79fb0a80247f8b3a — Environment-variable access.
repo/packages/env/src/langfuse.ts:9 
      LANGFUSE_PUBLIC_KEY: process.env.LANGFUSE_PUBLIC_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49fbfe8b1e615450 — Environment-variable access.
repo/packages/env/src/langfuse.ts:10 
      LANGFUSE_HOST: process.env.LANGFUSE_HOST || 'https://cloud.langfuse.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80c9b2e74369005a — Environment-variable access.
repo/packages/env/src/llm.ts:260 
      API_KEY_SELECT_MODE: process.env.API_KEY_SELECT_MODE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8e4342d0380f8f4 — Environment-variable access.
repo/packages/env/src/llm.ts:262 
      ENABLED_OPENAI: process.env.ENABLED_OPENAI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b33939b66f6da95 — Environment-variable access.
repo/packages/env/src/llm.ts:263 
      OPENAI_API_KEY: process.env.OPENAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7326a43e1f0448d3 — Environment-variable access.
repo/packages/env/src/llm.ts:265 
      ENABLED_AZURE_OPENAI: !!process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5542e3e6fc49a1fa — Environment-variable access.
repo/packages/env/src/llm.ts:266 
      AZURE_API_KEY: process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8246f25c3462fdd9 — Environment-variable access.
repo/packages/env/src/llm.ts:267 
      AZURE_API_VERSION: process.env.AZURE_API_VERSION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e231c5367d78007e — Environment-variable access.
repo/packages/env/src/llm.ts:268 
      AZURE_ENDPOINT: process.env.AZURE_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70bc8378bfe2371a — Environment-variable access.
repo/packages/env/src/llm.ts:270 
      ENABLED_AZUREAI: !!process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #805b5d3f4bd49cb5 — Environment-variable access.
repo/packages/env/src/llm.ts:271 
      AZUREAI_ENDPOINT_KEY: process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8aa3c2fc979e1fc0 — Environment-variable access.
repo/packages/env/src/llm.ts:272 
      AZUREAI_ENDPOINT: process.env.AZUREAI_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76aa856774db94ce — Environment-variable access.
repo/packages/env/src/llm.ts:274 
      ENABLED_ZHIPU: !!process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd34fae8db42b84c — Environment-variable access.
repo/packages/env/src/llm.ts:275 
      ZHIPU_API_KEY: process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #386e0b0907590145 — Environment-variable access.
repo/packages/env/src/llm.ts:277 
      ENABLED_DEEPSEEK: !!process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f939414093b0c51 — Environment-variable access.
repo/packages/env/src/llm.ts:278 
      DEEPSEEK_API_KEY: process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #896ebd41a6afc37e — Environment-variable access.
repo/packages/env/src/llm.ts:280 
      ENABLED_GOOGLE: process.env.ENABLED_GOOGLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0be2adaf6da4ac1 — Environment-variable access.
repo/packages/env/src/llm.ts:281 
      GOOGLE_API_KEY: process.env.GOOGLE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #746cdc28175fb681 — Environment-variable access.
repo/packages/env/src/llm.ts:283 
      ENABLED_VERTEXAI: !!process.env.VERTEXAI_CREDENTIALS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b7f53114ee5313a — Environment-variable access.
repo/packages/env/src/llm.ts:285 
      ENABLED_VOLCENGINE: !!process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cac10efe474f2bb — Environment-variable access.
repo/packages/env/src/llm.ts:286 
      VOLCENGINE_API_KEY: process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #322dfeb0457cbe64 — Environment-variable access.
repo/packages/env/src/llm.ts:288 
      ENABLED_PERPLEXITY: !!process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a84fe18b260aec32 — Environment-variable access.
repo/packages/env/src/llm.ts:289 
      PERPLEXITY_API_KEY: process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76463e6ecbebae8e — Environment-variable access.
repo/packages/env/src/llm.ts:291 
      ENABLED_ANTHROPIC: process.env.ENABLED_ANTHROPIC !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61eaad998a68af52 — Environment-variable access.
repo/packages/env/src/llm.ts:292 
      ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d7e9c95d813b4cd — Environment-variable access.
repo/packages/env/src/llm.ts:294 
      ENABLED_MINIMAX: !!process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fa192b7ec7bb838 — Environment-variable access.
repo/packages/env/src/llm.ts:295 
      MINIMAX_API_KEY: process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f5a2b258d808415 — Environment-variable access.
repo/packages/env/src/llm.ts:297 
      ENABLED_MISTRAL: !!process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abc645ad13b25921 — Environment-variable access.
repo/packages/env/src/llm.ts:298 
      MISTRAL_API_KEY: process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c154eef04f81690 — Environment-variable access.
repo/packages/env/src/llm.ts:300 
      ENABLED_OPENROUTER: !!process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d41d0f04d0b5d34 — Environment-variable access.
repo/packages/env/src/llm.ts:301 
      OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dd3b5dad5c5009d — Environment-variable access.
repo/packages/env/src/llm.ts:303 
      ENABLED_TOGETHERAI: !!process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #792a33fc4217e522 — Environment-variable access.
repo/packages/env/src/llm.ts:304 
      TOGETHERAI_API_KEY: process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b205861ed5073afd — Environment-variable access.
repo/packages/env/src/llm.ts:306 
      ENABLED_FIREWORKSAI: !!process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99ad98c462a824b6 — Environment-variable access.
repo/packages/env/src/llm.ts:307 
      FIREWORKSAI_API_KEY: process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8c5592b81a58a8d — Environment-variable access.
repo/packages/env/src/llm.ts:309 
      ENABLED_MOONSHOT: !!process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b84d0e6ed6062a57 — Environment-variable access.
repo/packages/env/src/llm.ts:310 
      MOONSHOT_API_KEY: process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5c88d82ba2c0476 — Environment-variable access.
repo/packages/env/src/llm.ts:312 
      ENABLED_KIMICODINGPLAN: !!process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0ef1440b042e62e — Environment-variable access.
repo/packages/env/src/llm.ts:313 
      KIMICODINGPLAN_API_KEY: process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff97fa06dbfeb3ba — Environment-variable access.
repo/packages/env/src/llm.ts:315 
      ENABLED_BAILIANCODINGPLAN: !!process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de7595e19e39475b — Environment-variable access.
repo/packages/env/src/llm.ts:316 
      BAILIANCODINGPLAN_API_KEY: process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #452b746170cf9325 — Environment-variable access.
repo/packages/env/src/llm.ts:318 
      ENABLED_GLMCODINGPLAN: !!process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #852425665e2d7cbc — Environment-variable access.
repo/packages/env/src/llm.ts:319 
      GLMCODINGPLAN_API_KEY: process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9340ef9bed1289d8 — Environment-variable access.
repo/packages/env/src/llm.ts:321 
      ENABLED_MINIMAXCODINGPLAN: !!process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c490bd886e75032f — Environment-variable access.
repo/packages/env/src/llm.ts:322 
      MINIMAXCODINGPLAN_API_KEY: process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39b6c2c7d2e509e4 — Environment-variable access.
repo/packages/env/src/llm.ts:324 
      ENABLED_VOLCENGINECODINGPLAN: !!process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf154405717c1dee — Environment-variable access.
repo/packages/env/src/llm.ts:325 
      VOLCENGINECODINGPLAN_API_KEY: process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #463132f6a58177f3 — Environment-variable access.
repo/packages/env/src/llm.ts:327 
      ENABLED_GROQ: !!process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e01dac98433ff39b — Environment-variable access.
repo/packages/env/src/llm.ts:328 
      GROQ_API_KEY: process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f03778e8b7bab8a6 — Environment-variable access.
repo/packages/env/src/llm.ts:330 
      ENABLED_GITHUB: !!process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cb6ef515581c32e — Environment-variable access.
repo/packages/env/src/llm.ts:331 
      GITHUB_TOKEN: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d74971564112547 — Environment-variable access.
repo/packages/env/src/llm.ts:333 
      ENABLED_ZEROONE: !!process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa2b8f4e221f358d — Environment-variable access.
repo/packages/env/src/llm.ts:334 
      ZEROONE_API_KEY: process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93e6d84d8b3a50fc — Environment-variable access.
repo/packages/env/src/llm.ts:336 
      ENABLED_AWS_BEDROCK: process.env.ENABLED_AWS_BEDROCK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68204ab091e0a147 — Environment-variable access.
repo/packages/env/src/llm.ts:337 
      AWS_REGION: process.env.AWS_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #199ee94e21730033 — Environment-variable access.
repo/packages/env/src/llm.ts:338 
      AWS_ACCESS_KEY_ID: process.env.AWS_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50af8794e3655c68 — Environment-variable access.
repo/packages/env/src/llm.ts:339 
      AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e573d4d78fe388cd — Environment-variable access.
repo/packages/env/src/llm.ts:340 
      AWS_SESSION_TOKEN: process.env.AWS_SESSION_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fff278fd03976bd9 — Environment-variable access.
repo/packages/env/src/llm.ts:342 
      ENABLED_WENXIN: !!process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #688dcdde27308c71 — Environment-variable access.
repo/packages/env/src/llm.ts:343 
      WENXIN_API_KEY: process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60fbabd165ec4968 — Environment-variable access.
repo/packages/env/src/llm.ts:345 
      ENABLED_OLLAMA: process.env.ENABLED_OLLAMA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24dce2da750e24df — Environment-variable access.
repo/packages/env/src/llm.ts:346 
      ENABLED_OLLAMA_CLOUD: !!process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cec406dd5303e88 — Environment-variable access.
repo/packages/env/src/llm.ts:347 
      OLLAMA_CLOUD_API_KEY: process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc7e4ab62403994f — Environment-variable access.
repo/packages/env/src/llm.ts:349 
      ENABLED_VLLM: !!process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9e12b3ae2543e14 — Environment-variable access.
repo/packages/env/src/llm.ts:350 
      VLLM_API_KEY: process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe669a28f25f713c — Environment-variable access.
repo/packages/env/src/llm.ts:352 
      ENABLED_XINFERENCE: !!process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5cf7c69924ae8b4 — Environment-variable access.
repo/packages/env/src/llm.ts:353 
      XINFERENCE_API_KEY: process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #308ebc2ffd6ff8c4 — Environment-variable access.
repo/packages/env/src/llm.ts:355 
      ENABLED_LMSTUDIO: !!process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e9bb76033170e57 — Environment-variable access.
repo/packages/env/src/llm.ts:356 
      LMSTUDIO_API_KEY: process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7e8726763a6e974 — Environment-variable access.
repo/packages/env/src/llm.ts:358 
      ENABLED_QINIU: !!process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac6e8b61a699715b — Environment-variable access.
repo/packages/env/src/llm.ts:359 
      QINIU_API_KEY: process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b86765dcd2bf88a — Environment-variable access.
repo/packages/env/src/llm.ts:361 
      ENABLED_QWEN: !!process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5deeed6592b540ca — Environment-variable access.
repo/packages/env/src/llm.ts:362 
      QWEN_API_KEY: process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #327f0b3f80a150aa — Environment-variable access.
repo/packages/env/src/llm.ts:364 
      ENABLED_STEPFUN: !!process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9c1b66610113363 — Environment-variable access.
repo/packages/env/src/llm.ts:365 
      STEPFUN_API_KEY: process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a030aaf055684bef — Environment-variable access.
repo/packages/env/src/llm.ts:367 
      ENABLED_NOVITA: !!process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c66a7dfeff29af4a — Environment-variable access.
repo/packages/env/src/llm.ts:368 
      NOVITA_API_KEY: process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edb8a1a29bb332a1 — Environment-variable access.
repo/packages/env/src/llm.ts:370 
      ENABLED_NVIDIA: !!process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b212034bee2b810 — Environment-variable access.
repo/packages/env/src/llm.ts:371 
      NVIDIA_API_KEY: process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4292c764793be12 — Environment-variable access.
repo/packages/env/src/llm.ts:373 
      ENABLED_BAICHUAN: !!process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db400aacc2671f66 — Environment-variable access.
repo/packages/env/src/llm.ts:374 
      BAICHUAN_API_KEY: process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d1f120dc9aa3aae — Environment-variable access.
repo/packages/env/src/llm.ts:376 
      ENABLED_TAICHU: !!process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #277ddfa883804ac3 — Environment-variable access.
repo/packages/env/src/llm.ts:377 
      TAICHU_API_KEY: process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e2d9be1c45dc476 — Environment-variable access.
repo/packages/env/src/llm.ts:380 
        !!process.env.CLOUDFLARE_API_KEY && !!process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5a4c9c10b7748e2 — Environment-variable access.
repo/packages/env/src/llm.ts:381 
      CLOUDFLARE_API_KEY: process.env.CLOUDFLARE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47cab0cdd40e9f2b — Environment-variable access.
repo/packages/env/src/llm.ts:382 
      CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID: process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d586833b2a4595cc — Environment-variable access.
repo/packages/env/src/llm.ts:384 
      ENABLED_AI360: !!process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6132aeaca399459f — Environment-variable access.
repo/packages/env/src/llm.ts:385 
      AI360_API_KEY: process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #091fbc3ee3f94fcd — Environment-variable access.
repo/packages/env/src/llm.ts:387 
      ENABLED_SILICONCLOUD: !!process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5831c17296d382d — Environment-variable access.
repo/packages/env/src/llm.ts:388 
      SILICONCLOUD_API_KEY: process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2301682b51c2ac9 — Environment-variable access.
repo/packages/env/src/llm.ts:390 
      ENABLED_GITEE_AI: !!process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fc920ebb125de79 — Environment-variable access.
repo/packages/env/src/llm.ts:391 
      GITEE_AI_API_KEY: process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d30f823e35fd7ae0 — Environment-variable access.
repo/packages/env/src/llm.ts:393 
      ENABLED_UPSTAGE: !!process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5101152fb345ff85 — Environment-variable access.
repo/packages/env/src/llm.ts:394 
      UPSTAGE_API_KEY: process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eb18bf410f5f364 — Environment-variable access.
repo/packages/env/src/llm.ts:396 
      ENABLED_SPARK: !!process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e822c3dff856063 — Environment-variable access.
repo/packages/env/src/llm.ts:397 
      SPARK_API_KEY: process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29a9e9fe507eca6d — Environment-variable access.
repo/packages/env/src/llm.ts:399 
      ENABLED_AI21: !!process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5e8d9d7a2f20d80 — Environment-variable access.
repo/packages/env/src/llm.ts:400 
      AI21_API_KEY: process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a9c8998f6e239e4 — Environment-variable access.
repo/packages/env/src/llm.ts:402 
      ENABLED_HUNYUAN: !!process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43d94b7d1b104426 — Environment-variable access.
repo/packages/env/src/llm.ts:403 
      HUNYUAN_API_KEY: process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ac58db0216c57ae — Environment-variable access.
repo/packages/env/src/llm.ts:405 
      ENABLED_HUGGINGFACE: !!process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7f44e47920b1ce4 — Environment-variable access.
repo/packages/env/src/llm.ts:406 
      HUGGINGFACE_API_KEY: process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b319cafc972b2e46 — Environment-variable access.
repo/packages/env/src/llm.ts:408 
      ENABLED_SENSENOVA: !!process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9b0461f734ae819 — Environment-variable access.
repo/packages/env/src/llm.ts:409 
      SENSENOVA_API_KEY: process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dcf0871d96cf593 — Environment-variable access.
repo/packages/env/src/llm.ts:411 
      ENABLED_XAI: !!process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3c65b83300b9304 — Environment-variable access.
repo/packages/env/src/llm.ts:412 
      XAI_API_KEY: process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #435008fede7cd2b4 — Environment-variable access.
repo/packages/env/src/llm.ts:414 
      ENABLED_INTERNLM: !!process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16040690debc7c2c — Environment-variable access.
repo/packages/env/src/llm.ts:415 
      INTERNLM_API_KEY: process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a55f79613724278 — Environment-variable access.
repo/packages/env/src/llm.ts:417 
      ENABLED_HIGRESS: !!process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a48e5a340e201e54 — Environment-variable access.
repo/packages/env/src/llm.ts:418 
      HIGRESS_API_KEY: process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1f12cb626b6e39e — Environment-variable access.
repo/packages/env/src/llm.ts:420 
      ENABLED_TENCENT_CLOUD: !!process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75e5ad90dd92b5d5 — Environment-variable access.
repo/packages/env/src/llm.ts:421 
      TENCENT_CLOUD_API_KEY: process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3eee93f0d716d2c — Environment-variable access.
repo/packages/env/src/llm.ts:423 
      ENABLED_JINA: !!process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b3bf47c5fc4f140 — Environment-variable access.
repo/packages/env/src/llm.ts:424 
      JINA_API_KEY: process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0eb5463201010176 — Environment-variable access.
repo/packages/env/src/llm.ts:426 
      ENABLED_SAMBANOVA: !!process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c85c6a044350833d — Environment-variable access.
repo/packages/env/src/llm.ts:427 
      SAMBANOVA_API_KEY: process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19377f5a1aee9eae — Environment-variable access.
repo/packages/env/src/llm.ts:429 
      ENABLED_PPIO: !!process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92dc9420eced910b — Environment-variable access.
repo/packages/env/src/llm.ts:430 
      PPIO_API_KEY: process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86cbb00f64c0c6c3 — Environment-variable access.
repo/packages/env/src/llm.ts:432 
      ENABLED_SEARCH1API: !!process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f6650e8dc9cdfd5 — Environment-variable access.
repo/packages/env/src/llm.ts:433 
      SEARCH1API_API_KEY: process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27ca2708d7ec11fd — Environment-variable access.
repo/packages/env/src/llm.ts:435 
      ENABLED_COHERE: !!process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab9e19ef8b5c1164 — Environment-variable access.
repo/packages/env/src/llm.ts:436 
      COHERE_API_KEY: process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8ff92c4faf26522 — Environment-variable access.
repo/packages/env/src/llm.ts:438 
      ENABLED_INFINIAI: !!process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36736aa0698290f1 — Environment-variable access.
repo/packages/env/src/llm.ts:439 
      INFINIAI_API_KEY: process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d456bd52aa8e211e — Environment-variable access.
repo/packages/env/src/llm.ts:441 
      ENABLED_FAL: process.env.ENABLED_FAL !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b48afd0989a576b — Environment-variable access.
repo/packages/env/src/llm.ts:442 
      FAL_API_KEY: process.env.FAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1165897ed255a769 — Environment-variable access.
repo/packages/env/src/llm.ts:444 
      ENABLED_BFL: !!process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a9e9098acfaf5e2 — Environment-variable access.
repo/packages/env/src/llm.ts:445 
      BFL_API_KEY: process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94be3cae98a15b7e — Environment-variable access.
repo/packages/env/src/llm.ts:447 
      ENABLED_COMFYUI: process.env.ENABLED_COMFYUI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5350add6a726abac — Environment-variable access.
repo/packages/env/src/llm.ts:448 
      COMFYUI_BASE_URL: process.env.COMFYUI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7e7fde4cb323999 — Environment-variable access.
repo/packages/env/src/llm.ts:449 
      COMFYUI_AUTH_TYPE: process.env.COMFYUI_AUTH_TYPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0deece55a6df3fc6 — Environment-variable access.
repo/packages/env/src/llm.ts:450 
      COMFYUI_API_KEY: process.env.COMFYUI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3230a7d56e946773 — Environment-variable access.
repo/packages/env/src/llm.ts:451 
      COMFYUI_USERNAME: process.env.COMFYUI_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77bf15ee0770bbc7 — Environment-variable access.
repo/packages/env/src/llm.ts:452 
      COMFYUI_PASSWORD: process.env.COMFYUI_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #893003a267500dda — Environment-variable access.
repo/packages/env/src/llm.ts:453 
      COMFYUI_CUSTOM_HEADERS: process.env.COMFYUI_CUSTOM_HEADERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b6c938faf90d26f — Environment-variable access.
repo/packages/env/src/llm.ts:455 
      ENABLED_MODELSCOPE: !!process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58be288df10dc1a3 — Environment-variable access.
repo/packages/env/src/llm.ts:456 
      MODELSCOPE_API_KEY: process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e964a9762d88cf0a — Environment-variable access.
repo/packages/env/src/llm.ts:458 
      ENABLED_V0: !!process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2773799db5e35796 — Environment-variable access.
repo/packages/env/src/llm.ts:459 
      V0_API_KEY: process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83f173af1d28c2a7 — Environment-variable access.
repo/packages/env/src/llm.ts:461 
      ENABLED_VERCELAIGATEWAY: !!process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8077ce2fd5b0202 — Environment-variable access.
repo/packages/env/src/llm.ts:462 
      VERCELAIGATEWAY_API_KEY: process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7862b9301286e42 — Environment-variable access.
repo/packages/env/src/llm.ts:464 
      ENABLED_AI302: !!process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c48d6e73bf10aab — Environment-variable access.
repo/packages/env/src/llm.ts:465 
      AI302_API_KEY: process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bc4279120cfbfb2 — Environment-variable access.
repo/packages/env/src/llm.ts:467 
      ENABLED_AKASHCHAT: !!process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62cc5b1adbf69aae — Environment-variable access.
repo/packages/env/src/llm.ts:468 
      AKASHCHAT_API_KEY: process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f4c5e77a18c5a23 — Environment-variable access.
repo/packages/env/src/llm.ts:470 
      ENABLED_COMETAPI: !!process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26f1c5b1276ed9fb — Environment-variable access.
repo/packages/env/src/llm.ts:471 
      COMETAPI_KEY: process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49f1ab90fae86d6b — Environment-variable access.
repo/packages/env/src/llm.ts:473 
      ENABLED_AIHUBMIX: !!process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #530c9f2991b110ca — Environment-variable access.
repo/packages/env/src/llm.ts:474 
      AIHUBMIX_API_KEY: process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8f7a65846bd81bf — Environment-variable access.
repo/packages/env/src/llm.ts:475 
      AIHUBMIX_PROXY_URL: process.env.AIHUBMIX_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebee77b14e4c39b8 — Environment-variable access.
repo/packages/env/src/llm.ts:477 
      ENABLED_NEWAPI: !!process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f804ff67a892cc71 — Environment-variable access.
repo/packages/env/src/llm.ts:478 
      NEWAPI_API_KEY: process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0cfc239218a2549 — Environment-variable access.
repo/packages/env/src/llm.ts:479 
      NEWAPI_PROXY_URL: process.env.NEWAPI_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae5be60402606240 — Environment-variable access.
repo/packages/env/src/llm.ts:481 
      ENABLED_NEBIUS: !!process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #999f2b31ad0d0347 — Environment-variable access.
repo/packages/env/src/llm.ts:482 
      NEBIUS_API_KEY: process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3ab85831032e2e2 — Environment-variable access.
repo/packages/env/src/llm.ts:484 
      ENABLED_CEREBRAS: !!process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb2127ab8ceb4a4f — Environment-variable access.
repo/packages/env/src/llm.ts:485 
      CEREBRAS_API_KEY: process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87141d361bcde536 — Environment-variable access.
repo/packages/env/src/llm.ts:487 
      ENABLED_ZENMUX: !!process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fca667f50e7f113 — Environment-variable access.
repo/packages/env/src/llm.ts:488 
      ZENMUX_API_KEY: process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2de5a33b9d52536 — Environment-variable access.
repo/packages/env/src/llm.ts:490 
      ENABLED_STRAICO: !!process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6d10318a6c1e4a8 — Environment-variable access.
repo/packages/env/src/llm.ts:491 
      STRAICO_API_KEY: process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #777be07deb981880 — Environment-variable access.
repo/packages/env/src/llm.ts:493 
      ENABLED_LOBEHUB: !!process.env.ENABLED_LOBEHUB,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83a8d7bb560d8004 — Environment-variable access.
repo/packages/env/src/llm.ts:495 
      ENABLED_OPENCODEZEN: !!process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64551283f76e2863 — Environment-variable access.
repo/packages/env/src/llm.ts:496 
      OPENCODEZEN_API_KEY: process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e90c3781db83a06b — Environment-variable access.
repo/packages/env/src/llm.ts:498 
      ENABLED_OPENCODECODINGPLAN: !!process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de1e448b2c6b786a — Environment-variable access.
repo/packages/env/src/llm.ts:499 
      OPENCODECODINGPLAN_API_KEY: process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb2692acb2f016a5 — Environment-variable access.
repo/packages/env/src/llm.ts:501 
      ENABLED_XIAOMIMIMO: !!process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0711272a41bf32b — Environment-variable access.
repo/packages/env/src/llm.ts:502 
      XIAOMIMIMO_API_KEY: process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #688e6686619a6a0a — Environment-variable access.
repo/packages/env/src/llm.ts:504 
      ENABLED_LONGCAT: !!process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57dcd2fa2db84b20 — Environment-variable access.
repo/packages/env/src/llm.ts:505 
      LONGCAT_API_KEY: process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67c53fc058de4b5a — Environment-variable access.
repo/packages/env/src/llm.ts:507 
      ENABLED_STREAMLAKE: !!process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa0f994e4b62b2f9 — Environment-variable access.
repo/packages/env/src/llm.ts:508 
      STREAMLAKE_API_KEY: process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b8f9f143471135b — Environment-variable access.
repo/packages/env/src/llm.ts:510 
      ENABLED_ANTGROUP: !!process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90ecd3f156534cdb — Environment-variable access.
repo/packages/env/src/llm.ts:511 
      ANTGROUP_API_KEY: process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #197dc1cfd6ab9f13 — Environment-variable access.
repo/packages/env/src/python.ts:12 
      NEXT_PUBLIC_PYODIDE_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57f6e4fe53bcc621 — Environment-variable access.
repo/packages/env/src/python.ts:13 
      NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71e5b60e02fb64cf — Environment-variable access.
repo/packages/env/src/redis.ts:23 
      REDIS_DATABASE: parseNumber(process.env.REDIS_DATABASE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50c1cc7e51033758 — Environment-variable access.
repo/packages/env/src/redis.ts:24 
      REDIS_PASSWORD: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93009aa0f162a6d1 — Environment-variable access.
repo/packages/env/src/redis.ts:25 
      REDIS_PREFIX: process.env.REDIS_PREFIX || 'lobechat',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c926cbf251a760a — Environment-variable access.
repo/packages/env/src/redis.ts:26 
      REDIS_TLS: parseRedisTls(process.env.REDIS_TLS),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16d8c4e2fb31a8e9 — Environment-variable access.
repo/packages/env/src/redis.ts:27 
      REDIS_URL: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f2a803b55697990 — Environment-variable access.
repo/packages/env/src/redis.ts:28 
      REDIS_USERNAME: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4f84076fd6d4386 — Environment-variable access.
repo/packages/env/src/sandbox.ts:9 
      ONLYBOXES_BASE_URL: process.env.ONLYBOXES_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5bf7757509b9aa7 — Environment-variable access.
repo/packages/env/src/sandbox.ts:10 
      ONLYBOXES_JIT_ISSUER: process.env.ONLYBOXES_JIT_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7d95442617051fc — Environment-variable access.
repo/packages/env/src/sandbox.ts:11 
      ONLYBOXES_JIT_SIGNING_KEY: process.env.ONLYBOXES_JIT_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #252fce608ab7443d — Environment-variable access.
repo/packages/env/src/sandbox.ts:12 
      ONLYBOXES_JIT_TTL_SEC: process.env.ONLYBOXES_JIT_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b72d58d296d98b5 — Environment-variable access.
repo/packages/env/src/sandbox.ts:13 
      ONLYBOXES_LEASE_TTL_SEC: process.env.ONLYBOXES_LEASE_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55448fe5bf3acfd5 — Environment-variable access.
repo/packages/env/src/sandbox.ts:14 
      SANDBOX_PROVIDER: process.env.SANDBOX_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aff393290986a019 — Environment-variable access.
repo/packages/env/src/tools.ts:13 
      CRAWL_CONCURRENCY: process.env.CRAWL_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0cfcfcb54f95b8a — Environment-variable access.
repo/packages/env/src/tools.ts:14 
      CRAWLER_RETRY: process.env.CRAWLER_RETRY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d109a2967cb6c8f — Environment-variable access.
repo/packages/env/src/tools.ts:15 
      CRAWLER_IMPLS: process.env.CRAWLER_IMPLS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81ecd932052ae8db — Environment-variable access.
repo/packages/env/src/tools.ts:16 
      JINA_USE_CN_DOMAINS: process.env.JINA_USE_CN_DOMAINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bda0e40c6bd5623 — Environment-variable access.
repo/packages/env/src/tools.ts:17 
      SEARCH_PROVIDERS: process.env.SEARCH_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9156e4a399916f87 — Environment-variable access.
repo/packages/env/src/tools.ts:18 
      SEARXNG_URL: process.env.SEARXNG_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b32b18227ad9159e — Environment-variable access.
repo/packages/env/src/tools.ts:19 
      VISUAL_UNDERSTANDING_MODEL: process.env.VISUAL_UNDERSTANDING_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #171064d2141c96fc — Environment-variable access.
repo/packages/env/src/tools.ts:20 
      VISUAL_UNDERSTANDING_PROVIDER: process.env.VISUAL_UNDERSTANDING_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a6d14ef9113dd0df — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:11 
  const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14fc7e3ec7a83010 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:29 
  const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7d1938085e07ce2e — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:50 
  const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a38dd36dd9682215 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:68 
    const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4c2818a4ce36b351 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:75 
    const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88b85c6500970b19 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:81 
    const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fac27e9bd1255a8 — Filesystem access.
repo/packages/file-loaders/src/loadFile.test.ts:49 
      await writeFile(file, Buffer.from([80, 75, 3, 4, 0, 0]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bf77e170c5757bd — Filesystem access.
repo/packages/file-loaders/src/loaders/docx/index.ts:19 
      const buffer = await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #065208184939986c — Filesystem access.
repo/packages/file-loaders/src/loaders/excel/index.ts:63 
      const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f246db66dfbab4c7 — Filesystem access.
repo/packages/file-loaders/src/loaders/pdf/index.ts:27 
    const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47b59d8f821a0f38 — Filesystem access.
repo/packages/file-loaders/src/loaders/text/index.ts:16 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a6c863074525888 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:87 
    await writeFile(filePath, 'a'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e15d5c24bbe9183 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:95 
    await writeFile(
      filePath,
      Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00, 0x00, 0x0d]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c28e615442ecf40a — Filesystem access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:8 
  const raw = await readFile(new URL(`./__fixtures__/codex/${name}`, import.meta.url), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #685722a0b5c87f5d — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:181 
    const previousTimezone = process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f479a33a173dff6 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:182 
    process.env.TZ = 'Asia/Shanghai';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e77085829de6b389 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:208 
        delete process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0ed1f27a6f5c9bc — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:210 
        process.env.TZ = previousTimezone;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d315dde6c0ca76c0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/claudeAgentSdkSession.ts:16 
  const raw = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a7850a475e41d45 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/cliSpawn.ts:187 
    const source = await readFile(shimPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a937f93ad6ac915 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:24 
    await writeFile(updatePath, 'hello\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #706dc646d493f034 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:40 
    await writeFile(updatePath, 'hello\nappended line\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e7b9fcea7cc34f0 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:41 
    await writeFile(addPath, 'line one\nline two\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #908e2ce26ea2248a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:84 
    await writeFile(updatePath, 'line one\nline two\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff78e1a5e242890f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:97 
    await writeFile(updatePath, 'line one\nline two updated\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5e3bfc95e758f27 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:124 
    await writeFile(beforePath, 'content\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc9865a0bfc8ae61 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:164 
    await writeFile(absolutePath, 'before\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0dcb11d58e386583 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:177 
    await writeFile(absolutePath, 'before\nafter\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d8b2a5d1a02aa8a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:218 
    await writeFile(addPath, '++leading content\n+++header lookalike\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #298d657566806cc5 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.ts:64 
      content: await readFile(filePath, 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2eb0f4ce3478d5a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:38 
    await writeFile(
      path.join(codexHome, 'config.toml'),
      [
        'model = "gpt-5.4"',
        '',
        '[profiles.fast]',
        'model = "gpt-5.5-mini"',
        '',
        '[profiles."quoted.name"]',
        'model = "gpt-5.5"',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56851395c809726e — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:76 
    await writeFile(path.join(codexHome, 'config.toml'), 'model = "gpt-5.4"\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #431d3a1455e5b81d — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:94 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-123.jsonl'),
      [
        JSON.stringify({ payload: { model_provider: 'openai' }, type: 'session_meta' }),
        JSON.stringify({ payload: { model_context_window: 258_400 }, type: 'turn_context' }),
        JSON.stringify({ payload: { model: 'gpt-5.5' }, type: 'event_msg' }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d627a0903607b8ab — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:117 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-usage.jsonl'),
      [
        JSON.stringify({
          payload: {
            info: {
              total_token_usage: {
                cached_input_tokens: 5,
                input_tokens: 25,
                output_tokens: 9,
                reasoning_output_tokens: 4,
              },
            },
            type: 'token_count',
            usage: { input_tokens: 100, output_tokens: 100 },
          },
          type: 'event_msg',
          usage: { input_tokens: 200, output_tokens: 200 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bd8aefa18a7dd26 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:158 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-legacy-usage.jsonl'),
      [
        JSON.stringify({
          payload: { usage: { input_tokens: 10, output_tokens: 2 } },
          type: 'event_msg',
        }),
        JSON.stringify({
          type: 'turn.completed',
          usage: { cached_input_tokens: 5, input_tokens: 25, output_tokens: 9 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5628a80bfd507554 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:189 
    const config = await readFile(path.join(getCodexHome(env, homeDir), 'config.toml'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a99fc9f103c5fc4 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:275 
  const content = await readFile(sourceFile, 'utf8').catch(() => undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8016ca41b8dbb13 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:67 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30b7b216b5bf23dd — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:197 
      const written = await readFile(imagePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ded68222b13ac9ec — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:203 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d735400be816cbc0 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:137 
      const meta = JSON.parse(await readFile(metaPath, 'utf8')) as { mediaType?: string };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #830cf0a263dbac83 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:138 
      const buffer = await readFile(dataPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20a3fe556e3a97d5 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:158 
    await writeFile(path.join(cacheDir, key), buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cc76a8a7a345a3f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:159 
    await writeFile(
      path.join(cacheDir, `${key}.meta`),
      JSON.stringify({ id: source.id, mediaType }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #880e160e36599584 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:169 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1703371b857d05a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:238 
    await writeFile(filePath, image.buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bb7fea1d9dcd494 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:79 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fbcd46fbc074a0e — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:80 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13197bf545dbc256 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:82 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8707b4f62c3a567d — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:83 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ca4dd6509d3b099 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:102 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #290bfb8076a62cfb — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:103 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2acaf5e914340f7f — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:104 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd565f0eb125dcac — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:109 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d36f170cfed70fc — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:110 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a44af6d039414150 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:111 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bad2717d2a9c45a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:112 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dfd3389339dbd97 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:129 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08edca7e116f93e0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:130 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd30dc730eae6a1a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:131 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33aa37810c50bd6a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:136 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #701eb4a1bba45f04 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:137 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c6b54ab6418e0cf — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:138 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f5a1b7a4938a35d — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:139 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b944877ec24a693 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:152 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2473e13d6117a7e9 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:153 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77f086fbcd337492 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:154 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd897ed2ad054374 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:159 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce1d66e88fd39842 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:160 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f64f8dfe02d73b91 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:161 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e185a658b5554a5 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:162 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89e619fa0885d30c — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:179 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d20b9ba766c69ba0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:180 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16de49ad26c16438 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:250 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6afb2456fc826a32 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:251 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #012eba97f1c7a5aa — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:252 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a02ba78e6a19bc8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:253 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b41429cb9eaa2a8b — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:267 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcf02ad449d3557b — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:268 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32ab1b17d3ec899a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:273 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4606e66e250c41ac — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:274 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6f50438ea295478 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:277 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ffd3c73bfde2ae8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:278 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15b9b2f74b2ad596 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:293 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24566d189ec5fc44 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:294 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b107507fc38ae255 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:295 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f34aa392f6f5cf17 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:79 
  const shell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7d2f510a2256a40 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:153 
    const lookupPath = mergePathValues(shellPath, process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5a820e666154527 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:155 
    if (lookupPath && lookupPath !== process.env.PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3579c5619b606b8f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:248 
    const realCodexFixture = await readFile(
      new URL('../adapters/__fixtures__/codex/collab_tool_call.spawn_wait.jsonl', import.meta.url),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c057204ee2e5214 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:256 
    await writeFile(
      path.join(sessionDir, `rollout-2026-06-11T01-31-27-${threadId}.jsonl`),
      JSON.stringify({
        type: 'turn.completed',
        usage: { cached_input_tokens: 42_000, input_tokens: 51_000, output_tokens: 300 },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93a625e6a5c54e19 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:44 
    const raw = await fs.readFile(path.join(dir, jsonFiles[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #962ec8ed4490ebf5 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:65 
    const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ec765b98bfbc44f — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:36 
    await fs.writeFile(filePath, JSON.stringify(record, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52dfbf22251e2736 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:47 
      const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5597d269085ab65 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:63 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f1e9518f20e473d — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:91 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e11d83e28c9c246 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:106 
      const content = await fs.readFile(real, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6eae3e445ed46b5 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:115 
      const content = await fs.readFile(files[0].fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8353592166013532 — Filesystem access.
repo/packages/local-file-shell/src/contentSearch/base.ts:185 
        const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ac004ae862ad089b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:37 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #86597b1cf92c7a92 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:51 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #660a2d150396d819 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:62 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #604347a29731ff1a — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:81 
      await writeFile(filePath, 'const x = 1;');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3b88d7e3ff9505e4 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:89 
      await writeFile(filePath, 'all: build');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #86cdf8fe5bec79bb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:97 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #221d051929d86bd9 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:106 
      await writeFile(filePath, 'A'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b2ea861a28521e88 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:119 
        await writeFile(filePath, 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa5c9d25cb1212c8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:129 
      await writeFile(filePath, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #13a7969977b9c7ff — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:138 
      await writeFile(filePath, 'A'.repeat(27_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69f9b76c65065ba3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:152 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10252bf4f6055bd0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:163 
      await writeFile(filePath, 'a'.repeat(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f9a8eb3a642449b3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:173 
      await writeFile(filePath, "module.exports = { hello: 'world' };\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4f7156ce965bade1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:189 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1aa349ff5c0c8cc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:197 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('nested');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a08c818906ba934d — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:221 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a19f25058fbe70e8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:231 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #346bde74a5266fcb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:239 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #994c88d21421f0a0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:250 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhi again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4b63098452b72d8c — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:255 
      await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5165367610bf6e33 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:269 
      await writeFile(filePath, 'price is $10.00 and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6e1ed306ab8da610 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:279 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('price is $XX.XX and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ab2e11dc22bda0cc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:295 
      await writeFile(filePath, 'line1\nline2\nline3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #20056e5acedd7daa — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:310 
      await writeFile(filePath, 'line1\r\nline2\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aa621e3c787d0282 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:322 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('lineA\r\nlineB\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ddbac7eb22f73918 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:327 
      await writeFile(filePath, 'a\r\nb\r\na\r\nb\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4ea6c2eabc73773 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:338 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('x\r\ny\r\nx\r\ny\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #079a6646d587c413 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:346 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b57356d45e244372 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:347 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d7b8f19446115859 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:361 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8702dac6275b7db7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:362 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41f8520c4258ab37 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:363 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #723c7504ed071ffc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:376 
      await writeFile(path.join(tmpDir, 'small.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #152bbec609caf6d5 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:377 
      await writeFile(path.join(tmpDir, 'large.txt'), 'x'.repeat(1000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #81856738f161e0bc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:389 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a825b2e9928e8c86 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:390 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ac3c32fdb2116113 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:391 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e347be74892d6035 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:431 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0104724b77e9180 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:445 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1dd61b472da9bf1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:471 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eeee6e0fb8d4ef04 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:487 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bbc34f727fa3afd2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:512 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c1d5e04a55ab9e7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:531 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d2da865ee1fb7d8e — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:532 
      await writeFile(path.join(tmpDir, 'b.ts'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fd684b4e2bdf4d87 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:533 
      await writeFile(path.join(tmpDir, 'c.js'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #983f85ca87431e0f — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:544 
      await writeFile(path.join(tmpDir, 'node_modules', 'pkg', 'index.ts'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b663ba474f27d86 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:545 
      await writeFile(path.join(tmpDir, 'src.ts'), 'y');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3ed6a50251914684 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:554 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'ci.yml'), 'name: ci');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #352373fa688fb1f1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:555 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'release.yaml'), 'name: release');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9cf71d9288abbd1b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:569 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0151527161026068 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:577 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8d2aadb99c3df6a2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:589 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6bd3afe5c6fa4c50 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:599 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #93defda33f902433 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:607 
      await writeFile(path.join(tmpDir, 'empty.txt'), 'nothing here');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f124ac884edbe052 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:641 
      await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9279a0d919763153 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:642 
      await writeFile(path.join(tmpDir, 'config.yaml'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c5ce2fa10abf8f3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:643 
      await writeFile(path.join(tmpDir, 'readme.md'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #813fef9d68c66249 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:653 
        await writeFile(path.join(tmpDir, `file${i}.log`), `content ${i}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef6c2b1353b0a24e — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:675 
      await writeFile(path.join(tmpDir, '.env'), 'A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c4fec0c834bfd426 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:676 
      await writeFile(path.join(tmpDir, '.envrc'), 'export A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5a4fd7d8864253f5 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:677 
      await writeFile(path.join(tmpDir, 'env.txt'), 'unrelated');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f5b97130bf26904 — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:17 
    const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5de5d9ff4a1e5f01 — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:61 
    await writeFile(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44084d3e673a6a59 — Filesystem access.
repo/packages/local-file-shell/src/file/search.ts:42 
          const content = await readFile(file.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #408e07558fd00549 — Filesystem access.
repo/packages/local-file-shell/src/file/write.ts:20 
    await writeFile(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #612cab070983b040 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:33 
  await writeFile(path.join(dir, 'a.txt'), 'hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e60bc642476ef7eb — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:104 
    await writeFile(path.join(linked, 'new.txt'), 'new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #90dc987f528fe26d — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:242 
    await writeFile(path.join(repo, 'a.txt'), 'hello\nworld\n'); // modify tracked

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1ec87f33e391416 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:243 
    await writeFile(path.join(repo, 'new.txt'), 'fresh\n'); // untracked add

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #512548b5ac3fd5a5 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:271 
    await writeFile(path.join(repo, 'a.txt'), 'tampered\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #254452b50b03745d — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:273 
    expect(await readFile(path.join(repo, 'a.txt'), 'utf8')).toBe('hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #52c08dbd478d6664 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:277 
    await writeFile(path.join(repo, 'junk.txt'), 'x\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13d123cbc4d3a0f5 — Filesystem access.
repo/packages/local-file-shell/src/git/info.ts:126 
    const head = (await readFile(`${gitDir}/HEAD`, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09d72bddde7d0681 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:12 
    const content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b4014dd95fdca21 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:40 
    const commondir = (await readFile(path.join(gitDir, 'commondir'), 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fdc0b4eb1535f83 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:62 
    const config = await readFile(path.join(commonDir, 'config'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2277e6d9b3f5e722 — Filesystem access.
repo/packages/local-file-shell/src/git/workingTree.ts:238 
    buf = await readFile(absolute);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #673747260ee1f015 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 
const baseUrl = process.env.MEMORY_USER_MEMORY_LOBEHUB_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f63abc65434a0e02 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:8 
const benchmarkLoCoMoFile = process.env.MEMORY_USER_MEMORY_BENCHMARKS_LOCOMO_DATASETS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6ba3ecb7d280a5f9 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:9 
const webhookExtraHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #cac9e922b046f6f2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 · flow /tmp/closeopen-yp75nq7n/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 → /tmp/closeopen-yp75nq7n/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 
  const res = await fetch(new URL(path, baseUrl).toString(), {
    body: JSON.stringify(body),
    headers: {
      'Content-Type': 'application/json',
      ...webhookHeaders,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #1cde591331fab1eb — Filesystem access.
repo/packages/memory-user-memory/src/converters/locomo.ts:176 
  const raw = readFileSync(absPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b486914121b2aab2 — Filesystem access.
repo/packages/model-bank/src/exports.test.ts:12 
  const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab3f0a00674fc91c — Environment-variable access.
repo/packages/model-runtime/src/core/RouterRuntime/createRuntime.ts:250 
      if (process.env.NODE_ENV !== 'development') return effectiveUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62073a83ce782df5 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:25 
const originalAnthropicClientTimeout = process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f157b2820edf1224 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:29 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bb4a03e0a6dc1a0 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:31 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = originalAnthropicClientTimeout;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df1e4fc9316f8240 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:68 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ea90b38a7a12f0a — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:81 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70238ae6ed8f9498 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:91 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #882dcccace7539b5 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:96 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = 'invalid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c774f85cebec8b75 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:106 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54be4b2e36d03b8b — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:111 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4678f169db470ed7 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:124 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bdfd1776839a347 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:66 
  const timeout = Number(process.env[ANTHROPIC_CLIENT_TIMEOUT_ENV]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a8149a266ca3fa3 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:275 
  const betaHeaders = process.env.ANTHROPIC_BETA_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8f806fc8255f762 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/anthropic.ts:479 
  const maxUses = process.env.ANTHROPIC_MAX_USES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ce34b7f716da721 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:39 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2844f0133c4f8a48 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:64 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4bc20117a3014d0 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:80 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #769be1581efd354b — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:104 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ce155fa2fbb98bc — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:127 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd531b63bd7bb660 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:131 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17ae7b91f1536038 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:147 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e0329b7e6da0c09 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:171 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #733fbc41a84d3ea6 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:185 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71cbb174ddae7b2d — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:219 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe29cafc7e34fb5d — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:238 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2fc7b537a972ff0 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:937 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc0216c508cf3d7b — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:979 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76a1143c0ddc706b — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:45 
      options?.forceImageBase64 || process.env.LLM_VISION_IMAGE_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d881303755593c4 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:61 
      options?.forceVideoBase64 || process.env.LLM_VISION_VIDEO_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #060ff22dc66a69e2 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:43 
    chatCompletion: () => process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85acf0aaa36b2215 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1664 
        const originalDebugValue = process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1afc979cbfaa5703 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1667 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8af84a23d0a4eedc — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1683 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1da0b2b4fd5a1369 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:338 
          const originalDebugValue = process.env[debugEnv];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1387354aca746e36 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:340 
          process.env[debugEnv] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03463afbd6862133 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:356 
          process.env[debugEnv] = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6a1e91ded269e80 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai21/index.ts:16 
    chatCompletion: () => process.env.DEBUG_AI21_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3261cc11f32090a5 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai302/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AI302_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4caf18113d848814 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:34 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e1dae7d4824c25f — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:40 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb75308f2bc78065 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:43 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9610d0c23517efd — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:47 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a87a33e182b9b971 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:50 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dbdd6c6169c0bde — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.ts:39 
    chatCompletion: () => process.env.DEBUG_AI360_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01122d9a1b15b03b — Environment-variable access.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:156 
    chatCompletion: () => process.env.DEBUG_AIHUBMIX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eeb42391ec8cdc97 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:68 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b15ce1f8d97b322 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:74 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb03c809376040fd — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:77 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51d7f781721e7c15 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:81 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #add8cdd01bfceded — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:84 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d55e096f6ea7df9 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AKASH_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d4411c5a140815d — Environment-variable access.
repo/packages/model-runtime/src/providers/antgroup/index.ts:22 
    chatCompletion: () => process.env.DEBUG_ANTGROUP_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9eeb659108a1f79 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:262 
      const originalDebugValue = process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23326e75eedc19f5 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:264 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aece7fe781a5672a — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:278 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b63c0ac4f8e2185f — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.ts:23 
    chatCompletion: () => process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2882d8bbee188a69 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:436 
        process.env.DEBUG_AZURE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1b03656c7a9aa70 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:451 
        delete process.env.DEBUG_AZURE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e9dc1ec95215557 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:19 
const azureSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19e6b464c1d3aa20 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:141 
    chatCompletion: () => process.env.DEBUG_AZURE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9d69ba77b2a3292 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:142 
    responses: () => process.env.DEBUG_AZURE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed0ebd84ba1a0b61 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureai/index.ts:115 
        if (process.env.DEBUG_AZURE_AI_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa875389e0d75066 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:45 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77b6f2876e25912f — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:51 
      process.env.DEBUG_BAICHUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cf7cb12a79857f4 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:54 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee65140e3d59d2f5 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:110 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc65d87c89f8dbe8 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:124 
      process.env.BAICHUAN_SEARCH_MODE = 'quality_first';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #244dd334794f26a1 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:136 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #609d3309b6800cc6 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:30 
                search_mode: process.env.BAICHUAN_SEARCH_MODE || 'performance_first', // performance_first or quality_first

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e22b841771edf8a — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:56 
    chatCompletion: () => process.env.DEBUG_BAICHUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4ba4a0b8981d35b — Environment-variable access.
repo/packages/model-runtime/src/providers/bailianCodingPlan/index.ts:45 
    chatCompletion: () => process.env.DEBUG_BAILIAN_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a49185edbdb55a53 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:569 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ad51d528cc281db — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:583 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f110fa97a195896 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:973 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #812a77e1e67f08e4 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:987 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04164a233b05e6d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:372 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eba778acf608f24b — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:433 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #321c25aec0f6aabb — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:66 
      delete process.env.DEBUG_CEREBRAS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3517a3fcfd15ac7e — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:72 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01781e9e08f0e11a — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:78 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b10d730cb43c46dc — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:84 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b34b01295dad82e7 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.ts:21 
    chatCompletion: () => process.env.DEBUG_CEREBRAS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a947cbe54ada8570 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:255 
      const originalDebugValue = process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9ef82d9ae98c714 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:257 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53b871c41376a4dd — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:271 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff3be2b0e9e0bb0a — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:136 
    if (process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aa4a436331dd0cd — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:44 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #210bc9280e4fe552 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:50 
      process.env.DEBUG_COHERE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7455eea8018e4cd3 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:53 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57242605fcdef15f — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.ts:42 
    chatCompletion: () => process.env.DEBUG_COHERE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4689771b63f773d — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:49 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb64fc140e5b3b68 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:55 
      process.env.DEBUG_COMETAPI_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37fc24e070b4502c — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:58 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #082d0446ced649cb — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.ts:27 
    chatCompletion: () => process.env.DEBUG_COMETAPI_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b8a40c06c5588301 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:49 
      const originalEnv = process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88d5e71f2c331b78 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:50 
      process.env.COMFYUI_DEFAULT_URL = 'https://env.comfyui.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5abba06f69529724 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:58 
        delete process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2abddf98157afdbf — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:60 
        process.env.COMFYUI_DEFAULT_URL = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f6d590887c3776c9 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:202 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bad2a7801a6cd8a6 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:203 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8ceea506d8e88363 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:204 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #deed3f0b98a8b32a — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:205 
      process.env.APP_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #665d452bf14709af — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:237 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #39aa678778e17a23 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:239 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #757105890bca85b4 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:242 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #010199f6e7e187f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:244 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59a207b8af1d1713 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:261 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #de86269dcfcc6839 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:262 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #70cbac7edd03aa0f — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:263 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #89a2d39f5f1ad9d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:264 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69dd7ae444c0a6ef — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:274 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3e2444cbe68bdaeb — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:276 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e07fd5ce49cfe76 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:279 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7405ea14ed6219f0 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:281 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ebf1a5f0fa524bb8 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:300 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a219bf692c28a798 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:301 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d06efaad1d3cba98 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:302 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #97bcb136c1441272 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:303 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9378403059b68f2e — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:304 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #97b303a6f9c50cd1 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:305 
      process.env.PORT = '3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a0454491713fa59b — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:317 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8905398c20a41e5d — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:320 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5eb28feeebd95315 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:323 
        delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21fb73ba0c8c23cf — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:325 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c5f2e49b146ba2d — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:344 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69eef94a2d3f6186 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:345 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7cd543ae810ba017 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:346 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #334f554682ee1740 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:347 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8f4b8e02485d204 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:348 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #de3655c629b07871 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:349 
      delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cd9735a91a0c7a74 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:361 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2c7c0a6359e5b2e2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:364 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8aeb0bc5667ad2bc — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:367 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b11c19dde897c31 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:28 
    this.baseURL = options.baseURL || process.env.COMFYUI_DEFAULT_URL || 'http://localhost:8188';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11a1a12341766c2c — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:76 
      const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0854f94796e698e9 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 
      const vercelUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d879821a5effbcf — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:79 
        process.env.INTERNAL_APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62f947eda45ea4ad — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:80 
        process.env.APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0be316250be2376 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:81 
        (isInVercel ? vercelUrl : `http://localhost:${process.env.PORT || 3010}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16390563348e2949 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:90 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21c948d0f45606b9 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:96 
      const keyVaultSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #861524662b247fb5 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:158 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #00303fe855829f9b — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:164 
    process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #16daf0c931954132 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:167 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba3d82387790de58 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:46 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3203aaef7d87863 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:64 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7599f205bc5af18b — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:40 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #097e80a34363d43c — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:44 
      process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2771963230cb5fd6 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:48 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35036e48c65a3174 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae8828c65c3f7272 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:55 
      delete process.env.DEBUG_GITEE_AI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f257bec631d21bb6 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:61 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #709324f724483db2 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:67 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0b76a48d33842d3 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:73 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82259356da62751 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.ts:14 
    chatCompletion: () => process.env.DEBUG_GITEE_AI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b28b284b7e070e8e — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:48 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11d93c268f5a5c95 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:54 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82d21d6700c90681 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:57 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26a2fcbb8cb91463 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:61 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86bf5ecb1f36e75e — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:64 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd44567b12904e19 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.ts:47 
    chatCompletion: () => process.env.DEBUG_GITHUB_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1c91ad0365830bc9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/github/index.ts:54 
    const response = await fetch('https://models.github.ai/catalog/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0d5233ace21a44aa — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:389 
      process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9419c532700eab1a — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:411 
      delete process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #490f217fc9a638a2 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:436 
      process.env.DEBUG_GITHUBCOPILOT_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc016a369a16c4c7 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:458 
      delete process.env.DEBUG_GITHUBCOPILOT_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31e6f2d5a15650b9 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:32 
  chatCompletion: () => process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9103b61cbde266f4 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:33 
  responses: () => process.env.DEBUG_GITHUBCOPILOT_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #30658e234bc161f7 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:79 
    const response = await fetch(TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `Token ${githubToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #6dbc18a0ead2d61f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:411 
        const response = await fetch(`${COPILOT_BASE_URL}/models`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': `Bearer ${bearerToken}`,
            'Copilot-Integration-Id': 'vscode-chat',
            'Editor-Plugin-Version': 'LobeChat/1.0',
            'Editor-Version': 'LobeChat/1.0',
          },
          method: 'GET',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #143575293718c42b — Environment-variable access.
repo/packages/model-runtime/src/providers/glmCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_GLM_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f6233487d423005 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:163 
      process.env.DEBUG_GOOGLE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76036a9afd8f1ad5 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:188 
      delete process.env.DEBUG_GOOGLE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5052c39e9018081b — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:230 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ae483a02d2d9767 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:240 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4021ae5bfcbdd0cc — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:487 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3713eecc4deee69c — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:493 
      process.env.DEBUG_GROQ_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccb0e7811cb4000a — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:496 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad3182813366cb95 — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.ts:82 
    chatCompletion: () => process.env.DEBUG_GROQ_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81b511e323b0a8f7 — Environment-variable access.
repo/packages/model-runtime/src/providers/higress/index.ts:27 
    chatCompletion: () => process.env.DEBUG_HIGRESS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a369ec12b02d83a — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:78 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8cb4ed8a42545d4 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:84 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1f9f550dbe44fa5 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:87 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a6b771194fa419b — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:91 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca0d394f6ef743e4 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:94 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0396b1341a8fc0c — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.ts:54 
    chatCompletion: () => process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4bca614ed5423877 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/huggingface/index.ts:57 
    const response = await fetch('https://router.huggingface.co/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a61e5cf98d9e6902 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:51 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b41b23f23ca8d8ce — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:57 
      process.env.DEBUG_HUNYUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f62f5d01bcf0444 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:60 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76e871889fea6bb0 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:144 
      process.env.HUNYUAN_ENABLE_SPEED_SEARCH = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #176e6bde8a810d07 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:156 
      delete process.env.HUNYUAN_ENABLE_SPEED_SEARCH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef5451f8ebae91aa — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:56 
          enable_speed_search: process.env.HUNYUAN_ENABLE_SPEED_SEARCH === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54fca28b64b08249 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:69 
    chatCompletion: () => process.env.DEBUG_HUNYUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #858f35ac2de16701 — Environment-variable access.
repo/packages/model-runtime/src/providers/infiniai/index.ts:24 
    chatCompletion: () => process.env.DEBUG_INFINIAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a754bdcad5750663 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:43 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fd522aae0afbfb4 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:49 
      process.env.DEBUG_INTERNLM_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e5c6c25cc57000 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:52 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2788da6ceda5181 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.ts:26 
    chatCompletion: () => process.env.DEBUG_INTERNLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c43a3093cde16495 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:40 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #855bec59b1a1db43 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:44 
      process.env.DEBUG_JINA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad05441b37933d02 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:48 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b94df232521310f — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.ts:14 
    chatCompletion: () => process.env.DEBUG_JINA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d7c45391727709c — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:549 
      const originalDebugValue = process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2c6dcc3b2b7feca — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:551 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d55138fb93ec9974 — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:565 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6198d1c417a940f — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.ts:105 
    chatCompletion: () => process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcfa67114ba77dc3 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:47 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78bf106a4d6bdd02 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:52 
      process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #395d43664020c78d — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:54 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b48669f052d8beb4 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fefe0e997772268 — Environment-variable access.
repo/packages/model-runtime/src/providers/longcat/index.ts:30 
    chatCompletion: () => process.env.DEBUG_LONGCAT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca3f0a07cb65f5f6 — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:291 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7884a3d95799cc34 — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:312 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fff7ed65b0fa73cd — Environment-variable access.
repo/packages/model-runtime/src/providers/minimaxCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f89fbdccd73a7ad4 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:39 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fc9afda0c85791b — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:45 
      process.env.DEBUG_MISTRAL_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af7856569f748020 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:48 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223ee18bde8b66ab — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.ts:59 
    chatCompletion: () => process.env.DEBUG_MISTRAL_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5db5490d9d1e24b2 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:44 
      delete process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d680c4a0d912a38c — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:50 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efbd53e6b72e1c56 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:56 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6db29ae5f2b108e4 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.ts:17 
    chatCompletion: () => process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2fc7c5b46a1b44b — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:140 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbb6e6a04dd49f82 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:146 
      process.env.DEBUG_MOONSHOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a69f44de84c93832 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:149 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8841723ef269b90f — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:258 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #548febee5ce83d8e — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:275 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93560c78ac4b1100 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:47 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b772b900228b1f74 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:52 
      process.env.DEBUG_NEBIUS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c7d24a2a71a6ec1 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:54 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecca5b3b31fa8f13 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.ts:25 
    chatCompletion: () => process.env.DEBUG_NEBIUS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdd19ecc815ac3ef — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:38 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76162661dad9165d — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:43 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #520daeac064c2841 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:48 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #922addce65daf4a2 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:49 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a390e8af994f9d2 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:54 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef141f2cdc2470a6 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:55 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #108ea2c80e2fe2a9 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:683 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22ec519c63302d21 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:689 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5c455bb92608b5a — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:692 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b1357db51b2cbc — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:696 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7387f22f6709527f — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:699 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #401cfe35383095f7 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.ts:76 
    chatCompletion: () => process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a874aef1ac441993 — Environment-variable access.
repo/packages/model-runtime/src/providers/novita/index.ts:23 
    chatCompletion: () => process.env.DEBUG_NOVITA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6067f1dd610df6c0 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:235 
      process.env.DEBUG_NVIDIA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8317d9e7e3e0a32f — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:238 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3daffd3eb49c095 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:242 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9e6513c88c2bde9 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.ts:82 
    chatCompletion: () => process.env.DEBUG_NVIDIA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ee20621fedd9c3e — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:303 
        const originalDebugValue = process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0be4e7b32adf3fce — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:304 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fbaeebb2b011c09 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:326 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a042cbae877154bc — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1041 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b94d33f149d87732 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1047 
      process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10b08fc2a2be6bf9 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1050 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33e545060cbbf87c — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:34 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49a785f98469fb5e — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:81 
      if (process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7831b36fdd96bbe0 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:52 
      delete process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f407a5aedba2a3c0 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:58 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6aad120ed99413b — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:64 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d278b00ab9734ea1 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:70 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d216728caca57c62 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.ts:20 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be756cae1ea91db1 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:243 
        const originalDebugValue = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f8eae7130df5be3 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:246 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fc9d60a87deb7ea — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:262 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a5ef34bb0942099 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:540 
      delete process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb107f5684424ed3 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:546 
      const originalEnv = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d19427494b12bfa2 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:547 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d6f3fa8a6cbc3f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:550 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79b21daf03f21d63 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:554 
      delete process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6c92c98322b17ab — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:560 
      const originalEnv = process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd6c36935f49e928 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:561 
      process.env.DEBUG_OPENAI_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66f1f4116faa17ce — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:564 
      process.env.DEBUG_OPENAI_RESPONSES = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1359ab74401c5bf — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:20 
const oaiSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE; // low, medium, high

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6398f66b65256ab0 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:21 
const enableServiceTierFlex = process.env.OPENAI_SERVICE_TIER_FLEX === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27bdc35ad1606f81 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:67 
    chatCompletion: () => process.env.DEBUG_OPENAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96dfed639ad18193 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:68 
    responses: () => process.env.DEBUG_OPENAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #304eaaca69f69dbc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:99 
    const res = await fetch(MODELS_DEV_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d1250c7c0b3df2b7 — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:395 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4c9964cbf00ec6e — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:408 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89d3c4ea26020598 — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeZen/index.ts:26 
    chatCompletion: () => process.env.DEBUG_OPENCODE_ZEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #782c480dcfb32607 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:80 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a31848820ada1236 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:86 
      process.env.DEBUG_OPENROUTER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43a0a9cbc89c6274 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:89 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17358e257d368d43 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.ts:93 
    chatCompletion: () => process.env.DEBUG_OPENROUTER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e83833bdeefbcf84 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/openrouter/index.ts:96 
    const response = await fetch('https://openrouter.ai/api/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cafdb830acd62933 — Environment-variable access.
repo/packages/model-runtime/src/providers/perplexity/index.ts:42 
    chatCompletion: () => process.env.DEBUG_PERPLEXITY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62d9ad655736e2ae — Environment-variable access.
repo/packages/model-runtime/src/providers/ppio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_PPIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e7ce96ea5e01d56 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:37 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bd0d457ff1df91b — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:43 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #851ff750355edade — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:46 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #413b6160dac51465 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:50 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0f3f7df28451007 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:53 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79b3f0ed66cf1bb9 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.ts:11 
    chatCompletion: () => process.env.DEBUG_QINIU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cd240a4d3c639d6 — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:114 
            search_strategy: process.env.QWEN_SEARCH_STRATEGY || 'standard', // standard or pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd47e2a97e29efee — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:126 
    chatCompletion: () => process.env.DEBUG_QWEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a44929cc473b804 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:416 
      process.env.DEBUG_REPLICATE === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c5e44845dc35b72 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:417 
      process.env.DEBUG_REPLICATE_CHAT_COMPLETION === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #677a129bc6fdcc2f — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:418 
      process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96b5cd5e0045f431 — Environment-variable access.
repo/packages/model-runtime/src/providers/sambanova/index.ts:8 
    chatCompletion: () => process.env.DEBUG_SAMBANOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24a93781ac4e8001 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:37 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #620742b910446cc8 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:43 
      process.env.DEBUG_SEARCH1API_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5065a0c38da68875 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:46 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8f6ed0892ab10b4 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.ts:38 
    chatCompletion: () => process.env.DEBUG_SEARCH1API_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ef5c3a47128c838 — Environment-variable access.
repo/packages/model-runtime/src/providers/sensenova/index.ts:50 
    chatCompletion: () => process.env.DEBUG_SENSENOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed5f829bba82c0b1 — Environment-variable access.
repo/packages/model-runtime/src/providers/siliconcloud/index.ts:142 
    chatCompletion: () => process.env.DEBUG_SILICONCLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e0ff2d1327ece14 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:43 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d9ff213c5ef873b — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:49 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcd80cb0b00e20f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:52 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3452a67b5a071ea4 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:56 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2940719442a6f43 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:59 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2adae51c5166cc67 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:111 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efc8f7cedcde3b27 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:125 
      process.env.SPARK_SEARCH_MODE = 'deep';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70b786545dc786d5 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:136 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f6b44fd2e805a20 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:46 
                search_mode: process.env.SPARK_SEARCH_MODE || 'normal', // normal or deep

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b8674a97529e810 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:67 
    chatCompletion: () => process.env.DEBUG_SPARK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0664f7c6c959b105 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:47 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db858aedcbad9132 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:52 
      process.env.DEBUG_STEPFUN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0ee7342dac73700 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:54 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dca12a8dc616232 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.ts:38 
    chatCompletion: () => process.env.DEBUG_STEPFUN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91f3557d5434ea8b — Environment-variable access.
repo/packages/model-runtime/src/providers/straico/index.ts:40 
    chatCompletion: () => process.env.DEBUG_STRAICO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a1f36e5be23df5cf — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cf0a46887c69bc2c — Environment-variable access.
repo/packages/model-runtime/src/providers/streamlake/index.ts:19 
    chatCompletion: () => process.env.DEBUG_STREAMLAKE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc691968e3a13d87 — Environment-variable access.
repo/packages/model-runtime/src/providers/taichu/index.ts:21 
    chatCompletion: () => process.env.DEBUG_TAICHU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81269d036b12f8ea — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:40 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083a85d7d9f166ad — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:44 
      process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e6f333bd02f6c80 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:48 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcf731ecec87be1c — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.ts:14 
    chatCompletion: () => process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7447a8444fbd97a — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:47 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e823b1d5bea3dd89 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:51 
      process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #457f03aa5e28dc65 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:55 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd3170cace046a99 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d0d0d52b4239e6 — Environment-variable access.
repo/packages/model-runtime/src/providers/upstage/index.ts:8 
    chatCompletion: () => process.env.DEBUG_UPSTAGE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f51ca9187f6a4af — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:61 
      delete process.env.DEBUG_V0_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de65dba9e8d8f49f — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:67 
      process.env.DEBUG_V0_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc27152375a81a64 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:73 
      process.env.DEBUG_V0_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa44400da5827ed2 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:79 
      process.env.DEBUG_V0_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a8af8d0a5694780 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.ts:14 
    chatCompletion: () => process.env.DEBUG_V0_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bcf37e2ae6b0d98 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:51 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0976ec5cd6905a9d — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:57 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1c4ea2a509d1fd — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:60 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f5a115e424091ca — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:64 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e77ff8027f0d01b — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:67 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3991f0078600255 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.ts:87 
    chatCompletion: () => process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89904f47c673a490 — Environment-variable access.
repo/packages/model-runtime/src/providers/vllm/index.ts:13 
    chatCompletion: () => process.env.DEBUG_VLLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00c7e08f48a5d78b — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:70 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #520b69653cabaeee — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:71 
    responses: () => process.env.DEBUG_VOLCENGINE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8370d4812f7ee0f3 — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengineCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68314371925645b2 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:126 
      delete process.env.DEBUG_WENXIN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdd196c9111ac96d — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:132 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c87a33a06ffb27d6 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:138 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd91b055caba4dfc — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.ts:49 
    chatCompletion: () => process.env.DEBUG_WENXIN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d24221cbeb530e5b — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:126 
    chatCompletion: () => process.env.DEBUG_XAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52f74d08058d0336 — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:127 
    responses: () => process.env.DEBUG_XAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb78d874b00f9ba6 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:277 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d99df9f68d32d705 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:283 
      process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6a2589b6adc8da6 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:286 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e11c319448e1b142 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.ts:107 
    chatCompletion: () => process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d35528465ee459 — Environment-variable access.
repo/packages/model-runtime/src/providers/xinference/index.ts:18 
    chatCompletion: () => process.env.DEBUG_XINFERENCE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be23e1fedc0c6b35 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:31 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01b528478527e555 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:36 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d51912dc5457979f — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:41 
      delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a520165834123d92 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:42 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94b2ace1719c3984 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:47 
      process.env.DEBUG_ZENMUX_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8213cf1c5bd1730 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:48 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d88ce3be98f403 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.ts:39 
    chatCompletion: () => process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbd053ccdc0e7350 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:55 
      delete process.env.DEBUG_ZEROONE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29c4f14ff94de16f — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:61 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3532f0fa11a24ec — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:67 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #607820e3f78b89a5 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:73 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cf3cd02b6fc727a — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.ts:14 
    chatCompletion: () => process.env.DEBUG_ZEROONE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc43899651f9a1fb — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:44 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01c0cc8e4fa50594 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:50 
      process.env.DEBUG_ZHIPU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f2952c3e886c112 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:53 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78c6ad1b0e51ef94 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:112 
        process.env.ZHIPU_SEARCH_ENGINE = 'search_pro';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d45b5348eb3fbb0 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:129 
        delete process.env.ZHIPU_SEARCH_ENGINE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b35bf1cc7da52b88 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:85 
                search_engine: process.env.ZHIPU_SEARCH_ENGINE || 'search_std', // search_std, search_pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26d96d43ca7ae8e8 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:215 
    chatCompletion: () => process.env.DEBUG_ZHIPU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1adbb0269867c991 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4f3bfc461972a517 — Filesystem access.
repo/packages/model-runtime/src/utils/modelConfigImport.test.ts:13 
        readFile(path.resolve(utilsDir, file), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56fb98e20e4d32bd — Environment-variable access.
repo/packages/observability-otel/src/node.ts:20 
    'env': process.env.VERCEL_ENV || process.env.NEXT_PUBLIC_VERCEL_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7ea976d4d6f0dd8 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:23 
      process.env.VERCEL_BRANCH_URL || process.env.NEXT_PUBLIC_VERCEL_BRANCH_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8780b5fa272ed48 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:24 
    'vercel.deployment_id': process.env.VERCEL_DEPLOYMENT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0c0f4263872791f — Environment-variable access.
repo/packages/observability-otel/src/node.ts:25 
    'vercel.host': process.env.VERCEL_URL || process.env.NEXT_PUBLIC_VERCEL_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76e9f7d7b67904ea — Environment-variable access.
repo/packages/observability-otel/src/node.ts:26 
    'vercel.project_id': process.env.VERCEL_PROJECT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bc57d2dd3afcc3e — Environment-variable access.
repo/packages/observability-otel/src/node.ts:27 
    'vercel.region': process.env.VERCEL_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25c6b13d23e40b9b — Environment-variable access.
repo/packages/observability-otel/src/node.ts:28 
    'vercel.runtime': process.env.NEXT_RUNTIME || 'nodejs',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e222839251ba7588 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:30 
      process.env.VERCEL_GIT_COMMIT_SHA || process.env.NEXT_PUBLIC_VERCEL_GIT_COMMIT_SHA,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24a74570ee3310da — Environment-variable access.
repo/packages/observability-otel/src/node.ts:32 
    'service.version': process.env.VERCEL_DEPLOYMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a40a928c401ba25 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:39 
    'node.ci': process.env.CI ? true : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e78cf538008bd60a — Environment-variable access.
repo/packages/observability-otel/src/node.ts:40 
    'node.env': process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afb38c86bc89c3c9 — Filesystem access.
repo/packages/openapi/src/helpers/file.ts:118 
          const bin = fs.readFileSync((f as any).filepath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90a915118567a352 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:54 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab828278ee8ec430 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:55 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f2edd4742ab3d15 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:57 
    c.set('userId', process.env.MOCK_DEV_USER_ID || 'DEV_USER');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #742de3ebfe0dc923 — Environment-variable access.
repo/packages/openapi/src/middleware/permission-check.ts:46 
    if (options.skipInDev && process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a862069c5c8afa47 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:77 
        this.pyodide.FS.writeFile(file.name, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0af15b02be68f223 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:79 
        this.pyodide.FS.writeFile(`/mnt/data/${file.name}`, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0f2a185fcc17588 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:95 
      const content = (this.pyodide.FS as any).readFile(filePath, { encoding: 'binary' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #200964c6790e8801 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:175 
      this.pyodide.FS.writeFile(`/usr/share/fonts/truetype/${filename}`, new Uint8Array(buffer));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff8ce6996a69eccd — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:35 
    delete process.env.SSRF_ALLOW_IP_ADDRESS_LIST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cc913db4b2723c8 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:36 
    delete process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #967b1a7bea7a2800 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:106 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7895694dc46af439 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:118 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1,192.168.1.100';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #123e7b54bbf71843 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:167 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae8d3c837f2f5bb5 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:177 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = 'invalid-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c12b0d73331f5b3 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:461 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c49adcf5f52b80a — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:462 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a20a2dd359fd7a2a — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:72 
    const envAllowPrivate = process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ef8057f5bd6b5c9 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:78 
        process.env.SSRF_ALLOW_IP_ADDRESS_LIST?.split(',').filter(Boolean) ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38d30e1b9089a64f — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:122 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #578897ae88aaf707 — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:124 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c137e2f1928b0869 — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:126 
      userId: process.env.MOCK_DEV_USER_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60cc44facf3fc45a — Environment-variable access.
repo/packages/trpc/src/middleware/openTelemetry.test.ts:70 
    process.env.ENABLE_TELEMETRY = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e25e39708a331a92 — Environment-variable access.
repo/packages/utils/src/env.ts:1 
export const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #335d2411ca214cae — Environment-variable access.
repo/packages/utils/src/jina.ts:7 
  process.env.JINA_USE_CN_DOMAINS?.trim().toLowerCase() === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cf7805fe610534a — Environment-variable access.
repo/packages/utils/src/server/apiKeyHash.ts:3 
const getApiKeyHashSecret = () => process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #45347f14608e27b2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:15 
    delete process.env.BROWSERLESS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c45bd2264ce7baf2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:16 
    delete process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1bd668cbef359dfd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:26 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03eae73897ad145a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:36 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #20a1a66317d06c78 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:49 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d5d6da2fc0fc0266 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:62 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c27be3dd32c6a4f2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:96 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3e52f495fb88fc63 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:137 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c6f141364e80c28e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:16 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #35ffc6fbf52db724 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:20 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a8fdcb002d44a1e4 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:77 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #11357be1897cb01a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:101 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b85d4be1502c3dbf — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:122 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d3c1e9168b084fab — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:139 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0502d183963a8e30 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:156 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #844b31e2fc3d4991 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:167 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #34be8186592315d3 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:178 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e5fe1e6812157c49 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:191 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #435e6040e3ffa20e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:210 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41344932c6c8c497 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:231 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b728bbf28b391a88 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:16 
    delete process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9267b656e716cd10 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:17 
    delete process.env.FIRECRAWL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a48f281dd039bbeb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:21 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6ee1eebf7437988d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:86 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8855bf8f2d9c3fa4 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:113 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e570d5b04dc9208 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:140 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #057e39d60d52f36b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:157 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9e61324ba5a221ae — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:174 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #df346d9142fa7bd3 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:185 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5ede158120f31631 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:198 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9095734a17bdb8e2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:211 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9ee8baf0202e793c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:230 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5fa9a89b58501ce5 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:22 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf91adb23d46e310 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:23 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21aa7fa9c792e489 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:24 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dc33b024393a9d48 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #142cd2aee84a246e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a8da5964c1661f9 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef723ca46edca05b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:80 
    process.env.JINA_READER_API_KEY = 'env-reader-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #13d7c544099a7e6f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:105 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f73a3cce7036d83b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:109 
    process.env.JINA_API_KEY = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6057d1e7255fb4c6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:134 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d725a7ba6422d8d7 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:163 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4bbfddba0238d496 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/search1api.test.ts:19 
    process.env.SEARCH1API_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #172b01156372e533 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:16 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e0422bf8c0481ceb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:17 
    delete process.env.TAVILY_EXTRACT_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3bdd1f7ee4211a88 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:21 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #91c6ad0aaa5895c2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:55 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb066d8040e9403b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:56 
    process.env.TAVILY_EXTRACT_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b44be4ec8250ebfd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:98 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6dabd9ac833b9021 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:123 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21951605411bc15c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:145 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e63c5b12c4466d69 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:168 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a106358ae96ba5f6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:185 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #019a33385d2eefab — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:202 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #359f12ab0184a40d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:213 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d03c543bffc5919 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:226 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d94dd2c851a7c8bd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:239 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #037064c3c6bec4bf — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:258 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e55e6dbe42225f66 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:280 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b888bb6d10f310b8 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:302 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94ea2ac3e47d691d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 
const BASE_URL = process.env.BROWSERLESS_URL ?? 'https://chrome.browserless.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c5a2183372cf602 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:14 
const BROWSERLESS_TOKEN = process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad57c831ac843f85 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:16 
const BROWSERLESS_BLOCK_ADS = process.env.BROWSERLESS_BLOCK_ADS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb053ed64bf61e40 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:17 
const BROWSERLESS_STEALTH_MODE = process.env.BROWSERLESS_STEALTH_MODE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3c3695b903efa10 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:27 
  if (!process.env.BROWSERLESS_URL && !process.env.BROWSERLESS_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8909e15f2838664a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 
  const apiKey = process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2723e852ee1898f0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #8115edf5ad635018 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 
  const apiKey = process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #343353fcd98c4764 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:55 
  const baseUrl = process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #316bd256b9811739 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 
  const token = params.apiKey ?? process.env.JINA_READER_API_KEY ?? process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6c9df1501c5dfed — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 
  const apiKey = process.env.SEARCH1API_CRAWL_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c1340d4555c0b11b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4c020baf2cff3a49 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 
  const apiKey = process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #b27d861d4b973d7f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #04cf8388409b9ea0 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:35 
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62bc4844b5d89c06 — Filesystem access.
repo/packages/web-crawler/src/utils/htmlToMarkdown.test.ts:29 
      const html = readFileSync(path.join(__dirname, `./html/${item.file}`), { encoding: 'utf8' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c0c3d6f359b9d2a — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:3 
export const DEFAULT_TIMEOUT = process.env.CRAWLER_TIMEOUT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9e5cc7a3fa694c0 — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:4 
  ? Number(process.env.CRAWLER_TIMEOUT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d506b7597650739f — Filesystem access.
repo/plugins/vite/envRestartKeys.ts:36 
      for (const line of readFileSync(file, 'utf8').split('\n')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #957a7a22c2d731cb — Filesystem access.
repo/plugins/vite/markdownImport.test.ts:15 
    await writeFile(markdownPath, markdownContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f8fcd5aa41d0521 — Filesystem access.
repo/plugins/vite/markdownImport.ts:35 
      const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d122e40680509544 — Environment-variable access.
repo/plugins/vite/routeChunkPreload.ts:387 
function appendDeploymentQuery(href: string, deploymentId = process.env.VERCEL_DEPLOYMENT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b7eb183e8eb9deb — Environment-variable access.
repo/plugins/vite/routeChunkPreload.ts:566 
        const deploymentId = process.env.VERCEL_DEPLOYMENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d11cfdacca614083 — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:199 
const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39d0027452ab3e93 — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:200 
const enableRouteChunkPreload = process.env.LOBE_ROUTE_CHUNK_PRELOAD !== 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5f923bc87698d7b — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:241 
    '__CI__': process.env.CI === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caf8ffca0f5eeafa — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:242 
    '__DEV__': process.env.NODE_ENV !== 'production' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51a8684d2d121962 — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:245 
    '__REACT_SCAN__': process.env.REACT_SCAN === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b82b8ff968cead71 — Environment-variable access.
repo/plugins/vite/vercelSkewProtection.ts:28 
  const id = deploymentId || process.env.VERCEL_DEPLOYMENT_ID || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2763d3bbbb551062 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:35 
        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efc9a25d8844d197 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:54 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a488015ccab0eb9 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:59 
    getVars: () => (process.env['NEXT_PUBLIC_SERVICE_MODE'] ? ['NEXT_PUBLIC_SERVICE_MODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #407b6a713f7dadf8 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:65 
    getVars: () => (process.env['ACCESS_CODE'] ? ['ACCESS_CODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b078c6753de37911 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:72 
      process.env['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] ? ['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] : [],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2930e07b2bc2edf7 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:78 
    getVars: () => ['NEXT_PUBLIC_AUTH_URL', 'AUTH_URL'].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0de3876efb2e3f0d — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:104 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7750672390bb55a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:120 
        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #840504ea34083990 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:127 
    getVars: () => (process.env['OIDC_JWKS_KEY'] ? ['OIDC_JWKS_KEY'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2663cc7c77ec035a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:133 
    getVars: () => (process.env['APP_URL']?.endsWith('/') ? ['APP_URL'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b2943e55a96ee16 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:141 
      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab5f6bf19df34ea5 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:142 
      if (providers.includes('casdoor') && !process.env['CASDOOR_WEBHOOK_SECRET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bda62014a81e880 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:155 
      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9442c8efaa55190 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:156 
      if (providers.includes('logto') && !process.env['LOGTO_WEBHOOK_SIGNING_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #647ec9da86a7bdc4 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:183 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3576d1591339037d — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:192 
        process.env['SMTP_HOST'] || process.env['EMAIL_SERVICE_PROVIDER'] === 'resend';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3efcda328ab79598 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:193 
      const hasEmailVerification = process.env['AUTH_EMAIL_VERIFICATION'] === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4618044290d16137 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:35 
    process.env.NEXT_AUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e93c90d1c823fae5 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:45 
    process.env.NEXTAUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #448c1f134d89b4e3 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:54 
    process.env.CLERK_SECRET_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acf9b4eaa2ff00ec — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:63 
    process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83474cd4b386e743 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:72 
    process.env.APP_URL = 'https://example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d0bcd0ebbe4f278 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:81 
    process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ced701445a2fc08 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:91 
      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a182f6dba60eec21 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:102 
      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ed3e0e020d213d3 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:113 
      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b282adbf75247271 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:114 
      process.env.CASDOOR_WEBHOOK_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92631afb43c03761 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:124 
      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ae1322e652b9a16 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:125 
      process.env.LOGTO_WEBHOOK_SIGNING_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #615616b370fbc140 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:135 
      process.env.AUTH_SSO_PROVIDERS = 'google';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33113125568081be — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:147 
      process.env.AUTH_SSO_PROVIDERS = 'logto'; // warning

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a85d2bf3974b22bc — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:148 
      process.env.ACCESS_CODE = 'test-code'; // error

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46d7ad490d423aaf — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:161 
      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #589e15657874431c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:171 
      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30cd8071b90af769 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:47 
      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #995caf916c1ce5f4 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:56 
      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99dc60edd301f2a3 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:65 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5afa38aa9a0cd3ed — Environment-variable access.
repo/scripts/cdnWorkflow/index.ts:119 
        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80ae5c1bfb064aaa — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:147 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fa91bd741030070 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:170 
      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dfaa22fcf706730 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:10 
if (!process.env.DOC_S3_ACCESS_KEY_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #794059d69efc0a79 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:16 
if (!process.env.DOC_S3_SECRET_ACCESS_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ede8378983278e0 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:22 
if (!process.env.DOC_S3_PUBLIC_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ed64c9fb2d52ae3 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:44 
    accessKeyId: process.env.DOC_S3_ACCESS_KEY_ID || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #467e076b4c9ea7e4 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:47 
    pathPrefix: process.env.DOC_S3_PUBLIC_DOMAIN || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0360773c29aadd5 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:50 
    secretAccessKey: process.env.DOC_S3_SECRET_ACCESS_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d6c5bafddab3630 — Filesystem access.
repo/scripts/changelogWorkflow/buildStaticChangelog.ts:119 
      const data = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6aaec5aabae2e442 — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:160 
  const version = JSON.parse(readFileSync(pkgPath, 'utf8')).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f955eb7f24c44834 — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:199 
  const currentFile = readFileSync(changelogPath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d31cb65e7ab0bbb5 — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:205 
  writeFileSync(changelogPath, newContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ec26e7071343d1a — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:9 
  const mode = process.env.CLERK_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8edfe859317dd1e — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:29 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8823a7e09c43594 — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:43 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9880ea5a48dc032 — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:53 
  const driver = process.env.CLERK_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd1f6cbbef5485fd — Filesystem access.
repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:50 
  const csv = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #072ebe6b002a1d07 — Filesystem access.
repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:59 
    const file = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3bef177130335c3 — Environment-variable access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:19 
const CONCURRENCY = Number(process.env.CLERK_EXPORT_CONCURRENCY ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6696a432d3b78b18 — Environment-variable access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:20 
const MAX_RETRIES = Number(process.env.CLERK_EXPORT_RETRIES ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02abef1777884ff2 — Filesystem access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:203 
  await writeFile(outputPath, JSON.stringify(clerkUsers, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #175b56d1a7dc88f0 — Environment-variable access.
repo/scripts/clerk-to-betterauth/index.ts:9 
const BATCH_SIZE = Number(process.env.CLERK_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3f5bf99a0e7aab6 — Environment-variable access.
repo/scripts/clerk-to-betterauth/index.ts:12 
  process.argv.includes('--dry-run') || process.env.CLERK_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b01848db040713a — Filesystem access.
repo/scripts/countEnWord.ts:48 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dae703d8909ad710 — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:44 
      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0b0ff16aab33f6b — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:53 
      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f70d7871b2c7efa — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:62 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7051d62d41d84dc0 — Environment-variable access.
repo/scripts/docsWorkflow/autoCDN.ts:98 
        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a7a1a448860dcce — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:126 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72292bfe2b0a933d — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:149 
      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #952feed302d70cde — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:14 
  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99236a0e89ae7578 — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:18 
  writeFileSync(path, result, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e19a3ae63350873d — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:27 
  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e40e9b658012bd81 — Environment-variable access.
repo/scripts/docsWorkflow/utils.ts:87 
    const githubToken = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd89adf675b506aa — Filesystem access.
repo/scripts/electronWorkflow/buildDesktopChannel.ts:65 
    return await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcde2d3a375933be — Filesystem access.
repo/scripts/electronWorkflow/buildDesktopChannel.ts:73 
  await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7c672c48f9912b9 — Filesystem access.
repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:44 
      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba803c0823d88966 — Filesystem access.
repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:58 
    fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c363fe89e02d22dc — Filesystem access.
repo/scripts/hotfixWorkflow/index.ts:32 
    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cae650a2db9ef12 — Filesystem access.
repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:175 
    const content = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6b2ac7bb1f13bba — Filesystem access.
repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:448 
  fs.writeFileSync(
    reportPath,
    JSON.stringify(
      {
        generatedAt: new Date().toISOString(),
        statistics: {
          totalKeys: allKeysCount,
          unusedKeys: unusedKeys.length,
          usageRate: ((usedKeysCount / allKeysCount) * 100).toFixed(2) + '%',
          usedKeys: usedKeysCount,
        },
        unusedKeys: unusedKeys.map((k) => ({
          filePath: k.filePath,
          fullKey: k.fullKey,
          key: k.key,
          namespace: k.namespace,
        })),
        unusedKeysByNamespace: Array.from(byNamespace.entries()).map(([ns, keys]) => ({
          count: keys.length,
          keys: keys.map((k) => k.key),
          namespace: ns,
        })),
      },
      null,
      2,
    ),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e308790ad4f427ca — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:137 
          fs.writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1d917bcf0285682 — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:193 
        const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a93eed878a938c1 — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:213 
            fs.writeFileSync(filePath, JSON.stringify(translations, null, 2) + '\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #922c2084b6e11654 — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:277 
  const reportContent = fs.readFileSync(reportPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61c58699c626739d — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:78 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a3830d1806ebae9 — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:87 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #842d6a89c7981cfa — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:116 
      const raw = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a848e62c98d9ee0b — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:13 
  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #725b003fbacae099 — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:19 
  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b63921e3b4a2cc77 — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:28 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6035d209dcfaba9 — Filesystem access.
repo/scripts/mdxWorkflow/index.ts:17 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #274e64d72af962a7 — Filesystem access.
repo/scripts/mdxWorkflow/index.ts:48 
      writeFileSync(post, matter.stringify(formatedContent, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40b03a0267497f2b — Filesystem access.
repo/scripts/migrate-spa-navigation.ts:39 
  const content = await readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0886205adc6f341 — Filesystem access.
repo/scripts/migrate-spa-navigation.ts:105 
    await writeFile(fullPath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #505efcc6d362c420 — Environment-variable access.
repo/scripts/migrateServerDB/docker.cjs:7 
if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75a1f9539cc27729 — Environment-variable access.
repo/scripts/migrateServerDB/docker.cjs:11 
const client = new Pool({ connectionString: process.env.DATABASE_URL });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11eaed59d155cbc0 — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:16 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d232e3b7b02a346f — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:27 
  if (process.env.DATABASE_DRIVER === 'node') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac22ab384766f24d — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:38 
const connectionString = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb30ccd3029e5ebc — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:17 
  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e340022006f5127 — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:27 
  const keyPrefix = (process.env.MOBILE_S3_KEY_PREFIX || `mobile/${timestamp}`).replaceAll(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1080bcff88adba5c — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:60 
    region: process.env.MOBILE_S3_REGION || 'auto',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab5abd82683c7544 — Filesystem access.
repo/scripts/mobileSpaWorkflow/template.ts:11 
  const html = readFileSync(sourcePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23fb4c9745a64873 — Filesystem access.
repo/scripts/mobileSpaWorkflow/template.ts:24 
  writeFileSync(outputPath, output, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #108f59326efa0530 — Filesystem access.
repo/scripts/mobileSpaWorkflow/upload.ts:49 
      const buffer = readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f23a9bbf191e462e — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:10 
  const mode = process.env.NEXTAUTH_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35218a0c1a4b6a0d — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:20 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aeb7ab2b75cfe55 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:30 
  const driver = process.env.NEXTAUTH_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbeb7da17a327454 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:36 
  return Number(process.env.NEXTAUTH_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #005a6c0e965e50c6 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:40 
  return process.argv.includes('--dry-run') || process.env.NEXTAUTH_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db92d51b791c0065 — Filesystem access.
repo/scripts/readmeWorkflow/utlis.ts:38 
  return readFileSync(getReadmePath(lang), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c63166192384d55e — Filesystem access.
repo/scripts/readmeWorkflow/utlis.ts:42 
  writeFileSync(getReadmePath(lang), content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78ee3236dd118c59 — Environment-variable access.
repo/scripts/registerDesktopEnv.cjs:18 
const isDesktop = process.env.DESKTOP_BUILD === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f712fd26458669c8 — Filesystem access.
repo/scripts/releaseWorkflow/index.ts:28 
    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab0a921f7829c8bd — Filesystem access.
repo/scripts/replaceComponentImports.ts:90 
  const content = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0f350c7df1def16 — Filesystem access.
repo/scripts/replaceComponentImports.ts:132 
      writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8ba6b9262607de5 — Environment-variable access.
repo/scripts/resetOnboarding/index.ts:19 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81d4c68aa91d4146 — Environment-variable access.
repo/scripts/resetOnboarding/index.ts:33 
  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f855865be41e8bf3 — Environment-variable access.
repo/scripts/seedUserInfo/index.ts:17 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40368de74ff88f42 — Environment-variable access.
repo/scripts/seedUserInfo/index.ts:39 
  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bb00f7a046a68ce — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:88 
    process.env.ENABLE_PROXY_DNS === '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfe7e97b0779db62 — Filesystem access.
repo/scripts/serverLauncher/startServer.js:111 
  await fs.writeFile(PROXYCHAINS_CONF_PATH, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b5a35baab682bfe — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:131 
  const KEY_VAULTS_SECRET = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cdc0bce6c47e4a6 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:134 
  const port = process.env.PORT || 3210;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec1c22e92debf6b7 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:168 
  const QSTASH_URL = process.env.QSTASH_URL || 'https://qstash-eu-central-1.upstash.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #996a6bf300c60632 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:170 
  const QSTASH_TOKEN = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0ba17e167c32572 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:176 
  const APP_URL = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6dae0293781a27e9 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:209 
  const PROXY_URL = process.env.PROXY_URL || ''; // Default empty string to avoid undefined errors

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89d42713f944080d — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:226 
  if (process.env.DATABASE_DRIVER) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f57ec5151cc225c0 — Environment-variable access.
repo/scripts/vercelIgnoredBuildStep.js:4 
const branchName = process.env.VERCEL_GIT_COMMIT_REF || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d147039328e318d4 — Environment-variable access.
repo/src/app/(backend)/_deprecated/createBizOpenAI/createAzureOpenai.ts:16 
  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c79559b9d63c25d2 — Environment-variable access.
repo/src/app/(backend)/_deprecated/createBizOpenAI/createOpenai.ts:9 
  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79b91f967950d29c — Environment-variable access.
repo/src/app/(backend)/api/dev/agent-tracing/route.ts:9 
  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11f8eb7f16b698e6 — Filesystem access.
repo/src/app/(backend)/api/dev/agent-tracing/route.ts:21 
      const content = await fs.readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8f8ee8333f27cbc — Environment-variable access.
repo/src/app/(backend)/api/dev/test-push/route.ts:19 
  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #700a1c08e579fa2b — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:32 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a4a2bfde3988f28 — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:36 
  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6967900a624337d7 — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:37 
    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57c947d1f58987d3 — Environment-variable access.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dbfe8f054512f0c — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.test.ts:234 
      delete process.env.MOCK_DEV_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d873dc33f20af6 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:73 
    const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02c8bd514afb64b5 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:74 
    if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e32159a604b8b55d — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:75 
      const mockUserId = process.env.MOCK_DEV_USER_ID || 'DEV_USER';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c54af90c2fb99f76 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:32 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #65d92ffd905567bf — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:88 
      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f55cf54092ae39dc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:113 
      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b2ddf6dd29a78874 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/models/[provider]/pricing/route.test.ts:45 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3b2f4ea61e92c8e6 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/models/[provider]/route.test.ts:33 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #9bfa4e67d55ae5fb — Environment-variable access.
repo/src/app/(backend)/webapi/revalidate/route.ts:6 
  if (!process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41509423aea6fab8 — Environment-variable access.
repo/src/app/(backend)/webapi/revalidate/route.ts:12 
  if (!authToken || authToken !== process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ce85369570811b2 — Environment-variable access.
repo/src/app/[variants]/metadata.ts:11 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b4e055c6bcdfdcc — Environment-variable access.
repo/src/app/layout.tsx:6 
const inVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1daa4e12a2e1798 — Environment-variable access.
repo/src/app/manifest.ts:5 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a45b3a10e2ce91fe — Environment-variable access.
repo/src/app/spa-auth/[locale]/[[...path]]/route.ts:17 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0730c0bf088846d — Environment-variable access.
repo/src/app/spa/[variants]/[[...path]]/route.ts:34 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b5442bf457420aa — Environment-variable access.
repo/src/components/Analytics/Desktop.tsx:7 
  const projectId = process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f54b7d686d22e8e7 — Environment-variable access.
repo/src/components/Analytics/Desktop.tsx:8 
  const baseUrl = process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ac387c094a75872 — Environment-variable access.
repo/src/components/Loading/BrandTextLoading/index.tsx:20 
  const showDebug = process.env.NODE_ENV === 'development' && debugId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #433bc79d52c5d6e0 — Environment-variable access.
repo/src/features/DevFeatureFlagPanel/Hydrator.tsx:7 
const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cace0af5eb700464 — Environment-variable access.
repo/src/features/DevFeatureFlagPanel/index.tsx:12 
const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68ef5ebfb2ebd541 — Filesystem access.
repo/src/features/DevPanel/CacheViewer/getCacheEntries.ts:22 
      const fileContent = await promises.readFile(`${cachePath}/${file}`).catch((err) => {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e09531911df0ca80 — Environment-variable access.
repo/src/instrumentation.ts:3 
  if (process.env.NODE_ENV !== 'production' && process.env.NEXT_RUNTIME === 'nodejs') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17f798b09f192d75 — Environment-variable access.
repo/src/instrumentation.ts:11 
  const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa6f72b53d6f2785 — Environment-variable access.
repo/src/instrumentation.ts:13 
    process.env.NEXT_RUNTIME === 'nodejs' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd5ca8c7943e4456 — Environment-variable access.
repo/src/instrumentation.ts:14 
    process.env.DATABASE_URL &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cd9509c9829806d — Environment-variable access.
repo/src/instrumentation.ts:15 
    !process.env.VERCEL_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcc52c981360ca2d — Environment-variable access.
repo/src/instrumentation.ts:16 
    (!isDev || process.env.ENABLE_BOT_IN_DEV === '1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29707e85711469fb — Environment-variable access.
repo/src/instrumentation.ts:31 
  if (process.env.NODE_ENV !== 'production' && !process.env.ENABLE_TELEMETRY_IN_DEV) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1527d7c2239bfe79 — Environment-variable access.
repo/src/instrumentation.ts:35 
  const shouldEnable = process.env.ENABLE_TELEMETRY && process.env.NEXT_RUNTIME === 'nodejs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f853bcb43721c38a — Environment-variable access.
repo/src/layout/AuthProvider/MarketAuth/MarketAuthProvider.tsx:172 
      const baseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a6c6af962901688 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:114 
    delete process.env.HTTP_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54872aa7cefef8e1 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:115 
    delete process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bee7fc4a59f86c27 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:116 
    delete process.env.HTTPS_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6616d60550bb66b — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:117 
    delete process.env.https_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d77c09d3926f09fe — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:118 
    delete process.env.NO_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d19f89e661fe0d7 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:119 
    delete process.env.no_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1593deb4a0eb638e — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:53 
if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cca90fc01ea202f5 — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:54 
  const httpProxy = process.env.HTTP_PROXY || process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e00e1f18f73d66c9 — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:55 
  const httpsProxy = process.env.HTTPS_PROXY || process.env.https_proxy || httpProxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a580a860cbbedb47 — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:61 
      noProxy: mergeLocalNoProxy(process.env.NO_PROXY || process.env.no_proxy),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #49af1f69e9402c87 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/feishu.ts:80 
        const tokenResponse = await fetch(FEISHU_TOKEN_URL, {
          body: JSON.stringify({
            client_id: clientId,
            client_secret: clientSecret,
            code,
            grant_type: 'authorization_code',
            redirect_uri: redirectURI,
          }),
          cache: 'no-store',
          headers: {
            'content-type': 'application/json; charset=utf-8',
          },
          method: 'POST',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #47f91d2b98086441 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/feishu.ts:120 
        const response = await fetch(FEISHU_USERINFO_URL, {
          cache: 'no-store',
          headers: {
            Authorization: `Bearer ${tokens.accessToken}`,
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d0438520f3c75fb5 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/wechat.ts:47 
        const tokenUrl = new URL(WECHAT_TOKEN_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a94b25f34f14a6e9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/wechat.ts:90 
        const url = new URL(WECHAT_USERINFO_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #15e36c0818a0d946 — Environment-variable access.
repo/src/libs/better-auth/utils/config.ts:53 
    normalizeOrigin(process.env.VERCEL_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #390c0cd8e316c9f0 — Environment-variable access.
repo/src/libs/better-auth/utils/config.ts:54 
    normalizeOrigin(process.env.VERCEL_BRANCH_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d3035078b991aff — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:104 
    process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL = INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b93bf89a63a758f8 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:109 
    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21df902f5e366220 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:113 
    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #791491e18749a255 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.ts:124 
    const ingestUrl = process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48e2a4a5dbf02cc0 — Environment-variable access.
repo/src/libs/debug-file-logger.ts:20 
const shouldEnable = process.env.DEBUG_LOG_FILE === '1' && process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4422a929399a8d86 — Filesystem access.
repo/src/libs/document-loaders/loaders/code/__tests__/index.test.ts:26 
    const code = fs.readFileSync(join(__dirname, `./long.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e6e2a143f4b620fe — Filesystem access.
repo/src/libs/document-loaders/loaders/csv/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.csv`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ea0ba8d424eb3a44 — Filesystem access.
repo/src/libs/document-loaders/loaders/epub/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.epub`));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ff0e7eb41676ea86 — Filesystem access.
repo/src/libs/document-loaders/loaders/latex/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.tex`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bc2c37ea470d8e1b — Filesystem access.
repo/src/libs/document-loaders/loaders/markdown/__tests__/index.test.ts:9 
    const content = fs.readFileSync(join(__dirname, `./demo.mdx`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fc36881e06ec5552 — Filesystem access.
repo/src/libs/document-loaders/loaders/txt/__tests__/index.test.ts:45 
    const content = fs.readFileSync(join(__dirname, `./pg24022.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #328d71938f8ffed9 — Environment-variable access.
repo/src/libs/mcp/client.ts:27 
  const val = Number(process.env.MCP_TOOL_TIMEOUT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1ce040b83941807 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:20 
  const isProd = process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b233f08dd727d00a — Environment-variable access.
repo/src/libs/next/config/define-config.ts:21 
  const buildWithDocker = process.env.DOCKER === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37c31bc549ba969e — Environment-variable access.
repo/src/libs/next/config/define-config.ts:23 
  const shouldUseCSP = process.env.ENABLED_CSP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #123b39e7f46bcca7 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:26 
    process.env.NODE_ENV === 'test' || process.env.TEST === '1' || process.env.E2E === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f4988d2016dd4e4 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:28 
  const isStandaloneMode = buildWithDocker || process.env.NEXT_BUILD_STANDALONE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53cde1cf287460f6 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:59 
  const assetPrefix = process.env.NEXT_PUBLIC_ASSET_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #595b78c948c856b9 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:44 
    secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abe262c60768eae5 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:112 
        port: process.env.PORT || '3210',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f5cd1ba84ae6441 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:118 
      url.port = process.env.PORT || '3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8f9fb03cad6ca4d — Environment-variable access.
repo/src/libs/qstash/index.ts:10 
  ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae8e1c845b481523 — Environment-variable access.
repo/src/libs/qstash/index.ts:11 
    'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b5f81625caddbe2 — Environment-variable access.
repo/src/libs/qstash/index.ts:141 
  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad4bc7ac6f45ddea — Environment-variable access.
repo/src/libs/qstash/index.ts:150 
  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb4b0f2d1ac43bb8 — Environment-variable access.
repo/src/libs/qstash/index.ts:158 
  const currentSigningKey = process.env.QSTASH_CURRENT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c4ca85cf4dda2e3 — Environment-variable access.
repo/src/libs/qstash/index.ts:159 
  const nextSigningKey = process.env.QSTASH_NEXT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f75676b8748e3675 — Environment-variable access.
repo/src/libs/redis/manager.ts:4 
export const isRedisDisabledByEnv = () => !!process.env.DISABLE_REDIS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d304b9de990ac4d4 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:6 
  const url = process.env.REDIS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db65852c9c8b8917 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:10 
  const database = Number.parseInt(process.env.REDIS_DATABASE ?? '', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d31a60e53c017347 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:15 
    password: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16057da7f4f20c11 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:16 
    prefix: process.env.REDIS_PREFIX ?? 'lobe-chat-test',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd7739e0740c60be — Environment-variable access.
repo/src/libs/redis/redis.test.ts:17 
    tls: process.env.REDIS_TLS === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f3098772dee3acc — Environment-variable access.
repo/src/libs/redis/redis.test.ts:19 
    username: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c22256ea3ff9235 — Environment-variable access.
repo/src/server/agent-hono/handlers/finalizeAbandoned.ts:67 
      if (process.env.QSTASH_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3efc56f8f97a89c — Environment-variable access.
repo/src/server/agent-hono/handlers/gatewayCron.ts:42 
    appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #765b5666008a9dad — Environment-variable access.
repo/src/server/agent-hono/handlers/gatewayCron.ts:192 
  if (process.env.MESSAGE_GATEWAY_URL && process.env.MESSAGE_GATEWAY_SERVICE_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a80c666dad4f200 — Environment-variable access.
repo/src/server/agent-hono/index.ts:55 
  bearerSecretAuth(() => process.env.CRON_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e429b09a897a460 — Environment-variable access.
repo/src/server/agent-hono/index.ts:62 
  bearerSecretAuth(() => process.env.KEY_VAULTS_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46dfb8554be35800 — Environment-variable access.
repo/src/server/agent-hono/middlewares/qstashOrApiKeyAuth.ts:28 
  const apiKey = process.env.AGENT_EXEC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee70976cf46a93b8 — Environment-variable access.
repo/src/server/spaHtml.test.ts:42 
    delete process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45f101b63897c031 — Environment-variable access.
repo/src/server/spaHtml.test.ts:43 
    delete process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1e70460b061d1bf — Environment-variable access.
repo/src/server/spaHtml.test.ts:47 
    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID = 'pid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #061bae0b853fcbe6 — Environment-variable access.
repo/src/server/spaHtml.test.ts:48 
    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL = 'https://umami.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61a7a1295aeeba66 — Environment-variable access.
repo/src/server/spaHtml.ts:8 
  `http://localhost:${Number(process.env.VITE_DEV_PORT) || 9876}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bfe183fa9b37a40 — Environment-variable access.
repo/src/server/spaHtml.ts:130 
    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31ad3b6d3bbfa905 — Environment-variable access.
repo/src/server/spaHtml.ts:131 
    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08770e989a8832ab — Environment-variable access.
repo/src/server/spaHtml.ts:134 
      baseUrl: process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c8b37d0ca5e0116 — Environment-variable access.
repo/src/server/spaHtml.ts:135 
      projectId: process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f451f52d821dd9c1 — Environment-variable access.
repo/src/server/workflows-hono/middlewares/qstashAuth.ts:27 
  if (process.env.QSTASH_CURRENT_SIGNING_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7de8a413031b3b3e — Environment-variable access.
repo/src/server/workflows-hono/qstashClient.ts:13 
    token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b8fea20884c876f — Environment-variable access.
repo/src/server/workflows-hono/task/handlers/scheduleDispatch.ts:106 
    if (!process.env.APP_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e52c1626fdb43fa — Environment-variable access.
repo/src/server/workflows-hono/task/handlers/scheduleDispatch.ts:109 
    const url = `${process.env.APP_URL.replace(/\/$/, '')}${SCHEDULE_EXECUTE_PATH}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed287abd3804f070 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:6 
  const originalQstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #54559f24424da1d3 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:7 
  const originalQstashUrl = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #79c6f74d3cea15a0 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:10 
    process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4dc557da8f4f923 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:11 
    delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5accfc4431f29538 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:21 
    if (originalQstashToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6543450983f59618 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:22 
    else process.env.QSTASH_TOKEN = originalQstashToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb2600de96e85709 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:24 
    if (originalQstashUrl === undefined) delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2744a0ecf7048174 — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:25 
    else process.env.QSTASH_URL = originalQstashUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d24c960c5e871fd — Environment-variable access.
repo/src/server/workflows/runGuard/__tests__/qstashCancel.test.ts:136 
    delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd76340e728edc0f — Environment-variable access.
repo/src/server/workflows/runGuard/qstashCancel.ts:79 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42f5dc2eb082bd64 — Environment-variable access.
repo/src/server/workflows/runGuard/qstashCancel.ts:83 
  const qstashUrl = process.env.QSTASH_URL || DEFAULT_QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4856a8914dbdd54 — Filesystem access.
repo/src/services/electron/desktopExportService.tsx:32 
    await localFileService.writeFile({
      content,
      path: result.filePath,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4c442a6bfb238b8 — Filesystem access.
repo/src/services/electron/localFileService.ts:128 
    return ensureElectronIpc().localSystem.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #dfefc9a6dd0ffbbe — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/services/global.ts:20 
    const res = await fetch(VERSION_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ea84ea9ec992ff1f — Environment-variable access.
repo/src/services/marketApi.ts:202 
    const marketBaseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bc7859573675ddb — Filesystem access.
repo/src/services/projectFile.ts:164 
      : localFileService.writeFile({ content, path });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e52e2f063e0f8aee — Filesystem access.
repo/src/spa/router/desktopRouter.sync.test.tsx:81 
    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11f72270e7b0c753 — Filesystem access.
repo/src/spa/router/desktopRouter.sync.test.tsx:82 
    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.desktop.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e706133d220833d7 — Filesystem access.
repo/src/spa/router/mobileRouter.test.tsx:8 
    const source = await readFile(
      path.join(process.cwd(), 'src/spa/router/mobileRouter.config.tsx'),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2517887dfe5fc60 — Filesystem access.
repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:2200 
      const raw = fs.readFileSync(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2b535a4ba25899eb — Filesystem access.
repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:2942 
        traceData = JSON.parse(fs.readFileSync(tracePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30218c7f60a1a838 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:304 
    const previous = process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecc77850770c6f49 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:305 
    process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c886fec7b61b98c — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:328 
        delete process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94c878a91e52bea6 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:330 
        process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = previous;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b98348f5d2c60a4 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.ts:196 
        __DEV__ && process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e64c4049ba54c98a — Environment-variable access.
repo/src/store/chat/slices/message/action.test.ts:71 
  process.env.NEXT_PUBLIC_BASE_PATH = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cc1ace0bec8dca3 — Environment-variable access.
repo/src/store/serverConfig/slices/featureFlagOverride/action.ts:11 
const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f59aa5b2177aab81 — Environment-variable access.
repo/src/store/serverConfig/slices/featureFlagOverride/storage.ts:7 
const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be52197ed737c9c5 — Environment-variable access.
repo/vite.config.ts:20 
const isMobile = process.env.MOBILE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #329f2693468273b5 — Environment-variable access.
repo/vite.config.ts:21 
const isAuth = process.env.AUTH === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb1ac5eb9b14460e — Environment-variable access.
repo/vite.config.ts:22 
const mode = process.env.NODE_ENV === 'production' ? 'production' : 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dcb136bcdcbd004 — Environment-variable access.
repo/vite.config.ts:26 
const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4969c18aca20f43a — Environment-variable access.
repo/vite.config.ts:28 
const enableViteDevTools = process.env.LOBE_VITE_DEVTOOLS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa838df3d797ebe3 — Environment-variable access.
repo/vite.config.ts:31 
  const pathValue = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #959f355d7c0f0af9 — Environment-variable access.
repo/vite.config.ts:35 
    const pathExt = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca6830087d2b76ae — Environment-variable access.
repo/vite.config.ts:105 
  base: isDev ? '/' : process.env.VITE_CDN_BASE || (isAuth ? '/_spa-auth/' : '/_spa/'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11b1b0c066f2d409 — Environment-variable access.
repo/vite.config.ts:304 
      ? Number(process.env.MOBILE_SPA_PORT) || 3012

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa2483b86909d69f — Environment-variable access.
repo/vite.config.ts:306 
        ? Number(process.env.AUTH_SPA_PORT) || 3013

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6265ffe39c33714 — Environment-variable access.
repo/vite.config.ts:307 
        : Number(process.env.SPA_PORT) || 9876,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c57117599fa4859 — Environment-variable access.
repo/vite.config.ts:313 
      '/api': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b938916bd6229ede — Environment-variable access.
repo/vite.config.ts:314 
      '/oidc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d34ccebb07b7291c — Environment-variable access.
repo/vite.config.ts:315 
      '/trpc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #817c988cb03fb94b — Environment-variable access.
repo/vite.config.ts:316 
      '/webapi': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/server

npm first-party
high pii_flow production #92f864cee3560c16 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:151 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:151 
    const response = await fetch(zipUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5597168ccb9a3b25 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:184 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:184 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d204a38805094b42 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:210 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/modules/GitHub/index.ts:210 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #945ec446db11cd6b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:79 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:79 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b59eb4fc41e70bff — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:171 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:171 
    const response = await fetch(forkUrl, {
      body: JSON.stringify({
        identifier: item.identifier,
        name: item.name,
        status: item.status,
        versionNumber: item.versionNumber,
        visibility: item.visibility,
      }),
      headers,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d646844cbbb16abd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:535 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:535 
        const response = await fetch(url, { headers, method: 'GET' });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4c57b5d5620b28ca — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:589 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:589 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9e7c1a6c3957b4b3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:647 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agent.ts:647 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7cda8468b5763c3d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:70 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:70 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b52a3d6a9d31574f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:261 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:261 
        const response = await fetch(deprecateUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b5249ac06567113f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:335 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:335 
        const response = await fetch(forkUrl, {
          body: JSON.stringify({
            identifier: input.identifier,
            name: input.name,
            status: input.status,
            versionNumber: input.versionNumber,
            visibility: input.visibility,
          }),
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4b6a0a098a3248b3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:423 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:423 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a1bda22aadbf0c27 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:481 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:481 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #991258523435fe5a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:564 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:564 
        const response = await fetch(listUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #81cff19aa234974d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:651 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:651 
        const response = await fetch(publishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #537315f254c996bd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:809 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/agentGroup.ts:809 
        const response = await fetch(unpublishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2ce07f7b71c56848 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(skillId),
                assetType: 'skill',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #71be410d2646a958 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(pluginId),
                assetType: 'plugin',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #592ce1fa57fa4d51 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 
      const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/scan`, {
        headers,
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #fd5d66787042d126 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 
        const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/submit-repo`, {
          body: JSON.stringify({
            branch: input.branch,
            gitUrl: input.gitUrl,
            type: input.type,
          }),
          headers: {
            ...headers,
            'Content-Type': 'application/json',
            ...(input.actAs === undefined
              ? {}
              : { 'x-lobe-owner-account-id': String(input.actAs) }),
          },
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #37f82daa2558e849 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #04d22e20784664a9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 
    const data = (await this.rest.post(Routes.userChannels(), {
      body: { recipient_id: recipientId },
    })) as { id: string };

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #18cbc4d471c53243 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:54 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:54 
      const res = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9d90f563cbfe8169 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:92 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:92 
      const response = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #aabcdf110e5eead1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:207 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/changelog/index.ts:207 
        const res = await fetch(url);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8e6ce277dd4265fb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:122 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/desktopRelease/index.ts:120 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/desktopRelease/index.ts:122 
  const res = await fetch(`https://api.github.com/repos/${owner}/${repo}/releases/latest`, {
    headers: {
      ...(token ? { Authorization: `Bearer ${token}` } : {}),
      'Accept': 'application/vnd.github+json',
      'User-Agent': 'lobehub-server',
    },
    next: { revalidate: 300, tags: [FetchCacheTag.DesktopRelease] },
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #14b17796006dc484 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:210 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:210 
    const response = await fetch(userInfoUrl, {
      // @ts-ignore
      headers: this.market.headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2c8bb72b37b669c9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:708 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/market/index.ts:708 
    const response = await fetch(uploadUrl, {
      body: formData,
      headers: authHeaders,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b2e43dfec1ce2394 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/index.ts:63 
    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        device_code: deviceCode,
        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3ff9c5c6a03409b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 
    const response = await fetch(GithubCopilotOAuthService.TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `token ${oauthToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cdf8bfb23ad401cc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:71 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/anspire/index.ts:74 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/anspire/index.ts:71 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': '*/*',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Connection': 'keep-alive ',
          'Content-Type': 'application/json',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c45040de5b0fabdc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:61 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/bocha/index.ts:64 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/bocha/index.ts:61 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ab0646e06e3ff421 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:66 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/brave/index.ts:70 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/brave/index.ts:66 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': 'application/json',
          'Accept-Encoding': 'gzip',
          'X-Subscription-Token': this.apiKey ? this.apiKey : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #bdb28e8ba9b28ec5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:65 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/exa/index.ts:69 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/exa/index.ts:65 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Content-Type': 'application/json',
          'x-api-key': this.apiKey ? this.apiKey : '',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6e89b3e0a510dc4f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6e056915dd49a501 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:44 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/jina/index.ts:48 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/jina/index.ts:44 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Accept': 'application/json',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
          'X-Respond-With': 'no-content',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #37065e1aead0002b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:50 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/kagi/index.ts:52 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/kagi/index.ts:50 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          Authorization: this.apiKey ? `Bot ${this.apiKey}` : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d2b036c5d779dd76 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:82 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/search1api/index.ts:85 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/search1api/index.ts:82 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7ef2bbc834ba754d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:60 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/tavily/index.ts:40 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/search/impls/tavily/index.ts:60 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow production #6cf0bbc3ba6bc9df — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-yp75nq7n/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #be90a5c4395a3dd5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/apps/server/src/services/user/index.ts:45 
    analytics?.track({
      name: 'user_register_completed',
      properties: {
        spm: 'user_service.init_user.user_created',
      },
      userId: user.id,
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 253 low-confidence finding(s)
low env_fs production #785eccfe590c7423 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:39 
        delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bb27aa8274beaba — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:100 
    process.env.OPENAI_MODEL_LIST = '+gpt-4,+gpt-3.5-turbo';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9577d01996e4af5e — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:118 
    process.env.CUSTOM_OPENAI_MODELS = '+custom-model';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4643c727c027e810 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:134 
    process.env.OPENAI_MODEL_LIST = '+gpt-4->deployment1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec3df07f99055df2 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.ts:47 
        process.env[providerConfig.modelListKey ?? `${providerUpperCase}_MODEL_LIST`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a054147c594569a6 — Environment-variable access.
repo/apps/server/src/globalConfig/index.ts:64 
      fetchOnClient: isDesktop ? false : !process.env.OLLAMA_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86b65097041417e4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:7 
const originalWorkflowParallelism = process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #392c7daa68a8008b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:12 
      delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f68808610f8f248b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:16 
    process.env[WORKFLOW_PARALLELISM_ENV] = originalWorkflowParallelism;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b0c028f7ba98c7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:20 
    delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6907078a873f4254 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:26 
    process.env[WORKFLOW_PARALLELISM_ENV] = '17';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13f677147e8d5e6d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:32 
    process.env[WORKFLOW_PARALLELISM_ENV] = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00d9db0ceb24f5cc — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:36 
    process.env[WORKFLOW_PARALLELISM_ENV] = 'abc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42900a9336bd6f75 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:107 
  const apiKey = process.env.MEMORY_USER_MEMORY_GATEKEEPER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dff79605f3d76982 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:108 
  const baseURL = process.env.MEMORY_USER_MEMORY_GATEKEEPER_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ed69549efbab57a — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:109 
  const model = process.env.MEMORY_USER_MEMORY_GATEKEEPER_MODEL || DEFAULT_MINI_MODEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40734923c3e0217e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:110 
  const provider = process.env.MEMORY_USER_MEMORY_GATEKEEPER_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba2393d94d2c86c9 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:111 
  const language = process.env.MEMORY_USER_MEMORY_GATEKEEPER_LANGUAGE || 'English';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50bc14d2fe0e4720 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:123 
  const model = process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_MODEL || fallback.model;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56343756f42d9c7d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:125 
    process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b3be8e8d0d394f0 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:130 
    apiKey: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_API_KEY ?? fallback.apiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5f5b4b20857acb2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:131 
    baseURL: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_BASE_URL ?? fallback.baseURL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0e4cc84d671cec4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:132 
    language: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_LANGUAGE ?? fallback.language,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0301605fefbf91eb — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:139 
  const apiKey = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #261ca509f583daaa — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:140 
  const baseURL = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b37577a02e55c3d3 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:141 
  const model = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fb60db9731ae2c5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:142 
  const provider = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc806eb3e211640e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:145 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_CONTEXT_LIMIT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5d3207858e90887 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:151 
      const override = (process.env as Record<string, string | undefined>)[envKey];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b740f62f42265872 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:176 
  const model = process.env.MEMORY_USER_MEMORY_EMBEDDING_MODEL || fallbackModel || defaultModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dc006ef316baff8 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:178 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e9329b237d0c7cd — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:184 
    apiKey: process.env.MEMORY_USER_MEMORY_EMBEDDING_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13e0d1c3773e6f46 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:185 
    baseURL: process.env.MEMORY_USER_MEMORY_EMBEDDING_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b9f6ff496136d4e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:188 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_EMBEDDING_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6acede4f5096ab8f — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:199 
  const model = process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7afee2f73c7c240 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:201 
    process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffcfec36d634e147 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:206 
    apiKey: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba29a25bf766b65f — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:207 
    baseURL: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0111a07c329aad81 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:209 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1b284047ff36105 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:216 
  const accessKeyId = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ACCESS_KEY_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46a6bdf7529b469c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:217 
  const secretAccessKey = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6827e280cc433f06 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:218 
  const bucketName = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_BUCKET_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #975bcdcaf0d66cf5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:219 
  const region = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #483deece816357d2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:220 
  const endpoint = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99e07beeda2ad58b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:221 
  const forcePathStyle = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_FORCE_PATH_STYLE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f27ff9e70568eb68 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:222 
  const pathPrefix = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_PATH_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f971afbe3700adde — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:268 
    enableBenchmarkLoCoMo: process.env.MEMORY_USER_MEMORY_FEATURE_FLAG_BENCHMARK_LOCOMO === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60fa0cc349632f91 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:270 
  const concurrencyRaw = process.env.MEMORY_USER_MEMORY_CONCURRENCY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #100f5770811a0cc2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:278 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_PROCESS_USER_TOPICS_PARALLELISM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24eb260c03589949 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:282 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_MAX_TOPICS_PER_USER_PER_RUN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c073c97a2b620e3c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:286 
  const whitelistUsers = process.env.MEMORY_USER_MEMORY_WHITELIST_USERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13fe0c4b1338c1e7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:290 
  const webhookHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90f40d00497b8bf5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:300 
  const upstashWorkflowExtraHeaders = process.env.MEMORY_USER_MEMORY_WORKFLOW_EXTRA_HEADERS?.split(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c643313a0c31e02 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:313 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd33f5bbe1f735f9 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:316 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #745510c2d4309bc5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:319 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6aecf2e6fcb3df71 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:322 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d3d8dff4cde8a8b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:325 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb437999d5c9d853 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:328 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faed45a88ac9ffb1 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:348 
      baseUrl: process.env.MEMORY_USER_MEMORY_WEBHOOK_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd8922813470b673 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:12 
    originalSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b29bd0863f2a1b7 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:13 
    process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b2a6c8fb177b061 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:19 
    process.env.KEY_VAULTS_SECRET = originalSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67f8a21de2f09c84 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:41 
    process.env.KEY_VAULTS_SECRET = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb988e6f75130c41 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:52 
    process.env.KEY_VAULTS_SECRET = Buffer.from('short').toString('base64');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7e41da51d644a57 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:86 
      process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8419333f5a6bba9 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:36 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1743ae2a1d906710 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:44 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb20e687e3ff8a08 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:61 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bdfe3e65928dfea — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:72 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51f3839ff54ffd7d — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:95 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c7c98a7a9cc2cdf — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:107 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d09c4806f0762695 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:120 
      process.env.API_KEY_SELECT_MODE = nanoid();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4fea1857c22ce47 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:504 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a76b88ed08e4b41 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:514 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87adddf02af77756 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:188 
      const baseURL = payload?.baseURL || process.env[`${upperProvider}_PROXY_URL`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #009c3d5bd20d26e6 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:194 
      const baseURL = payload?.baseURL || process.env.OLLAMA_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3ceecc0de77477b — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:335 
  const rawCredentials = payload.apiKey || process.env.VERTEXAI_CREDENTIALS || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90ba298d00e7d762 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:340 
  const projectFromEnv = process.env.VERTEXAI_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6001e56f6a85f8dc — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:346 
    process.env.VERTEXAI_LOCATION ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ffa35cd0bcd410d9 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:173 
      const originalEnv = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2af5839c1f8c261b — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:174 
      process.env.VERCEL_AUTOMATION_BYPASS_SECRET = 'test-bypass-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9ed28630a620bac — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:186 
        process.env.VERCEL_AUTOMATION_BYPASS_SECRET = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c6b0d37054a88a4 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:188 
        delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1174e1a20483508 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:193 
      delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d613df1d8e70714 — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:22 
  if (process.env.VERCEL_AUTOMATION_BYPASS_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1ae9d62b76b3faf — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:23 
    headers['x-vercel-protection-bypass'] = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #95b031090eeb3ed9 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cba23a9707f2606e — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgents.integration.test.ts:23 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d7ca271e6edf8dc4 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execGroupAgent.integration.test.ts:24 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #89e1bd64087a52f5 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/multiRoundTools.integration.test.ts:25 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #162e9ceb95cd8337 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverCallAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #95cdb7c4463d6d2a — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverSubAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223b25349e2279aa — Environment-variable access.
repo/apps/server/src/routers/lambda/composio.ts:146 
      const callbackUrl = `${process.env.APP_URL || process.env.NEXTAUTH_URL || ''}/api/composio/oauth/callback`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efb3af050c4b1683 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:28 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e970de7e980bdbdc — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:37 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d49090621770598 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:41 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1907a310d6187e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:50 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b394e7717e6d932 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:54 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #706337547079374d — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:65 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7435be9f7d166622 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:69 
          process.env.OPENAI_MODEL_LIST = '-gpt-4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d0db12e21e48d22 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:77 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ceb20ee02d19bf1 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:81 
          process.env.OPENAI_MODEL_LIST = '+gpt-4-1106-preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f46f4b0013ff759 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:91 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81c84d0bf42e8fc4 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:95 
          process.env.OPENAI_MODEL_LIST = 'model1,model2,model3，model4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b59266c27adf0a7 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:130 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84de1c3705d1326e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:136 
          process.env.OPENROUTER_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0edfa5df359fbabb — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:146 
          process.env.OPENROUTER_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69294d5de99bf6f8 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:151 
        const originalApiKey = process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d63dcb16e4017e0e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:152 
        delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d4865ac851c9f0d — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:159 
          delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #676576467223159a — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:161 
          process.env.DEEPSEEK_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcaff1d4fd4d4e35 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:169 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25efef01be742279 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:181 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2601a1a46dc7789 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:185 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ca35244e42b2116 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:197 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c048f5999c027a22 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/routers/lambda/exporter.ts:37 
  const response = await fetch(REGULAR_FONT_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e16458ab9285c787 — Environment-variable access.
repo/apps/server/src/routers/lambda/image/index.ts:143 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #066a48da34235b5e — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agent.ts:15 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #291528ca66ab7af7 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:13 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f173701ddff6c05 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:703 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94a283e6f293e38e — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:712 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d3d3611505fc76e — Environment-variable access.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed3486782970b7e8 — Environment-variable access.
repo/apps/server/src/routers/lambda/userMemories.ts:931 
      if (process.env.NODE_ENV !== 'production' && process.env.DEV_DISABLE_AUTO_MEMORY === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a7f9ec6381ad86e — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:139 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dac1557806ed88ab — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:255 
        const callbackBaseUrl = process.env.WEBHOOK_PROXY_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5710a9500b9e8455 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:164 
    process.env.AGENT_RUNTIME_BASE_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b94e40750db81a99 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:196 
    delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78efebb90d481b6b — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:202 
      delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff8d315357a9fc17 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:208 
      process.env.AGENT_RUNTIME_BASE_URL = 'http://custom:3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1388b7e4bd3ce9a — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:88 
if (process.env.VERCEL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79a1d88630ba75ac — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:284 
    const baseUrl = process.env.AGENT_RUNTIME_BASE_URL || appEnv.APP_URL || 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7642eb6c72827a2 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:31 
    : urlJoin(process.env.INTERNAL_APP_URL || process.env.APP_URL || '', url);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72a2dc79d68c3868 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:35 
      const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d670e689a708e7 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:48 
          ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93c0db54c8f5df2b — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:49 
            'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #83317d4127febf18 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:273 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5535b8428b178b0 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:278 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3be08b9e6f0532b — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:282 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c6f8c5c3790a186 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:283 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88825e152bc97642 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:305 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42afc26e3f087f52 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:8 
  const explicitValue = process.env.ENABLE_AGENT_S3_TRACING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75a3dd8a159cc2ab — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:12 
  return process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaeab221c52985b6 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:49 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #734440e0c97042fd — Filesystem access.
repo/apps/server/src/services/agentSignal/__tests__/promptBoundaries.test.ts:9 
const read = (filePath: string) => readFileSync(path.join(root, filePath), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f83e0078dd4de7de — Environment-variable access.
repo/apps/server/src/services/aiAgent/__tests__/execAgent.memory.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #156648a323994a70 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/bot/platforms/discord/client.ts:514 
      const res = await fetch('https://discord.com/api/v10/users/@me', {
        headers: { Authorization: `Bot ${credentials.botToken}` },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f5f8b239e5de5142 — Environment-variable access.
repo/apps/server/src/services/changelog/index.test.ts:261 
        process.env.DOC_S3_PUBLIC_DOMAIN = 'https://cdn.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8d93d45f4f4255d — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:15 
const docCdnPrefix = process.env.DOC_S3_PUBLIC_DOMAIN || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #270dcf87efbd0867 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:34 
    branch: process.env.DOCS_BRANCH || 'main',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b476e8680846bc83 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:41 
    urlTemplate: process.env.CHANGELOG_URL_TEMPLATE || URL_TEMPLATE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #845a24787fad358b — Environment-variable access.
repo/apps/server/src/services/comfyui/core/comfyUIClientService.ts:70 
        options.baseURL || process.env.COMFYUI_DEFAULT_URL || COMFYUI_DEFAULTS.BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44f4f440452a226e — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:120 
  const token = options?.token || process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b3d4d5793c06992 — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:175 
    options?.baseUrl || process.env.DESKTOP_UPDATE_SERVER_URL || process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef7743d331d912e0 — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:104 
      process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0d5d12c07bad69a — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:113 
      if (process.env.VERCEL_PROJECT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88e5671a8a13f656 — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:114 
        return process.env.VERCEL_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dca80017bee534d — Filesystem access.
repo/apps/server/src/services/doc/index.tsx:18 
    const text: string = readFileSync(localPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0ea1f8269fecbe0 — Environment-variable access.
repo/apps/server/src/services/gateway/GatewayManager.ts:253 
      appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0120ca0ab77e625 — Environment-variable access.
repo/apps/server/src/services/gateway/index.ts:105 
const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc0b59ff89854b7e — Filesystem access.
repo/apps/server/src/services/generation/video.ts:74 
        fs.readFile(String(tempVideoPath)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c4fa96828840699 — Filesystem access.
repo/apps/server/src/services/generation/video.ts:99 
      const coverBuffer = await fs.readFile(String(tempCoverPath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f42bce319b094e10 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:500 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b448751fcc1e66d8 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:501 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6606c47fbb6356a1 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:537 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #70bbf0159090282e — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:538 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a558528500f5b5a0 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:543 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d0dcb62c251443e4 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:544 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c950f2badae24d2 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:545 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb66b9ee725f070b — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:546 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8af86bf39db5c7dd — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:594 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5169973dfb2b7f7c — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:595 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b6800295af88cec — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:645 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #df10e241418eb54f — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:646 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e6459f4f301fbaf — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:652 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aa20a54133273bdd — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:653 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a61f02f1f8b9e0e — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:654 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8c9a331895b15fab — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:655 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #341c8950e10ac7d0 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/sandboxRunner.ts:193 
  const serverUrl = process.env.LOBEHUB_HETERO_SERVER_URL ?? appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8955662c740ca31a — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:261 
  if (process.env.ENABLE_LLM_GENERATION_TRACING_S3 === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #186ee44e43ac7765 — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:272 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1159e7c6bff3082 — Environment-variable access.
repo/apps/server/src/services/market/index.ts:13 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01aba8b55de46705 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2748 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43f5e6ab52f27d40 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2753 
  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e035836b83f233dc — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2754 
    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fc3e21d5ec8a4a4f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/oauth/slackOAuth.ts:29 
  const url = new URL(SLACK_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #03c0347964e1fc29 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:81 
  const url = new URL(DISCORD_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0d6176262e3fe422 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:108 
  const tokenResponse = await fetch(DISCORD_TOKEN_URL, {
    body,
    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
    method: 'POST',
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0139380f68129a07 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:132 
    const userResponse = await fetch(`${DISCORD_API_BASE}/users/@me`, {
      headers: { Authorization: `Bearer ${data.access_token}` },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d734d9a43a3314b9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/slack/oauth.ts:103 
  const url = new URL('https://slack.com/app/open');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only #460c7730a07e85b8 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:128 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb984c975e8eb7bd — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:139 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8c25ef906b3cb765 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:148 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #18f0ebc5a0f97447 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:153 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3c005c34f40d4c86 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:161 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5752971570e5880 — Environment-variable access.
repo/apps/server/src/services/queue/impls/index.ts:26 
    const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97c8f2c93c10f90d — Environment-variable access.
repo/apps/server/src/services/search/impls/anspire/index.ts:21 
    return process.env.ANSPIRE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #931bfb8db55be380 — Environment-variable access.
repo/apps/server/src/services/search/impls/bocha/index.ts:28 
    return process.env.BOCHA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8788cf5eaf47cfaf — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:30 
    process.env.BRAVE_API_KEY = 'test-brave-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a1d5b5884bffbf9 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:35 
    delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bffe3fcd01f93a9c — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:145 
      delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #868f40693eb98bdc — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.ts:28 
    return process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fca8dad374ab2f46 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:27 
    process.env.EXA_API_KEY = 'test-exa-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23b8f35614022f0e — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:32 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d82f6a9fc3d39780 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:153 
      delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d24dc12e3418fe4 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.ts:21 
    return process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98220caac40cf368 — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:28 
    return process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5ff9ed219f109eb — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:33 
    return process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1b15cbc6635f727 — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:28 
    return process.env.GOOGLE_PSE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b3a72427444b2ff — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:32 
    return process.env.GOOGLE_PSE_ENGINE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3722fee9c0d87dcc — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:21 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #614a9a86fd3e84c4 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:22 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e913a3299abdd83a — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:23 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ffe4f9301e35b5b — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73d632b37e281a4a — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8095ec4838a6637f — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db1a0472074453cf — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:34 
    process.env.JINA_READER_API_KEY = 'test-jina-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf22fc451134eccf — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:79 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #435954d0f99403cd — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.ts:22 
    return process.env.JINA_READER_API_KEY || process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c9fbdc23bf716d0 — Environment-variable access.
repo/apps/server/src/services/search/impls/kagi/index.ts:21 
    return process.env.KAGI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd2911f053106b91 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.integration.test.ts:7 
const apiKey = process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9fe327baca5a97d — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:39 
    process.env.SEARCH1API_SEARCH_API_KEY = 'test-search1api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02ada6a91cd23851 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:40 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #247754d4b56298d6 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:45 
    delete process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6edee08f305a726a — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:46 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #621eff9d2fdd55d2 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.ts:41 
    return process.env.SEARCH1API_SEARCH_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #550aa5d2a6577c02 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:27 
    process.env.TAVILY_API_KEY = 'test-tavily-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f0911dc7f07876c — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:28 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e50acbf8d7d155d9 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:33 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7471a5a7700ac7e — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:34 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c7e50c77451afcb — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:147 
      process.env.TAVILY_SEARCH_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a888622d8ef1e48a — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:170 
      delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba284ce7ab88c8fe — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:21 
    return process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6612c3bf14e19f18 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 
      search_depth: process.env.TAVILY_SEARCH_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d59426478b192da9 — Filesystem access.
repo/apps/server/src/services/skill/importer.ts:92 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14874545e7b2aeec — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:825 
      await writeFile(testZipPath, zipped);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d46953e89c14c8e — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:851 
      await writeFile(invalidZipPath, Buffer.from([1, 2, 3, 4]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #806d78e30ac6072c — Filesystem access.
repo/apps/server/src/services/skill/parser.ts:61 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7470fec4abeb647b — Environment-variable access.
repo/apps/server/src/services/taskScheduler/impls/index.ts:24 
    const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31cdab0b55dc2cf2 — Environment-variable access.
repo/apps/server/src/services/taskTemplate/index.ts:23 
  process.env.VERCEL_PROJECT_ID || process.env.VERCEL_PROJECT_PRODUCTION_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dd6f6534588e750 — Environment-variable access.
repo/apps/server/src/services/toolExecution/serverRuntimes/agentDocuments.ts:22 
    return process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75443e110877db50 — Filesystem access.
repo/apps/server/src/utils/tempFileManager.ts:29 
      writeFileSync(filePath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbda5e265c757da4 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:25 
    process.env.VERCEL = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae10a33e2eeef69e — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:26 
    process.env.VERCEL_ENV = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46eb6681cfd3b749 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:35 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e9d5c101c5117e4 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:36 
    process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cb755c10d12e4d0 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:37 
    process.env.VERCEL_URL = 'preview-url.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4374a68b344b9a76 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:46 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a205396b4877a50b — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:47 
    process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc8f5320b2a2a304 — Environment-variable access.
repo/apps/server/src/utils/url.ts:3 
const isVercelPreview = process.env.VERCEL === '1' && process.env.VERCEL_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ce2104820f6a997 — Environment-variable access.
repo/apps/server/src/utils/url.ts:5 
const vercelPreviewUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0627be0f4c14c793 — Environment-variable access.
repo/apps/server/src/workflows/agentEvalRun/index.ts:127 
  const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7098a0a1c6a80cb3 — Environment-variable access.
repo/apps/server/src/workflows/agentSignal/run.ts:104 
  if (process.env.NODE_ENV !== 'development') return null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-runtime

npm first-party
high pii_flow production #8f5174f41625719b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8ce2976d161812a7 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 
  const response = await fetch(`${baseURL}/videos`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #26cd15937ff063f1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 
      const response = await fetch(urlJoin(rootBaseURL, '/api/v1/models'), {
        headers: {
          'Authorization': `Bearer ${apiKey}`,
          'APP-Code': 'LobeHub',
        },
        signal: controller.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a6bdf7d933a97027 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:67 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/azureai/index.ts:33 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/azureai/index.ts:67 
      const response = this.client.path('/chat/completions').post({
        body: {
          messages: updatedMessages as OpenAI.ChatCompletionMessageParam[],
          model,
          ...params,
          stream: enableStreaming,
          temperature: model.includes('o3') || model.includes('o4') ? undefined : temperature,
          tool_choice: params.tools ? 'auto' : undefined,
          top_p: model.includes('o3') || model.includes('o4') ? undefined : top_p,
        },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #47010cbbad75a70a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 
  const response = await fetch(url, {
    body: JSON.stringify(payload),
    headers: {
      'Content-Type': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #421dc9c15680fea1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 
  const response = await fetch(pollingUrl, {
    headers: {
      'accept': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #efc8b50dcc56535e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 
      response = await fetch(url, {
        body: JSON.stringify({ tools: functions, ...restPayload }),
        headers: { 'Content-Type': 'application/json', ...headers },
        method: 'POST',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9b34e26466276484 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${this.apiKey}`,
        'Content-Type': 'application/json',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2d589408768dfb16 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:101 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/comfyui/index.ts:101 
      const response = await fetch(`${appUrl}/webapi/create-image/comfyui`, {
        body: JSON.stringify({
          model: payload.model,
          options: this.options,
          params: payload.params,
        }),
        headers,
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2ef9e2cc97e2b755 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:471 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/google/index.ts:135 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/google/index.ts:471 
      const response = await fetch(url, {
        headers: {
          'x-goog-api-key': this.apiKey!,
        },
        method: 'GET',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #addd36e642cf1758 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #61574b6a86925397 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cb94941f690f129c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 
  const response = await fetch(`${baseURL}/video_generation`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5330e38c150bd7b4 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:31 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/nebius/index.ts:34 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/nebius/index.ts:31 
    const res = await fetch(url, {
      headers: {
        Accept: 'application/json',
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6a45761b54c951be — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 
  const response = await fetch(statusUrl, {
    body: JSON.stringify({ requestId }),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e31f5b9114b4aebd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 
  const response = await fetch(`${baseURL}/video/submit`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f518e2b9b91a5119 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:44 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/straico/index.ts:46 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6655c66322d50bf5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 
  const response = await fetch(`${baseURL}/contents/generations/tasks`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0b218afa45e0c5db — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #07d887c74d01cb87 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 
  const response = await fetch(`${baseURL}/video/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a6fb6f6d257b96ab — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #132b40ba64b6fa87 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #462ec6c3f34bfb8e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #bf16929bb89130ca — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 
  const response = await fetch(endpoint, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ac2b5236df94f25b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #65b4ad758f3a57f3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #12c088615031fc48 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 · flow /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → /tmp/closeopen-yp75nq7n/repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 380 low-confidence finding(s)
low env_fs production #ab3f0a00674fc91c — Environment-variable access.
repo/packages/model-runtime/src/core/RouterRuntime/createRuntime.ts:250 
      if (process.env.NODE_ENV !== 'development') return effectiveUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62073a83ce782df5 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:25 
const originalAnthropicClientTimeout = process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f157b2820edf1224 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:29 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bb4a03e0a6dc1a0 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:31 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = originalAnthropicClientTimeout;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df1e4fc9316f8240 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:68 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ea90b38a7a12f0a — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:81 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70238ae6ed8f9498 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:91 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #882dcccace7539b5 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:96 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = 'invalid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c774f85cebec8b75 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:106 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54be4b2e36d03b8b — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:111 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4678f169db470ed7 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:124 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bdfd1776839a347 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:66 
  const timeout = Number(process.env[ANTHROPIC_CLIENT_TIMEOUT_ENV]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a8149a266ca3fa3 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:275 
  const betaHeaders = process.env.ANTHROPIC_BETA_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8f806fc8255f762 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/anthropic.ts:479 
  const maxUses = process.env.ANTHROPIC_MAX_USES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ce34b7f716da721 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:39 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2844f0133c4f8a48 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:64 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4bc20117a3014d0 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:80 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #769be1581efd354b — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:104 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ce155fa2fbb98bc — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:127 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd531b63bd7bb660 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:131 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17ae7b91f1536038 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:147 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e0329b7e6da0c09 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:171 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #733fbc41a84d3ea6 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:185 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71cbb174ddae7b2d — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:219 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe29cafc7e34fb5d — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:238 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2fc7b537a972ff0 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:937 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc0216c508cf3d7b — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:979 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76a1143c0ddc706b — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:45 
      options?.forceImageBase64 || process.env.LLM_VISION_IMAGE_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d881303755593c4 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:61 
      options?.forceVideoBase64 || process.env.LLM_VISION_VIDEO_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #060ff22dc66a69e2 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:43 
    chatCompletion: () => process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85acf0aaa36b2215 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1664 
        const originalDebugValue = process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1afc979cbfaa5703 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1667 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8af84a23d0a4eedc — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1683 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1da0b2b4fd5a1369 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:338 
          const originalDebugValue = process.env[debugEnv];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1387354aca746e36 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:340 
          process.env[debugEnv] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03463afbd6862133 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:356 
          process.env[debugEnv] = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6a1e91ded269e80 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai21/index.ts:16 
    chatCompletion: () => process.env.DEBUG_AI21_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3261cc11f32090a5 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai302/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AI302_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4caf18113d848814 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:34 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e1dae7d4824c25f — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:40 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb75308f2bc78065 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:43 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9610d0c23517efd — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:47 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a87a33e182b9b971 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:50 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dbdd6c6169c0bde — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.ts:39 
    chatCompletion: () => process.env.DEBUG_AI360_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01122d9a1b15b03b — Environment-variable access.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:156 
    chatCompletion: () => process.env.DEBUG_AIHUBMIX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eeb42391ec8cdc97 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:68 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b15ce1f8d97b322 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:74 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb03c809376040fd — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:77 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51d7f781721e7c15 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:81 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #add8cdd01bfceded — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:84 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d55e096f6ea7df9 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AKASH_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d4411c5a140815d — Environment-variable access.
repo/packages/model-runtime/src/providers/antgroup/index.ts:22 
    chatCompletion: () => process.env.DEBUG_ANTGROUP_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9eeb659108a1f79 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:262 
      const originalDebugValue = process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23326e75eedc19f5 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:264 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aece7fe781a5672a — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:278 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b63c0ac4f8e2185f — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.ts:23 
    chatCompletion: () => process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2882d8bbee188a69 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:436 
        process.env.DEBUG_AZURE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1b03656c7a9aa70 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:451 
        delete process.env.DEBUG_AZURE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e9dc1ec95215557 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:19 
const azureSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19e6b464c1d3aa20 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:141 
    chatCompletion: () => process.env.DEBUG_AZURE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9d69ba77b2a3292 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:142 
    responses: () => process.env.DEBUG_AZURE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed0ebd84ba1a0b61 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureai/index.ts:115 
        if (process.env.DEBUG_AZURE_AI_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa875389e0d75066 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:45 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77b6f2876e25912f — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:51 
      process.env.DEBUG_BAICHUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cf7cb12a79857f4 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:54 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee65140e3d59d2f5 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:110 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc65d87c89f8dbe8 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:124 
      process.env.BAICHUAN_SEARCH_MODE = 'quality_first';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #244dd334794f26a1 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:136 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #609d3309b6800cc6 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:30 
                search_mode: process.env.BAICHUAN_SEARCH_MODE || 'performance_first', // performance_first or quality_first

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e22b841771edf8a — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:56 
    chatCompletion: () => process.env.DEBUG_BAICHUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4ba4a0b8981d35b — Environment-variable access.
repo/packages/model-runtime/src/providers/bailianCodingPlan/index.ts:45 
    chatCompletion: () => process.env.DEBUG_BAILIAN_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a49185edbdb55a53 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:569 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ad51d528cc281db — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:583 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f110fa97a195896 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:973 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #812a77e1e67f08e4 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:987 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04164a233b05e6d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:372 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eba778acf608f24b — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:433 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #321c25aec0f6aabb — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:66 
      delete process.env.DEBUG_CEREBRAS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3517a3fcfd15ac7e — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:72 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01781e9e08f0e11a — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:78 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b10d730cb43c46dc — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:84 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b34b01295dad82e7 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.ts:21 
    chatCompletion: () => process.env.DEBUG_CEREBRAS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a947cbe54ada8570 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:255 
      const originalDebugValue = process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9ef82d9ae98c714 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:257 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53b871c41376a4dd — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:271 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff3be2b0e9e0bb0a — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:136 
    if (process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aa4a436331dd0cd — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:44 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #210bc9280e4fe552 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:50 
      process.env.DEBUG_COHERE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7455eea8018e4cd3 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:53 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57242605fcdef15f — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.ts:42 
    chatCompletion: () => process.env.DEBUG_COHERE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4689771b63f773d — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:49 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb64fc140e5b3b68 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:55 
      process.env.DEBUG_COMETAPI_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37fc24e070b4502c — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:58 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #082d0446ced649cb — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.ts:27 
    chatCompletion: () => process.env.DEBUG_COMETAPI_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b8a40c06c5588301 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:49 
      const originalEnv = process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88d5e71f2c331b78 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:50 
      process.env.COMFYUI_DEFAULT_URL = 'https://env.comfyui.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5abba06f69529724 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:58 
        delete process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2abddf98157afdbf — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:60 
        process.env.COMFYUI_DEFAULT_URL = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f6d590887c3776c9 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:202 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bad2a7801a6cd8a6 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:203 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8ceea506d8e88363 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:204 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #deed3f0b98a8b32a — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:205 
      process.env.APP_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #665d452bf14709af — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:237 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #39aa678778e17a23 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:239 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #757105890bca85b4 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:242 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #010199f6e7e187f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:244 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59a207b8af1d1713 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:261 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #de86269dcfcc6839 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:262 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #70cbac7edd03aa0f — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:263 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #89a2d39f5f1ad9d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:264 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69dd7ae444c0a6ef — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:274 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3e2444cbe68bdaeb — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:276 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e07fd5ce49cfe76 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:279 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7405ea14ed6219f0 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:281 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ebf1a5f0fa524bb8 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:300 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a219bf692c28a798 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:301 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d06efaad1d3cba98 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:302 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #97bcb136c1441272 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:303 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9378403059b68f2e — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:304 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #97b303a6f9c50cd1 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:305 
      process.env.PORT = '3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a0454491713fa59b — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:317 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8905398c20a41e5d — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:320 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5eb28feeebd95315 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:323 
        delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21fb73ba0c8c23cf — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:325 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c5f2e49b146ba2d — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:344 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69eef94a2d3f6186 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:345 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7cd543ae810ba017 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:346 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #334f554682ee1740 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:347 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8f4b8e02485d204 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:348 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #de3655c629b07871 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:349 
      delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cd9735a91a0c7a74 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:361 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2c7c0a6359e5b2e2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:364 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8aeb0bc5667ad2bc — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:367 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b11c19dde897c31 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:28 
    this.baseURL = options.baseURL || process.env.COMFYUI_DEFAULT_URL || 'http://localhost:8188';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11a1a12341766c2c — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:76 
      const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0854f94796e698e9 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 
      const vercelUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d879821a5effbcf — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:79 
        process.env.INTERNAL_APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62f947eda45ea4ad — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:80 
        process.env.APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0be316250be2376 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:81 
        (isInVercel ? vercelUrl : `http://localhost:${process.env.PORT || 3010}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16390563348e2949 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:90 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21c948d0f45606b9 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:96 
      const keyVaultSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #861524662b247fb5 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:158 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #00303fe855829f9b — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:164 
    process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #16daf0c931954132 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:167 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba3d82387790de58 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:46 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3203aaef7d87863 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:64 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7599f205bc5af18b — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:40 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #097e80a34363d43c — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:44 
      process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2771963230cb5fd6 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:48 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35036e48c65a3174 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae8828c65c3f7272 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:55 
      delete process.env.DEBUG_GITEE_AI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f257bec631d21bb6 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:61 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #709324f724483db2 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:67 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0b76a48d33842d3 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:73 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82259356da62751 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.ts:14 
    chatCompletion: () => process.env.DEBUG_GITEE_AI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b28b284b7e070e8e — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:48 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11d93c268f5a5c95 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:54 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82d21d6700c90681 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:57 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26a2fcbb8cb91463 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:61 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86bf5ecb1f36e75e — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:64 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd44567b12904e19 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.ts:47 
    chatCompletion: () => process.env.DEBUG_GITHUB_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1c91ad0365830bc9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/github/index.ts:54 
    const response = await fetch('https://models.github.ai/catalog/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0d5233ace21a44aa — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:389 
      process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9419c532700eab1a — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:411 
      delete process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #490f217fc9a638a2 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:436 
      process.env.DEBUG_GITHUBCOPILOT_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc016a369a16c4c7 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:458 
      delete process.env.DEBUG_GITHUBCOPILOT_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31e6f2d5a15650b9 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:32 
  chatCompletion: () => process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9103b61cbde266f4 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:33 
  responses: () => process.env.DEBUG_GITHUBCOPILOT_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #30658e234bc161f7 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:79 
    const response = await fetch(TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `Token ${githubToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #6dbc18a0ead2d61f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:411 
        const response = await fetch(`${COPILOT_BASE_URL}/models`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': `Bearer ${bearerToken}`,
            'Copilot-Integration-Id': 'vscode-chat',
            'Editor-Plugin-Version': 'LobeChat/1.0',
            'Editor-Version': 'LobeChat/1.0',
          },
          method: 'GET',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #143575293718c42b — Environment-variable access.
repo/packages/model-runtime/src/providers/glmCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_GLM_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f6233487d423005 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:163 
      process.env.DEBUG_GOOGLE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76036a9afd8f1ad5 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:188 
      delete process.env.DEBUG_GOOGLE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5052c39e9018081b — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:230 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ae483a02d2d9767 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:240 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4021ae5bfcbdd0cc — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:487 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3713eecc4deee69c — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:493 
      process.env.DEBUG_GROQ_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccb0e7811cb4000a — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:496 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad3182813366cb95 — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.ts:82 
    chatCompletion: () => process.env.DEBUG_GROQ_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81b511e323b0a8f7 — Environment-variable access.
repo/packages/model-runtime/src/providers/higress/index.ts:27 
    chatCompletion: () => process.env.DEBUG_HIGRESS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a369ec12b02d83a — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:78 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8cb4ed8a42545d4 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:84 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1f9f550dbe44fa5 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:87 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a6b771194fa419b — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:91 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca0d394f6ef743e4 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:94 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0396b1341a8fc0c — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.ts:54 
    chatCompletion: () => process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4bca614ed5423877 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/huggingface/index.ts:57 
    const response = await fetch('https://router.huggingface.co/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a61e5cf98d9e6902 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:51 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b41b23f23ca8d8ce — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:57 
      process.env.DEBUG_HUNYUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f62f5d01bcf0444 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:60 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76e871889fea6bb0 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:144 
      process.env.HUNYUAN_ENABLE_SPEED_SEARCH = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #176e6bde8a810d07 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:156 
      delete process.env.HUNYUAN_ENABLE_SPEED_SEARCH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef5451f8ebae91aa — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:56 
          enable_speed_search: process.env.HUNYUAN_ENABLE_SPEED_SEARCH === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54fca28b64b08249 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:69 
    chatCompletion: () => process.env.DEBUG_HUNYUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #858f35ac2de16701 — Environment-variable access.
repo/packages/model-runtime/src/providers/infiniai/index.ts:24 
    chatCompletion: () => process.env.DEBUG_INFINIAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a754bdcad5750663 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:43 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fd522aae0afbfb4 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:49 
      process.env.DEBUG_INTERNLM_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e5c6c25cc57000 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:52 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2788da6ceda5181 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.ts:26 
    chatCompletion: () => process.env.DEBUG_INTERNLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c43a3093cde16495 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:40 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #855bec59b1a1db43 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:44 
      process.env.DEBUG_JINA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad05441b37933d02 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:48 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b94df232521310f — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.ts:14 
    chatCompletion: () => process.env.DEBUG_JINA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d7c45391727709c — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:549 
      const originalDebugValue = process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2c6dcc3b2b7feca — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:551 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d55138fb93ec9974 — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:565 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6198d1c417a940f — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.ts:105 
    chatCompletion: () => process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcfa67114ba77dc3 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:47 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78bf106a4d6bdd02 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:52 
      process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #395d43664020c78d — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:54 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b48669f052d8beb4 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fefe0e997772268 — Environment-variable access.
repo/packages/model-runtime/src/providers/longcat/index.ts:30 
    chatCompletion: () => process.env.DEBUG_LONGCAT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca3f0a07cb65f5f6 — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:291 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7884a3d95799cc34 — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:312 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fff7ed65b0fa73cd — Environment-variable access.
repo/packages/model-runtime/src/providers/minimaxCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f89fbdccd73a7ad4 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:39 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fc9afda0c85791b — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:45 
      process.env.DEBUG_MISTRAL_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af7856569f748020 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:48 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223ee18bde8b66ab — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.ts:59 
    chatCompletion: () => process.env.DEBUG_MISTRAL_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5db5490d9d1e24b2 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:44 
      delete process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d680c4a0d912a38c — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:50 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efbd53e6b72e1c56 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:56 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6db29ae5f2b108e4 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.ts:17 
    chatCompletion: () => process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2fc7c5b46a1b44b — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:140 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbb6e6a04dd49f82 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:146 
      process.env.DEBUG_MOONSHOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a69f44de84c93832 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:149 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8841723ef269b90f — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:258 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #548febee5ce83d8e — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:275 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93560c78ac4b1100 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:47 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b772b900228b1f74 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:52 
      process.env.DEBUG_NEBIUS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c7d24a2a71a6ec1 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:54 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecca5b3b31fa8f13 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.ts:25 
    chatCompletion: () => process.env.DEBUG_NEBIUS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdd19ecc815ac3ef — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:38 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76162661dad9165d — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:43 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #520daeac064c2841 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:48 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #922addce65daf4a2 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:49 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a390e8af994f9d2 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:54 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef141f2cdc2470a6 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:55 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #108ea2c80e2fe2a9 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:683 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22ec519c63302d21 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:689 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5c455bb92608b5a — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:692 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b1357db51b2cbc — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:696 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7387f22f6709527f — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:699 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #401cfe35383095f7 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.ts:76 
    chatCompletion: () => process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a874aef1ac441993 — Environment-variable access.
repo/packages/model-runtime/src/providers/novita/index.ts:23 
    chatCompletion: () => process.env.DEBUG_NOVITA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6067f1dd610df6c0 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:235 
      process.env.DEBUG_NVIDIA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8317d9e7e3e0a32f — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:238 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3daffd3eb49c095 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:242 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9e6513c88c2bde9 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.ts:82 
    chatCompletion: () => process.env.DEBUG_NVIDIA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ee20621fedd9c3e — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:303 
        const originalDebugValue = process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0be4e7b32adf3fce — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:304 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fbaeebb2b011c09 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:326 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a042cbae877154bc — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1041 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b94d33f149d87732 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1047 
      process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10b08fc2a2be6bf9 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1050 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33e545060cbbf87c — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:34 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49a785f98469fb5e — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:81 
      if (process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7831b36fdd96bbe0 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:52 
      delete process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f407a5aedba2a3c0 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:58 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6aad120ed99413b — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:64 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d278b00ab9734ea1 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:70 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d216728caca57c62 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.ts:20 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be756cae1ea91db1 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:243 
        const originalDebugValue = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f8eae7130df5be3 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:246 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fc9d60a87deb7ea — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:262 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a5ef34bb0942099 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:540 
      delete process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb107f5684424ed3 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:546 
      const originalEnv = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d19427494b12bfa2 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:547 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d6f3fa8a6cbc3f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:550 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79b21daf03f21d63 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:554 
      delete process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6c92c98322b17ab — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:560 
      const originalEnv = process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd6c36935f49e928 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:561 
      process.env.DEBUG_OPENAI_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66f1f4116faa17ce — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:564 
      process.env.DEBUG_OPENAI_RESPONSES = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1359ab74401c5bf — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:20 
const oaiSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE; // low, medium, high

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6398f66b65256ab0 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:21 
const enableServiceTierFlex = process.env.OPENAI_SERVICE_TIER_FLEX === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27bdc35ad1606f81 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:67 
    chatCompletion: () => process.env.DEBUG_OPENAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96dfed639ad18193 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:68 
    responses: () => process.env.DEBUG_OPENAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #304eaaca69f69dbc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:99 
    const res = await fetch(MODELS_DEV_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d1250c7c0b3df2b7 — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:395 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4c9964cbf00ec6e — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:408 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89d3c4ea26020598 — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeZen/index.ts:26 
    chatCompletion: () => process.env.DEBUG_OPENCODE_ZEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #782c480dcfb32607 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:80 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a31848820ada1236 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:86 
      process.env.DEBUG_OPENROUTER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43a0a9cbc89c6274 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:89 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17358e257d368d43 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.ts:93 
    chatCompletion: () => process.env.DEBUG_OPENROUTER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e83833bdeefbcf84 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/openrouter/index.ts:96 
    const response = await fetch('https://openrouter.ai/api/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cafdb830acd62933 — Environment-variable access.
repo/packages/model-runtime/src/providers/perplexity/index.ts:42 
    chatCompletion: () => process.env.DEBUG_PERPLEXITY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62d9ad655736e2ae — Environment-variable access.
repo/packages/model-runtime/src/providers/ppio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_PPIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e7ce96ea5e01d56 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:37 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bd0d457ff1df91b — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:43 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #851ff750355edade — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:46 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #413b6160dac51465 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:50 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0f3f7df28451007 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:53 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79b3f0ed66cf1bb9 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.ts:11 
    chatCompletion: () => process.env.DEBUG_QINIU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cd240a4d3c639d6 — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:114 
            search_strategy: process.env.QWEN_SEARCH_STRATEGY || 'standard', // standard or pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd47e2a97e29efee — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:126 
    chatCompletion: () => process.env.DEBUG_QWEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a44929cc473b804 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:416 
      process.env.DEBUG_REPLICATE === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c5e44845dc35b72 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:417 
      process.env.DEBUG_REPLICATE_CHAT_COMPLETION === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #677a129bc6fdcc2f — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:418 
      process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96b5cd5e0045f431 — Environment-variable access.
repo/packages/model-runtime/src/providers/sambanova/index.ts:8 
    chatCompletion: () => process.env.DEBUG_SAMBANOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24a93781ac4e8001 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:37 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #620742b910446cc8 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:43 
      process.env.DEBUG_SEARCH1API_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5065a0c38da68875 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:46 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8f6ed0892ab10b4 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.ts:38 
    chatCompletion: () => process.env.DEBUG_SEARCH1API_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ef5c3a47128c838 — Environment-variable access.
repo/packages/model-runtime/src/providers/sensenova/index.ts:50 
    chatCompletion: () => process.env.DEBUG_SENSENOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed5f829bba82c0b1 — Environment-variable access.
repo/packages/model-runtime/src/providers/siliconcloud/index.ts:142 
    chatCompletion: () => process.env.DEBUG_SILICONCLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e0ff2d1327ece14 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:43 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d9ff213c5ef873b — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:49 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcd80cb0b00e20f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:52 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3452a67b5a071ea4 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:56 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2940719442a6f43 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:59 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2adae51c5166cc67 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:111 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efc8f7cedcde3b27 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:125 
      process.env.SPARK_SEARCH_MODE = 'deep';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70b786545dc786d5 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:136 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f6b44fd2e805a20 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:46 
                search_mode: process.env.SPARK_SEARCH_MODE || 'normal', // normal or deep

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b8674a97529e810 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:67 
    chatCompletion: () => process.env.DEBUG_SPARK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0664f7c6c959b105 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:47 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db858aedcbad9132 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:52 
      process.env.DEBUG_STEPFUN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0ee7342dac73700 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:54 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dca12a8dc616232 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.ts:38 
    chatCompletion: () => process.env.DEBUG_STEPFUN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91f3557d5434ea8b — Environment-variable access.
repo/packages/model-runtime/src/providers/straico/index.ts:40 
    chatCompletion: () => process.env.DEBUG_STRAICO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a1f36e5be23df5cf — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cf0a46887c69bc2c — Environment-variable access.
repo/packages/model-runtime/src/providers/streamlake/index.ts:19 
    chatCompletion: () => process.env.DEBUG_STREAMLAKE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc691968e3a13d87 — Environment-variable access.
repo/packages/model-runtime/src/providers/taichu/index.ts:21 
    chatCompletion: () => process.env.DEBUG_TAICHU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81269d036b12f8ea — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:40 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083a85d7d9f166ad — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:44 
      process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e6f333bd02f6c80 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:48 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcf731ecec87be1c — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.ts:14 
    chatCompletion: () => process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7447a8444fbd97a — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:47 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e823b1d5bea3dd89 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:51 
      process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #457f03aa5e28dc65 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:55 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd3170cace046a99 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d0d0d52b4239e6 — Environment-variable access.
repo/packages/model-runtime/src/providers/upstage/index.ts:8 
    chatCompletion: () => process.env.DEBUG_UPSTAGE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f51ca9187f6a4af — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:61 
      delete process.env.DEBUG_V0_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de65dba9e8d8f49f — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:67 
      process.env.DEBUG_V0_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc27152375a81a64 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:73 
      process.env.DEBUG_V0_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa44400da5827ed2 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:79 
      process.env.DEBUG_V0_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a8af8d0a5694780 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.ts:14 
    chatCompletion: () => process.env.DEBUG_V0_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bcf37e2ae6b0d98 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:51 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0976ec5cd6905a9d — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:57 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1c4ea2a509d1fd — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:60 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f5a115e424091ca — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:64 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e77ff8027f0d01b — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:67 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3991f0078600255 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.ts:87 
    chatCompletion: () => process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89904f47c673a490 — Environment-variable access.
repo/packages/model-runtime/src/providers/vllm/index.ts:13 
    chatCompletion: () => process.env.DEBUG_VLLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00c7e08f48a5d78b — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:70 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #520b69653cabaeee — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:71 
    responses: () => process.env.DEBUG_VOLCENGINE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8370d4812f7ee0f3 — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengineCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68314371925645b2 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:126 
      delete process.env.DEBUG_WENXIN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdd196c9111ac96d — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:132 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c87a33a06ffb27d6 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:138 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd91b055caba4dfc — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.ts:49 
    chatCompletion: () => process.env.DEBUG_WENXIN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d24221cbeb530e5b — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:126 
    chatCompletion: () => process.env.DEBUG_XAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52f74d08058d0336 — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:127 
    responses: () => process.env.DEBUG_XAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb78d874b00f9ba6 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:277 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d99df9f68d32d705 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:283 
      process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6a2589b6adc8da6 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:286 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e11c319448e1b142 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.ts:107 
    chatCompletion: () => process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d35528465ee459 — Environment-variable access.
repo/packages/model-runtime/src/providers/xinference/index.ts:18 
    chatCompletion: () => process.env.DEBUG_XINFERENCE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be23e1fedc0c6b35 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:31 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01b528478527e555 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:36 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d51912dc5457979f — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:41 
      delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a520165834123d92 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:42 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94b2ace1719c3984 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:47 
      process.env.DEBUG_ZENMUX_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8213cf1c5bd1730 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:48 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d88ce3be98f403 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.ts:39 
    chatCompletion: () => process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbd053ccdc0e7350 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:55 
      delete process.env.DEBUG_ZEROONE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29c4f14ff94de16f — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:61 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3532f0fa11a24ec — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:67 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #607820e3f78b89a5 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:73 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cf3cd02b6fc727a — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.ts:14 
    chatCompletion: () => process.env.DEBUG_ZEROONE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc43899651f9a1fb — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:44 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01c0cc8e4fa50594 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:50 
      process.env.DEBUG_ZHIPU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f2952c3e886c112 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:53 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78c6ad1b0e51ef94 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:112 
        process.env.ZHIPU_SEARCH_ENGINE = 'search_pro';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d45b5348eb3fbb0 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:129 
        delete process.env.ZHIPU_SEARCH_ENGINE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b35bf1cc7da52b88 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:85 
                search_engine: process.env.ZHIPU_SEARCH_ENGINE || 'search_std', // search_std, search_pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26d96d43ca7ae8e8 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:215 
    chatCompletion: () => process.env.DEBUG_ZHIPU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1adbb0269867c991 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4f3bfc461972a517 — Filesystem access.
repo/packages/model-runtime/src/utils/modelConfigImport.test.ts:13 
        readFile(path.resolve(utilsDir, file), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/web-crawler

npm first-party
high pii_flow production #97d677b43dea87b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:42 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/browserless.ts:42 
        fetch(
          qs.stringifyUrl({
            query: {
              blockAds: BROWSERLESS_BLOCK_ADS,
              launch: JSON.stringify({ stealth: BROWSERLESS_STEALTH_MODE }),
              token: BROWSERLESS_TOKEN,
            },
            url: urlJoin(BASE_URL, '/content'),
          }),
          {
            body: JSON.stringify(input),
            headers: {
              'Content-Type': 'application/json',
            },
            method: 'POST',
            signal,
          },
        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c24bf7fa35015ea6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/exa.ts:25 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9fcc8200d5f795d8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 
        fetch(`${baseUrl}/scrape`, {
          body: JSON.stringify({
            formats: ['markdown'], // ["markdown", "html"]
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b634399157add431 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:17 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/jina.ts:11 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/jina.ts:17 
        fetch(`${getJinaReaderBaseUrl()}/${url}`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': token ? `Bearer ${token}` : '',
            'x-send-from': 'LobeChat Community',
          },
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0cd9ded226b49990 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #87abc9fbd1db7ffb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 · flow /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → /tmp/closeopen-yp75nq7n/repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 79 low-confidence finding(s)
low env_fs test-only #45347f14608e27b2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:15 
    delete process.env.BROWSERLESS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c45bd2264ce7baf2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:16 
    delete process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1bd668cbef359dfd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:26 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03eae73897ad145a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:36 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #20a1a66317d06c78 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:49 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d5d6da2fc0fc0266 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:62 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c27be3dd32c6a4f2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:96 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3e52f495fb88fc63 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:137 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c6f141364e80c28e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:16 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #35ffc6fbf52db724 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:20 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a8fdcb002d44a1e4 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:77 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #11357be1897cb01a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:101 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b85d4be1502c3dbf — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:122 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d3c1e9168b084fab — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:139 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0502d183963a8e30 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:156 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #844b31e2fc3d4991 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:167 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #34be8186592315d3 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:178 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e5fe1e6812157c49 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:191 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #435e6040e3ffa20e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:210 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41344932c6c8c497 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:231 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b728bbf28b391a88 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:16 
    delete process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9267b656e716cd10 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:17 
    delete process.env.FIRECRAWL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a48f281dd039bbeb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:21 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6ee1eebf7437988d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:86 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8855bf8f2d9c3fa4 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:113 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e570d5b04dc9208 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:140 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #057e39d60d52f36b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:157 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9e61324ba5a221ae — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:174 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #df346d9142fa7bd3 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:185 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5ede158120f31631 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:198 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9095734a17bdb8e2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:211 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9ee8baf0202e793c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:230 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5fa9a89b58501ce5 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:22 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf91adb23d46e310 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:23 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21aa7fa9c792e489 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:24 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dc33b024393a9d48 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #142cd2aee84a246e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a8da5964c1661f9 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef723ca46edca05b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:80 
    process.env.JINA_READER_API_KEY = 'env-reader-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #13d7c544099a7e6f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:105 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f73a3cce7036d83b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:109 
    process.env.JINA_API_KEY = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6057d1e7255fb4c6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:134 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d725a7ba6422d8d7 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:163 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4bbfddba0238d496 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/search1api.test.ts:19 
    process.env.SEARCH1API_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #172b01156372e533 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:16 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e0422bf8c0481ceb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:17 
    delete process.env.TAVILY_EXTRACT_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3bdd1f7ee4211a88 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:21 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #91c6ad0aaa5895c2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:55 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb066d8040e9403b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:56 
    process.env.TAVILY_EXTRACT_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b44be4ec8250ebfd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:98 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6dabd9ac833b9021 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:123 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21951605411bc15c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:145 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e63c5b12c4466d69 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:168 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a106358ae96ba5f6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:185 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #019a33385d2eefab — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:202 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #359f12ab0184a40d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:213 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d03c543bffc5919 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:226 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d94dd2c851a7c8bd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:239 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #037064c3c6bec4bf — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:258 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e55e6dbe42225f66 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:280 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b888bb6d10f310b8 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:302 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94ea2ac3e47d691d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 
const BASE_URL = process.env.BROWSERLESS_URL ?? 'https://chrome.browserless.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c5a2183372cf602 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:14 
const BROWSERLESS_TOKEN = process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad57c831ac843f85 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:16 
const BROWSERLESS_BLOCK_ADS = process.env.BROWSERLESS_BLOCK_ADS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb053ed64bf61e40 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:17 
const BROWSERLESS_STEALTH_MODE = process.env.BROWSERLESS_STEALTH_MODE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3c3695b903efa10 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:27 
  if (!process.env.BROWSERLESS_URL && !process.env.BROWSERLESS_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8909e15f2838664a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 
  const apiKey = process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2723e852ee1898f0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #8115edf5ad635018 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 
  const apiKey = process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #343353fcd98c4764 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:55 
  const baseUrl = process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #316bd256b9811739 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 
  const token = params.apiKey ?? process.env.JINA_READER_API_KEY ?? process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6c9df1501c5dfed — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 
  const apiKey = process.env.SEARCH1API_CRAWL_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c1340d4555c0b11b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4c020baf2cff3a49 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 
  const apiKey = process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #b27d861d4b973d7f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #04cf8388409b9ea0 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:35 
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62bc4844b5d89c06 — Filesystem access.
repo/packages/web-crawler/src/utils/htmlToMarkdown.test.ts:29 
      const html = readFileSync(path.join(__dirname, `./html/${item.file}`), { encoding: 'utf8' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c0c3d6f359b9d2a — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:3 
export const DEFAULT_TIMEOUT = process.env.CRAWLER_TIMEOUT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9e5cc7a3fa694c0 — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:4 
  ? Number(process.env.CRAWLER_TIMEOUT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-gateway-client

npm first-party
high pii_flow production #0311306a4b469964 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:127 · flow /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:134 → /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:127 
    const res = await this.post(
      '/api/device/tool-call',
      {
        deviceId: params.deviceId,
        operationId: params.operationId,
        timeout: params.timeout,
        toolCall,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9e71688710e48023 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:175 · flow /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:179 → /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:175 
    const res = await this.post('/api/device/message-api', {
      api,
      deviceId: params.deviceId,
      timeout: params.timeout,
      userId: params.userId,
      workspaceId: params.workspaceId,
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5cab2df28b35795c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/device-gateway-client/src/http.ts:250 · flow /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:257 → /tmp/closeopen-yp75nq7n/repo/packages/device-gateway-client/src/http.ts:250 
    const res = await this.post(
      '/api/device/rpc',
      {
        deviceId: params.deviceId,
        method: rpc.method,
        params: rpc.params,
        timeout: params.timeout,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

first-party (npm): e2e

npm first-party
high pii_flow production #46f1900f02042dd3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/common/auth.steps.ts:41 · flow /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/common/auth.steps.ts:36 → /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/common/auth.steps.ts:41 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #da86be32d9c075a5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/e2e/src/steps/hooks.ts:42 · flow /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/hooks.ts:20 → /tmp/closeopen-yp75nq7n/repo/e2e/src/steps/hooks.ts:42 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 24 low-confidence finding(s)
low env_fs production #ce2e7d26bae745ad — Environment-variable access.
repo/e2e/cucumber.config.js:4 
const reportsEnabled = !['0', 'false'].includes(String(process.env.E2E_REPORTS).toLowerCase());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #835b80d26c23804d — Environment-variable access.
repo/e2e/cucumber.config.js:5 
const parsedParallel = Number(process.env.E2E_PARALLEL || process.env.CUCUMBER_PARALLEL || 1);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0f16d30d7e5cf3e — Environment-variable access.
repo/e2e/cucumber.config.js:7 
const canRunInParallel = Boolean(process.env.BASE_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea41d694cc9c1262 — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:36 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78691ded2f212b3f — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:37 
  const baseURL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17aea38dd194e696 — Environment-variable access.
repo/e2e/src/steps/home/sidebarAgent.steps.ts:62 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a638e5256820ee6d — Environment-variable access.
repo/e2e/src/steps/home/sidebarGroup.steps.ts:22 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0436d7350fc91d08 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:9 
process.env['E2E'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6165532f2e3af00 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:20 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c32547ecbd9880c — Environment-variable access.
repo/e2e/src/steps/hooks.ts:21 
  baseUrl = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cbf65c660380844 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:29 
  if (!process.env.BASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bcf53b9132cbf72 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:33 
      reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67ca0dd513cac040 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:138 
  if (!process.env.BASE_URL && process.env.CI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efbd3bb54514d009 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:5 
const runId = process.env.E2E_RUN_ID || process.env.GITHUB_RUN_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e303b62d7dec524b — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:6 
const workerId = process.env.CUCUMBER_WORKER_ID || process.env.E2E_WORKER_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff7353b500d2a717 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:33 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a1df0a6d3468382 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:106 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ee1beaeaa297c06 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:142 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3121eea988fab609 — Environment-variable access.
repo/e2e/src/support/webServer.ts:37 
  const envHost = process.env.HOST?.trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dbfc94793b98c2b — Filesystem access.
repo/e2e/src/support/webServer.ts:108 
    writeFileSync(LOCK_FILE, String(process.pid));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c809bdcd4ffddb5 — Environment-variable access.
repo/e2e/src/support/world.ts:27 
      headless: process.env.HEADLESS !== 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a983bd1a9dc4b76c — Environment-variable access.
repo/e2e/src/support/world.ts:66 
    const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52e9330d3f4d5afd — Environment-variable access.
repo/e2e/src/support/world.ts:67 
    const BASE_URL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bff9963bc3d22b9c — Filesystem access.
repo/e2e/src/support/world.ts:110 
    fs.writeFileSync(filepath, screenshot);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/heterogeneous-agents

npm first-party
medium telemetry production #3186072bb0f6253d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/agentStreamPipeline.ts:137 
      const payload = this.codexTracker ? await this.codexTracker.track(raw as any) : raw;

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #7b1ca9a707c66c8e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:28 
    await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4fe8bdcb82c5f6b5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:43 
    const enriched = await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2314e30e85c29613 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:88 
    await tracker.track({
      item: {
        changes: [],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #420c78ed967da543 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:99 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: updatePath }],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c8cca9be57b58f9a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:128 
    await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #33fee39258910d8a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:139 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #1026d7342f1cefa2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:168 
    await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #203104295f1da920 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:179 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c0b40dd951159f1f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:209 
    await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #38589d2e88671cde — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:220 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 78 low-confidence finding(s)
low env_fs production #c28e615442ecf40a — Filesystem access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:8 
  const raw = await readFile(new URL(`./__fixtures__/codex/${name}`, import.meta.url), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #685722a0b5c87f5d — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:181 
    const previousTimezone = process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f479a33a173dff6 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:182 
    process.env.TZ = 'Asia/Shanghai';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e77085829de6b389 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:208 
        delete process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0ed1f27a6f5c9bc — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:210 
        process.env.TZ = previousTimezone;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d315dde6c0ca76c0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/claudeAgentSdkSession.ts:16 
  const raw = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a7850a475e41d45 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/cliSpawn.ts:187 
    const source = await readFile(shimPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a937f93ad6ac915 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:24 
    await writeFile(updatePath, 'hello\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #706dc646d493f034 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:40 
    await writeFile(updatePath, 'hello\nappended line\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e7b9fcea7cc34f0 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:41 
    await writeFile(addPath, 'line one\nline two\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #908e2ce26ea2248a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:84 
    await writeFile(updatePath, 'line one\nline two\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff78e1a5e242890f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:97 
    await writeFile(updatePath, 'line one\nline two updated\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5e3bfc95e758f27 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:124 
    await writeFile(beforePath, 'content\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc9865a0bfc8ae61 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:164 
    await writeFile(absolutePath, 'before\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0dcb11d58e386583 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:177 
    await writeFile(absolutePath, 'before\nafter\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d8b2a5d1a02aa8a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:218 
    await writeFile(addPath, '++leading content\n+++header lookalike\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #298d657566806cc5 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.ts:64 
      content: await readFile(filePath, 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2eb0f4ce3478d5a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:38 
    await writeFile(
      path.join(codexHome, 'config.toml'),
      [
        'model = "gpt-5.4"',
        '',
        '[profiles.fast]',
        'model = "gpt-5.5-mini"',
        '',
        '[profiles."quoted.name"]',
        'model = "gpt-5.5"',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56851395c809726e — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:76 
    await writeFile(path.join(codexHome, 'config.toml'), 'model = "gpt-5.4"\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #431d3a1455e5b81d — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:94 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-123.jsonl'),
      [
        JSON.stringify({ payload: { model_provider: 'openai' }, type: 'session_meta' }),
        JSON.stringify({ payload: { model_context_window: 258_400 }, type: 'turn_context' }),
        JSON.stringify({ payload: { model: 'gpt-5.5' }, type: 'event_msg' }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d627a0903607b8ab — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:117 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-usage.jsonl'),
      [
        JSON.stringify({
          payload: {
            info: {
              total_token_usage: {
                cached_input_tokens: 5,
                input_tokens: 25,
                output_tokens: 9,
                reasoning_output_tokens: 4,
              },
            },
            type: 'token_count',
            usage: { input_tokens: 100, output_tokens: 100 },
          },
          type: 'event_msg',
          usage: { input_tokens: 200, output_tokens: 200 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bd8aefa18a7dd26 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:158 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-legacy-usage.jsonl'),
      [
        JSON.stringify({
          payload: { usage: { input_tokens: 10, output_tokens: 2 } },
          type: 'event_msg',
        }),
        JSON.stringify({
          type: 'turn.completed',
          usage: { cached_input_tokens: 5, input_tokens: 25, output_tokens: 9 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5628a80bfd507554 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:189 
    const config = await readFile(path.join(getCodexHome(env, homeDir), 'config.toml'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a99fc9f103c5fc4 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:275 
  const content = await readFile(sourceFile, 'utf8').catch(() => undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8016ca41b8dbb13 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:67 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30b7b216b5bf23dd — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:197 
      const written = await readFile(imagePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ded68222b13ac9ec — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:203 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d735400be816cbc0 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:137 
      const meta = JSON.parse(await readFile(metaPath, 'utf8')) as { mediaType?: string };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #830cf0a263dbac83 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:138 
      const buffer = await readFile(dataPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20a3fe556e3a97d5 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:158 
    await writeFile(path.join(cacheDir, key), buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cc76a8a7a345a3f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:159 
    await writeFile(
      path.join(cacheDir, `${key}.meta`),
      JSON.stringify({ id: source.id, mediaType }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #880e160e36599584 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:169 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1703371b857d05a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:238 
    await writeFile(filePath, image.buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bb7fea1d9dcd494 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:79 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fbcd46fbc074a0e — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:80 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13197bf545dbc256 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:82 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8707b4f62c3a567d — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:83 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ca4dd6509d3b099 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:102 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #290bfb8076a62cfb — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:103 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2acaf5e914340f7f — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:104 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd565f0eb125dcac — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:109 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d36f170cfed70fc — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:110 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a44af6d039414150 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:111 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bad2717d2a9c45a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:112 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dfd3389339dbd97 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:129 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08edca7e116f93e0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:130 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd30dc730eae6a1a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:131 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33aa37810c50bd6a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:136 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #701eb4a1bba45f04 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:137 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c6b54ab6418e0cf — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:138 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f5a1b7a4938a35d — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:139 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b944877ec24a693 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:152 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2473e13d6117a7e9 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:153 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77f086fbcd337492 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:154 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd897ed2ad054374 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:159 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce1d66e88fd39842 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:160 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f64f8dfe02d73b91 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:161 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e185a658b5554a5 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:162 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89e619fa0885d30c — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:179 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d20b9ba766c69ba0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:180 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16de49ad26c16438 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:250 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6afb2456fc826a32 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:251 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #012eba97f1c7a5aa — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:252 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a02ba78e6a19bc8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:253 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b41429cb9eaa2a8b — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:267 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcf02ad449d3557b — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:268 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32ab1b17d3ec899a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:273 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4606e66e250c41ac — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:274 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6f50438ea295478 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:277 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ffd3c73bfde2ae8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:278 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15b9b2f74b2ad596 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:293 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24566d189ec5fc44 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:294 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b107507fc38ae255 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:295 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f34aa392f6f5cf17 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:79 
  const shell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7d2f510a2256a40 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:153 
    const lookupPath = mergePathValues(shellPath, process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5a820e666154527 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:155 
    if (lookupPath && lookupPath !== process.env.PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3579c5619b606b8f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:248 
    const realCodexFixture = await readFile(
      new URL('../adapters/__fixtures__/codex/collab_tool_call.spawn_wait.jsonl', import.meta.url),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c057204ee2e5214 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:256 
    await writeFile(
      path.join(sessionDir, `rollout-2026-06-11T01-31-27-${threadId}.jsonl`),
      JSON.stringify({
        type: 'turn.completed',
        usage: { cached_input_tokens: 42_000, input_tokens: 51_000, output_tokens: 300 },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/desktop/src/main

npm first-party
expand_more 150 low-confidence finding(s)
low env_fs production #0c864a1a03be8d17 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:357 
        readLocalFile: (p) => local.readFile(p),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00e55ad84eaac5b4 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:428 
        return runtime.readFile({
          endLine: p.loc?.[1],
          path: p.path,
          startLine: p.loc?.[0],
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bb41c5480bf11d5 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:458 
        return runtime.writeFile(args as WriteLocalFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f1b896264a2e6c4 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:702 
      const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #897dd72218fff963 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:772 
      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d6030d32b8f653b — Environment-variable access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:818 
      const openclawAgent = process.env['OPENCLAW_AGENT_ID'] ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bed6cfa7e05e310c — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:549 
      String(process.env.LOBE_CLAUDE_CODE_SDK ?? '').toLowerCase(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d76ce8e5e0246d18 — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:567 
    if (process.env.NODE_ENV === 'test') return false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9144a755f261d392 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:668 
      await writeFile(path.join(rootDir, '.last-live-trace'), `${dir}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cfefb4330a4eb3f — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:669 
      await writeFile(path.join(dir, 'stdout.jsonl'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17c7ed367ced42d8 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:670 
      await writeFile(path.join(dir, 'stderr.log'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4a4058597ba31b9 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:672 
        await writeFile(path.join(dir, 'stdin.txt'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e518a6e01089c17c — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:674 
      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify(
          {
            agentSessionId: session.agentSessionId,
            agentType: session.agentType,
            args: cliArgs,
            attachments: imageList.map((image) => this.getAttachmentTraceSummary(image)),
            command: session.command,
            createdAt: createdAt.toISOString(),
            cwd,
            envKeys: session.env ? Object.keys(session.env).sort() : [],
            model: session.model,
            modelSource: session.modelSource,
            resumeSessionId: session.resumeSessionId,
            sessionId: session.sessionId,
            stdinBytes: stdinPayload === undefined ? 0 : Buffer.byteLength(stdinPayload),
            stdinFile: stdinPayload === undefined ? undefined : 'stdin.txt',
            stderrFile: 'stderr.log',
            stdoutFile: 'stdout.jsonl',
            verifiedModel: session.verifiedModel,
            verifiedModelContextWindow: session.verifiedModelContextWindow,
            verifiedModelProvider: session.verifiedModelProvider,
            verifiedModelSessionId: session.verifiedModelSessionId,
            verifiedModelSourceFile: session.verifiedModelSourceFile,
          },
          null,
          2,
        )}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bffcb1c53c7b286 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:745 
    return this.queueCliTraceWrite(trace, () => writeFile(filePath, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33b3d49c0a06ac3a — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:823 
    await writeFile(tmpConfigPath, JSON.stringify(config), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b49d713f82dcc4f — Filesystem access.
repo/apps/desktop/src/main/controllers/LocalFileCtr.ts:329 
    const data = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #846cc9b00ad703b9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:191 
    originalClaudeSdkLabEnv = process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8fc80c8b7368a8c2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:197 
    delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #557cc75d9fe19b8b — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:201 
    if (originalClaudeSdkLabEnv === undefined) delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #351681bfe23c80f9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:202 
    else process.env.LOBE_CLAUDE_CODE_SDK = originalClaudeSdkLabEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8fc9d9c399376f09 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:264 
      await writeFile(outOfRootDataPath, 'SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #99bec3d058ca6052 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:265 
      await writeFile(
        outOfRootMetaPath,
        JSON.stringify({ id: traversalId, mimeType: 'text/plain' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #80744f1e04dcf1dd — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:284 
      await expect(readFile(outOfRootDataPath, 'utf8')).resolves.toBe('SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8d7a36a95e35d451 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:417 
      process.env.LOBE_CLAUDE_CODE_SDK = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #457fd25c222e3f1e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:521 
        ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #626259f1e1c537a1 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:522 
        ANTHROPIC_AUTH_TOKEN: process.env.ANTHROPIC_AUTH_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8057513480fb19e0 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:523 
        ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59561b88d5e0e618 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:525 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #087096cf9ac0af7d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:526 
      process.env.ANTHROPIC_AUTH_TOKEN = 'host-token-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #80596b4a1ee03dc2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:527 
      process.env.ANTHROPIC_BASE_URL = 'https://host.example/should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e92073fc639c15c9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:536 
        expect(options.env.PATH).toBe(process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8bdcea9bb32d87d8 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:539 
          if (value === undefined) delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d80127fbcdfa09e9 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:540 
          else process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41b65502ee4b161f — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:546 
      const originalKey = process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e910ab78718377d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:547 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ba2920022a22ffd4 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:557 
        if (originalKey === undefined) delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b657d6a059362c4a — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:558 
        else process.env.ANTHROPIC_API_KEY = originalKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e32c15d8ca2d33b1 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:818 
        Promise.all(imagePaths.map((filePath) => readFile(filePath, 'utf8'))),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #273d802918df83d8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:833 
      await expect(readFile(imagePaths[0], 'utf8')).resolves.toBe('PNG_TEST');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ecfb4e0b61806be9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:853 
      await expect(readFile(imagePaths[0])).resolves.toEqual(pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a96ff90db0f25777 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:925 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b459ca0d8ddd169e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:926 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d910259e7ff83387 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:945 
        await expect(readFile(path.join(traceRoot, '.last-live-trace'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef838a2a35390161 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:948 
        await expect(readFile(path.join(traceDir, 'stdin.txt'), 'utf8')).resolves.toBe(prompt);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6fea2a95096284b9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:949 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ff404ece6aa60094 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:950 
        await expect(readFile(path.join(traceDir, 'stderr.log'), 'utf8')).resolves.toBe('');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b08aabdc12c18fab — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:951 
        await expect(readFile(path.join(traceDir, 'exit.json'), 'utf8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #829ec14926d2207f — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:955 
        const meta = JSON.parse(await readFile(path.join(traceDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4033959222a523f — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:968 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #48360a6d74b36f9c — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:973 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #67456fd64182de37 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:975 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #799e26554a2c234e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:994 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4592680777808d2f — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:999 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b6226f1c51dbca73 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1002 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #62763a77fc5af9e7 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1022 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7101a7017b7210fd — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1027 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e72a469654933eb6 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1033 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #caf91c19e4145eac — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1034 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c78dca99a33c4c9b — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1046 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #adcff2e32027008c — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1052 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #26066cdf29add31a — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1053 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #580b2ec79641202d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1062 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8a4c8ee5763b2084 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1433 
      await writeFile(tmpConfigPath, '{"mcpServers":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2ed976d8730848f2 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:60 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fbb53692734c86d5 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:62 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6a9d1aa871738677 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:80 
      await writeFile(filePath, 'line1\nline2\nline3\nline4\nline5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b3afb2bdccd2e8a8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:82 
      const result = await localFileCtr.readFile({ loc: [1, 3], path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5cf2add71892f4bb — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:101 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6ba8e7fc7260ffe0 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:103 
      const result = await localFileCtr.readFile({ fullContent: true, path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0141d869d7ae3ca9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:120 
      const result = await localFileCtr.readFile({
        path: path.join(tmpDir, 'does-not-exist.txt'),
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #456f6195452fab07 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:143 
      await writeFile(file1, 'content a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e288af5a3776329e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:144 
      await writeFile(file2, 'content b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #038cc84fe49a4ca6 — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:102 
    process.env.PATH = `${process.env.PATH}${pathSep}${getCliWrapperDir()}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d82e14cc129c1745 — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:475 
    const ipcId = process.env.LOBE_IPC_ID || name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17280a47f4f18b74 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:450 
    const current = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e7a94e64b3c7b08 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:453 
    process.env.PATH = current ? `${current}${sep}${dir}` : dir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36f474048e84aa29 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:552 
    await writeFile(tmpMarker, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9968a84c50ba0193 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:554 
    await writeFile(markerPath, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc1e49f7c8531049 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:630 
      const raw = await readFile(this.installedMarkerPath(name), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27beb26db5d22ee9 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:138 
          const buffer = await readFile(realResolvedPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78c1f96e59604234 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:289 
    const buffer = await readFile(realFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2a622fdb0a80fc3 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/RendererProtocolManager.ts:195 
    const buffer = await readFile(targetPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ef922b08ba57373 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/RendererUrlManager.ts:98 
    const electronRendererUrl = process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #30fc120f9a948fba — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:52 
  await writeFile(path.join(dir, fileName), fileContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #00be2a3bce12af3f — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:53 
  await writeFile(path.join(cacheRoot, name, '.installed'), version, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6672f3ae2dd61fa6 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:65 
  originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #75406e1c1d655584 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:69 
  process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5df5b2d5971558f — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:176 
      await writeFile(path.join(cacheRoot, 'foo', '.installed'), '1.0.0', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0467d2fac6eeb57b — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:201 
      const before = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd0f5705f3009c3b — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:206 
      expect((process.env.PATH ?? '').split(sep)).toContain(installDir);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28dedb9d2bd39496 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:210 
      const segments = (process.env.PATH ?? '').split(sep);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eadc1948ae1734a0 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:212 
      expect(process.env.PATH).toContain(before);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #028ebab5d0411061 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:54 
    delete process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c94bc81c8502bd4 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:95 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #babbeddb843c3adb — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:121 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7a8a6c8bacc1b2c9 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:142 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cfed2ea761a03e0 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:55 
  DESKTOP_BACKEND_PROXY_RETHROW_ERRORS: process.env.DESKTOP_BACKEND_PROXY_RETHROW_ERRORS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #546da8aee72151ae — Environment-variable access.
repo/apps/desktop/src/main/env.ts:56 
  DESKTOP_EXTERNAL_NAVIGATION_HOSTS: process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9dd51ba7f1a7a4f — Environment-variable access.
repo/apps/desktop/src/main/env.ts:57 
  UPDATE_CHANNEL: process.env.UPDATE_CHANNEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae1bc95bba13cb4a — Environment-variable access.
repo/apps/desktop/src/main/env.ts:58 
  UPDATE_SERVER_URL: process.env.UPDATE_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #172dcf1a787cc9ce — Environment-variable access.
repo/apps/desktop/src/main/env.ts:107 
      UPDATE_CHANNEL: z.string().optional().default(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0a82bf0855351c6 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:111 
      UPDATE_SERVER_URL: z.string().optional().default(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3bd3f7c8ab7fb49 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:189 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4548c9dd0668bd1f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:190 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1ee7c192ca78808f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:191 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e7590a4ca60cde7e — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:192 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c5b000e1b08c21c8 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:211 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41d5456a8b122f0a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:212 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ca5c52d266ee3230 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:213 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a0089f8b98b875e — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:218 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1bc33235d13ab48c — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:219 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5cf431d34b5cb3c3 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:220 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d4d69b247f28ef76 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:221 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e41b802840cb77b7 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:236 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6bb7690dd5f3e8ee — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:237 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7035cc9ab57d5f17 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:238 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0f3b4aca241240ba — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:243 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6fa48e83f23eec98 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:244 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5fb995292fbb091b — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:247 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2eb64ac2c35d53a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:248 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2e080d922e4cfba9 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:267 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10da8834dce2c3ac — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:268 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b511983029d7c58 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:269 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aa93f95d529045ce — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:274 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c38a4dea73ff2f68 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:275 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #888443cd3542effe — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:276 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c68afec8ed976d01 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:277 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #83e832c385c2e73f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:295 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f61ecad4a0fff34b — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:296 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1350423404e9f1c — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:297 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e57dfe1113ca2f72 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:313 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4ac04d21c1c99950 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:314 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9282400f496169f7 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:315 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f75cd5d57d9644c4 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:316 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #504b6acccae61e31 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:354 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #831927a37fd13e26 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:355 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45f64c4f5c9e5516 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:16 
  if (process.platform === 'linux' && process.env.APPIMAGE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84e2029ed32ce2f3 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:17 
    return process.env.APPIMAGE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a6a6081b5b0364a — Filesystem access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:95 
  await writeFile(tmpPath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63db6bd3ce79e306 — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:55 
): string | undefined => (options.env && key in options.env ? options.env[key] : process.env[key]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91f1f3fadcb07a4c — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:133 
    return parseCredentialsJson(await readFile(path.join(configDir, '.credentials.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a00249cdd6ebb0dd — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:150 
  asNonEmpty(process.env.CLAUDE_CONFIG_DIR);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #622b8a5c91a0a095 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:310 
    const response = await fetch(OAUTH_USAGE_URL, {
      headers: {
        'Authorization': `Bearer ${lookup.credentials.accessToken}`,
        'Content-Type': 'application/json',
        'User-Agent': OAUTH_USER_AGENT,
        'anthropic-beta': OAUTH_BETA_HEADER,
      },
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d76556ede0c341f8 — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:98 
  codexHomePath ?? env?.CODEX_HOME ?? process.env.CODEX_HOME ?? path.join(homedir(), '.codex');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ed0ca90cd0df413 — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:195 
    auth = JSON.parse(await readFile(authPath, 'utf8')) as CodexAuthFile;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ca218f4cf915b365 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:230 
    const response = await fetch(CODEX_RATE_LIMIT_RESET_CREDITS_URL, {
      ...auth,
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a7baecd577617ac5 — Filesystem access.
repo/apps/desktop/src/main/modules/openInApp/iconExtractor.ts:145 
    const buf = await readFile(outPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e578d75a66a42c4 — Environment-variable access.
repo/apps/desktop/src/main/pre-app-init.ts:20 
  const userDataOverride = process.env.LOBE_DESKTOP_USER_DATA_DIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8421bf43bc065d39 — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:100 
      await writeFile(savedPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e159268ccf0893 — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:112 
      await writeFile(metaFilePath, JSON.stringify(metadata, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-runtime

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs production #6a6e62e4fdd712fb — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:10 
    apiKey: process.env.OPENAI_API_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c010bd5f625fd2bb — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:237 
  if (!process.env.OPENAI_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bc81a8c5fbcf32b0 — Filesystem access.
repo/packages/agent-runtime/src/agents/__tests__/GraphAgent.test.ts:104 
    readFileSync(path.join(TEST_DIR, 'fixtures/goal-loop.graph.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-tracing

npm first-party
expand_more 15 low-confidence finding(s)
low env_fs production #232e1037f5a8a298 — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:57 
      out.push(JSON.parse(await readFile(path.join(dir, f), 'utf8')));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63bda779ffdaf6bd — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:195 
            snapshot = JSON.parse(await readFile(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e40959eeb7b34b3e — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:27 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcc306b69d29aa89 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:46 
      const content = await fs.readFile(path.join(this.dir, match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad333248c521e944 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:66 
        const content = await fs.readFile(path.join(this.dir, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #136dc244ccdd1dc4 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:81 
      const content = await fs.readFile(realPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7de67158853ee972 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:88 
      const content = await fs.readFile(path.join(this.dir, files[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #391f79c7247dbae7 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:122 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2551010f7457284d — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:129 
      const content = await fs.readFile(path.join(this.partialDir(), match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5483f948d9ab63f0 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:136 
      const content = await fs.readFile(this.partialPath(operationId), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #def043ccaf492b8c — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:145 
    await fs.writeFile(this.partialPath(operationId), JSON.stringify(partial), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d72af8461b9b4095 — Environment-variable access.
repo/packages/agent-tracing/src/store/remote-store.ts:57 
  if (process.env.TRACING_BASE_URL) return process.env.TRACING_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7331665d0e969e2 — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:63 
    const content = await fs.readFile(envPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fed3f88b6f75be5a — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:92 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23a7a13ee25953fe — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:148 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/app-config

npm first-party
expand_more 11 low-confidence finding(s)
low env_fs production #494bad43a9d528f5 — Environment-variable access.
repo/packages/app-config/src/composio.ts:8 
      COMPOSIO_API_KEY: process.env.COMPOSIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b76de23c0c4fccb8 — Environment-variable access.
repo/packages/app-config/src/composio.ts:9 
      COMPOSIO_AUTH_CONFIG_IDS: process.env.COMPOSIO_AUTH_CONFIG_IDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f115e93867fdc7a7 — Environment-variable access.
repo/packages/app-config/src/db.ts:7 
      DATABASE_DRIVER: process.env.DATABASE_DRIVER || 'neon',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #904554c680fdfbc5 — Environment-variable access.
repo/packages/app-config/src/db.ts:8 
      DATABASE_STATEMENT_TIMEOUT: process.env.DATABASE_STATEMENT_TIMEOUT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc1f157f60de94b1 — Environment-variable access.
repo/packages/app-config/src/db.ts:9 
      DATABASE_TEST_URL: process.env.DATABASE_TEST_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51bd604105b8141c — Environment-variable access.
repo/packages/app-config/src/db.ts:10 
      DATABASE_URL: process.env.DATABASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91bd89f0654a5228 — Environment-variable access.
repo/packages/app-config/src/db.ts:12 
      KEY_VAULTS_SECRET: process.env.KEY_VAULTS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e36de30a7aa87e1e — Environment-variable access.
repo/packages/app-config/src/db.ts:14 
      REMOVE_GLOBAL_FILE: process.env.DISABLE_REMOVE_GLOBAL_FILE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0b5a9a273300457 — Environment-variable access.
repo/packages/app-config/src/featureFlags/index.ts:11 
    FEATURE_FLAGS: process.env.FEATURE_FLAGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ee3969cca740f9b — Environment-variable access.
repo/packages/app-config/src/featureFlags/schema.ts:5 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6ed4b5d4bd44aeb — Environment-variable access.
repo/packages/app-config/src/messenger.ts:36 
      LOBE_LINK_TOKEN_TTL_SECONDS: process.env.LOBE_LINK_TOKEN_TTL_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-cloud-sandbox

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #6e4876f80a1d44ee — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:101 
    const result = await runtime.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ce313f6933311c5 — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:110 
    const result = await runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-creds

npm first-party
expand_more 1 low-confidence finding(s)
low env_fs production #bc308d2e47c3406f — Environment-variable access.
repo/packages/builtin-tool-creds/src/ExecutionRuntime/index.ts:167 
      const appUrl = (process.env.APP_URL || 'https://app.lobehub.com').replace(/\/+$/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-local-system

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #738826f64fe4cd03 — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:105 
      const result = await this.runtime.readFile({
        endLine: params.loc?.[1],
        path: params.path,
        startLine: params.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #973a10ae6943937f — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:154 
      const result = await this.runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-skills

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #2a04087bd48638d5 — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:320 
        const content = await this.deviceFileAccess.readFile(fullPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f40a4aca5e8df5b — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:408 
        let content = await this.deviceFileAccess.readFile(projectSkill.location);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/chat-adapter-qq

npm first-party
expand_more 1 low-confidence finding(s)
low egress production #2ad88c72916c72c0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/chat-adapter-qq/src/api.ts:29 
    const response = await fetch(AUTH_URL, {
      body: JSON.stringify({
        appId: this.appId,
        clientSecret: this.clientSecret,
      }),
      headers: { 'Content-Type': 'application/json' },
      method: 'POST',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (npm): packages/database

npm first-party
expand_more 24 low-confidence finding(s)
low env_fs production #61c2b2935d64483f — Environment-variable access.
repo/packages/database/src/core/getTestDB.ts:19 
const isServerDBMode = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cbe20771fc54966 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:14 
  if (process.env.NODE_ENV === 'test') return {} as LobeChatDatabase;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69d36ef71eed66c0 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:57 
  if (process.env.MIGRATION_DB === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #561d3805842688bc — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:21 
  originalKeyVaultsSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7fcc2d565e913164 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:22 
  process.env.KEY_VAULTS_SECRET = validKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9ecc85b6b94f6374 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:31 
  process.env.KEY_VAULTS_SECRET = originalKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b34aefdd4a84052b — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:177 
      process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7baf4e455b905ee6 — Environment-variable access.
repo/packages/database/src/models/__tests__/messages/message.query.test.ts:1487 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f319aa20bfd7bc15 — Environment-variable access.
repo/packages/database/src/models/__tests__/session.test.ts:287 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dfa8cb9972ef364d — Environment-variable access.
repo/packages/database/src/models/__tests__/topics/topic.query.test.ts:1553 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d551ba0638049c2 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/activity.test.ts:240 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14dfb58d331b7051 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/experience.test.ts:437 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #674c4fd3ecbb15d1 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/identity.test.ts:455 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3c2544488155d310 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/model.test.ts:523 
      const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c57f04c910816ee2 — Environment-variable access.
repo/packages/database/src/repositories/home/__tests__/index.test.ts:457 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14cc04c043dea756 — Environment-variable access.
repo/packages/database/src/repositories/home/index.test.ts:788 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ebac5a214b2a415 — Environment-variable access.
repo/packages/database/src/repositories/search/index.test.ts:36 
const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a07b8c74729d324 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:66 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #475cbf2a24003e11 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:120 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9c760d790f586c84 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:175 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #829ba26905482703 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:209 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a91de0e1daf89f17 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:234 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a46fdfdf85d96ef2 — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:25 
  process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a0a8ef0a5dce76f6 — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:31 
  process.env.KEY_VAULTS_SECRET = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-control

npm first-party
expand_more 31 low-confidence finding(s)
low env_fs test-only #305ccf9f075d57e5 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:19 
  await writeFile(
    path.join(root, '.agents', 'skills', 'spa-routes', 'SKILL.md'),
    '---\nname: spa-routes\ndescription: SPA routing\n---\nbody',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #698801b9eb5f38c7 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:23 
  await writeFile(path.join(root, 'AGENTS.md'), '# Agents');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #449d7da4e14cfbdb — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:79 
    await writeFile(
      path.join(deviceSkillRoot, 'device-writer', 'SKILL.md'),
      '---\nname: device-writer\ndescription: Device writer\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c7a7faa38211028 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:84 
    await writeFile(
      path.join(deviceSkillRoot, 'spa-routes', 'SKILL.md'),
      '---\nname: spa-routes\ndescription: Device duplicate\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #02b395c7ed78cd68 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:112 
    await writeFile(
      path.join(root, '.agents', 'skills', 'agent-testing', 'SKILL.md'),
      [
        '---',
        'name: agent-testing',
        'description: >',
        '  Agentic end-to-end testing for LobeHub: backend verification via the CLI,',
        '  frontend verification via agent-browser (Electron).',
        '---',
        'body',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #261e305c1245f7fa — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:165 
    await writeFile(oldPath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5631c86dd7a5963b — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:180 
    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ee3ad50d17adf954 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:202 
    expect(await readFile(filePath, 'utf8')).toBe('remote edit');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9099f0944654df2d — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:15 
  await writeFile(path.join(root, 'note.txt'), 'hello preview\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ea8a27bcf99e949 — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:16 
  await writeFile(path.join(root, 'pic.png'), Buffer.from([0x89, 0x50, 0x4e, 0x47, 1, 2, 3]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e95c29ace906dde4 — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:17 
  await writeFile(path.join(outside, 'secret.txt'), 'do not read\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8a16acd1981e1815 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:25 
    await writeFile(path.join(dir, 'src', 'index.ts'), 'export const a = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d3fc89538eab3cdb — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:26 
    await writeFile(path.join(dir, 'README.md'), '# hi\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #76cbf5d4a99c37f9 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:30 
    await writeFile(path.join(dir, 'scratch.txt'), 'tmp\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #069861fc6a22c119 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:49 
    await writeFile(path.join(dir, 'one.txt'), '1\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7876e935528c3d57 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:50 
    await writeFile(path.join(dir, 'nested', 'deep', 'two.txt'), '2\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3362a619a70710e7 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:51 
    await writeFile(path.join(dir, '.agents', 'config.md'), '# cfg\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1f29c5342f49376 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:80 
    await writeFile(
      path.join(dir, 'src', 'components', 'Button.tsx'),
      'export const Button = 1;\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a7079ad799d0289b — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:84 
    await writeFile(path.join(dir, 'src', 'components', 'Input.tsx'), 'export const Input = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c86c9ba4886f72da — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:102 
    await writeFile(path.join(dir, 'nested', 'deep', 'target-file.ts'), 'target\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #536a6ca42e9b2ffc — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:103 
    await writeFile(path.join(dir, 'nested', 'deep', 'other.ts'), 'other\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e65831d30156c998 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:119 
    await writeFile(path.join(dir, '.agents', 'skills', 'target-skill.md'), 'skill\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed7a73aa95bc9e73 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:45 
    await expect(readFile(path.join(result.extractedDir, 'SKILL.md'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #921830b8d637c0bf — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:49 
      readFile(path.join(result.extractedDir, 'scripts', 'run.sh'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #126c043b746ed658 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:51 
    const marker = JSON.parse(await readFile(path.join(result.extractedDir, '.prepared'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5a17809c838acde — Filesystem access.
repo/packages/device-control/src/filePreview.ts:121 
    const buffer = await readFile(realFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b1b535e48c9e4c6 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:99 
      await writeFile(zipPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38e7e87e94ff65b3 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:111 
        await writeFile(targetPath, Buffer.from(fileContent as Uint8Array));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89afd76d032f6a56 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:114 
      await writeFile(
        path.join(stagingDir, '.prepared'),
        JSON.stringify({ preparedAt: Date.now(), url, zipHash }),
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d868f0b76ee6be7f — Filesystem access.
repo/packages/device-control/src/workspace.ts:142 
          const raw = await readFile(skillFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7781fcf796e5e52 — Filesystem access.
repo/packages/device-control/src/workspace.ts:204 
      const raw = await readFile(path.join(root, source), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/electron-server-ipc

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #b3f2528883af47d0 — Filesystem access.
repo/packages/electron-server-ipc/src/ipcClient.ts:48 
        const socketInfo = JSON.parse(fs.readFileSync(socketInfoPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea44fa7566a17b65 — Filesystem access.
repo/packages/electron-server-ipc/src/ipcServer.ts:56 
        fs.writeFileSync(socketInfoPath, JSON.stringify({ socketPath: this.socketPath }), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/env

npm first-party
expand_more 430 low-confidence finding(s)
low env_fs test-only #50655d118199a3ee — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:19 
    process.env.PLAUSIBLE_DOMAIN = 'example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #61fcfffc56f2e71f — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:20 
    process.env.POSTHOG_KEY = 'posthog_key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a67fe4c0ce4c1274 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:21 
    process.env.UMAMI_WEBSITE_ID = 'umami_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #34976c412cf8477b — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:22 
    process.env.CLARITY_PROJECT_ID = 'clarity_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77f5bd86d7bb005e — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:23 
    process.env.ENABLE_VERCEL_ANALYTICS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #08c4c26d39f61e85 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:24 
    process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID = 'ga_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4795e9cd57fb2743 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:25 
    process.env.X_ADS_PIXEL_ID = 'tw-pixel_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c21ab3ade63d1311 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:26 
    process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID = 'tw-pixel_id-login_or_signup_clicked';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #61d464c56dbc89a5 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:27 
    process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID = 'tw-pixel_id-main_page_view';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5cfe4c8cfedccaec — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:28 
    process.env.X_ADS_PURCHASE_EVENT_ID = 'tw-pixel_id-purchase_event_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2a607adb0046c012 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:23 
      process.env.AGENTS_INDEX_URL = 'https://custom-agents-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #23db837140d3a992 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:24 
      process.env.PLUGINS_INDEX_URL = 'https://custom-plugins-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5ffd9d2f085cbfb — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:32 
      process.env.AGENTS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #58b03a8bec0a43b0 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:33 
      process.env.PLUGINS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27184c2e4b9cf61a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:48 
      process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef51c8e0d1cd7677 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:49 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #94567feefc7fd731 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:57 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3744ccd23fac3e1d — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:58 
      process.env.INTERNAL_APP_URL = 'http://localhost:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d8e9060e3c1fda42 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:66 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0cc40077b67c3ee9 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:67 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2bac5f16c7d63fa4 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:76 
      process.env.APP_URL = 'https://cloudflare-proxied.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a30d72c042e7a367 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:77 
      process.env.INTERNAL_APP_URL = 'http://127.0.0.1:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9dc7aebbf2b89727 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:90 
    delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed00f863f86d9c14 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:91 
    delete process.env.VERCEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c38376fa9e9f7cdb — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:92 
    delete process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d97567f6693ec21 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:93 
    delete process.env.VERCEL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #099c338f416e1c23 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:94 
    delete process.env.VERCEL_BRANCH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65458d78a70dcf7a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:95 
    delete process.env.VERCEL_PROJECT_PRODUCTION_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c78e0b11bedbe095 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:99 
    process.env.APP_URL = 'https://custom-app.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #76ee96ef15c9688e — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:100 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d622006bfd3ac3d0 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:109 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a903d4e617f91226 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:110 
      process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #82e4a133be310814 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:111 
      process.env.VERCEL_PROJECT_PRODUCTION_URL = 'lobechat.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77ad5d2b47d6ff00 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:112 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-main-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #12aaaea2663e415c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:113 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a03e28c6fa481f64 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:121 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e44f7376932fa791 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:122 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #475f303d6fb096c8 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:123 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ec98c864f8f2a334 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:124 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e84e881c31012a7c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:132 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #85093bb4bf16b97b — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:133 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #978818a232cff510 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:134 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8f141042f2aa5635 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:13 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c010b1e762b6ffc9 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:14 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf0b618cba910ff2 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:15 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9196b1e76a84cf0b — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:16 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14dbbd3ddb29fa08 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:17 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0378772d91776826 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:18 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #96db48597f6243ae — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:27 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #901e0e9e43126706 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:28 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4efd0e34a8828db2 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:29 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5639f80b50913f2f — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:30 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eef02355c113c946 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:31 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #64f7989fa0a1c6d6 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:32 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #36d52a6c64800b53 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:7 
    delete process.env.SANDBOX_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd82042e4a4b4492 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:8 
    delete process.env.ONLYBOXES_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #94471eb098cce11f — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:9 
    delete process.env.ONLYBOXES_JIT_ISSUER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b09271331387d56f — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:10 
    delete process.env.ONLYBOXES_JIT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #98ee43dd97a878e5 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:11 
    delete process.env.ONLYBOXES_JIT_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2e6009955a69de7 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:12 
    delete process.env.ONLYBOXES_LEASE_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c123d76c9f5d9d1 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:16 
    process.env.SANDBOX_PROVIDER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a4ffc21dcc04fb5 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:17 
    process.env.ONLYBOXES_BASE_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #87bf5ede4c8c5754 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:18 
    process.env.ONLYBOXES_JIT_ISSUER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4523f58a3a9ac221 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:19 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4cb45b4879f7d51 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:20 
    process.env.ONLYBOXES_JIT_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #057b3a436e0ef3e2 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:21 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #22b7dea015b756a6 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:35 
    process.env.SANDBOX_PROVIDER = 'onlyboxes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8dc88a4ea2f91b07 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:36 
    process.env.ONLYBOXES_BASE_URL = 'https://onlyboxes.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #53f3b761b78b7de4 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:37 
    process.env.ONLYBOXES_JIT_ISSUER = 'lobehub-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9afb14b5e4e14030 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:38 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = 'jit-signing-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27631d1f74b0ae8d — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:39 
    process.env.ONLYBOXES_JIT_TTL_SEC = '900';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d31535197e9de53b — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:40 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '3600';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80b152128819861a — Environment-variable access.
repo/packages/env/src/analytics.ts:39 
      ENABLED_PLAUSIBLE_ANALYTICS: !!process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b50a46419878c41b — Environment-variable access.
repo/packages/env/src/analytics.ts:40 
      PLAUSIBLE_DOMAIN: process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db55ab3c335dd0ae — Environment-variable access.
repo/packages/env/src/analytics.ts:41 
      PLAUSIBLE_SCRIPT_BASE_URL: process.env.PLAUSIBLE_SCRIPT_BASE_URL || 'https://plausible.io',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63db2587776db503 — Environment-variable access.
repo/packages/env/src/analytics.ts:44 
      ENABLED_POSTHOG_ANALYTICS: !!process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #906d8dd6745df3b7 — Environment-variable access.
repo/packages/env/src/analytics.ts:45 
      POSTHOG_KEY: process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34e1481f7c791d1c — Environment-variable access.
repo/packages/env/src/analytics.ts:46 
      POSTHOG_HOST: process.env.POSTHOG_HOST || 'https://app.posthog.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74b4830f4d5cccaf — Environment-variable access.
repo/packages/env/src/analytics.ts:47 
      DEBUG_POSTHOG_ANALYTICS: process.env.DEBUG_POSTHOG_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e77b2e79a3d3dd3e — Environment-variable access.
repo/packages/env/src/analytics.ts:50 
      ENABLED_UMAMI_ANALYTICS: !!process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d0659df5fdb97d1 — Environment-variable access.
repo/packages/env/src/analytics.ts:51 
      UMAMI_SCRIPT_URL: process.env.UMAMI_SCRIPT_URL || 'https://analytics.umami.is/script.js',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1f898b30db54dd4 — Environment-variable access.
repo/packages/env/src/analytics.ts:52 
      UMAMI_WEBSITE_ID: process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #121d13d81b141c64 — Environment-variable access.
repo/packages/env/src/analytics.ts:55 
      ENABLED_CLARITY_ANALYTICS: !!process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #905dd14dd2587344 — Environment-variable access.
repo/packages/env/src/analytics.ts:56 
      CLARITY_PROJECT_ID: process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e6fa1ad5c7ff17a — Environment-variable access.
repo/packages/env/src/analytics.ts:59 
      ENABLE_VERCEL_ANALYTICS: process.env.ENABLE_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a74203253b8925e — Environment-variable access.
repo/packages/env/src/analytics.ts:60 
      DEBUG_VERCEL_ANALYTICS: process.env.DEBUG_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3643c47c106a6a55 — Environment-variable access.
repo/packages/env/src/analytics.ts:63 
      ENABLE_GOOGLE_ANALYTICS: !!process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28110ee04aa35ece — Environment-variable access.
repo/packages/env/src/analytics.ts:64 
      GOOGLE_ANALYTICS_MEASUREMENT_ID: process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26a02a7f91d0d59f — Environment-variable access.
repo/packages/env/src/analytics.ts:67 
      ENABLED_X_ADS: !!process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e4afe01ca312a21 — Environment-variable access.
repo/packages/env/src/analytics.ts:68 
      X_ADS_PIXEL_ID: process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aea3174c953381f6 — Environment-variable access.
repo/packages/env/src/analytics.ts:69 
      X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID: process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faa724c3c0c73d23 — Environment-variable access.
repo/packages/env/src/analytics.ts:70 
      X_ADS_MAIN_PAGE_VIEW_EVENT_ID: process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59feba97aec723ed — Environment-variable access.
repo/packages/env/src/analytics.ts:71 
      X_ADS_PURCHASE_EVENT_ID: process.env.X_ADS_PURCHASE_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5679e35d330f872c — Environment-variable access.
repo/packages/env/src/analytics.ts:75 
      REACT_SCAN_MONITOR_API_KEY: process.env.REACT_SCAN_MONITOR_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61f0c2a6cc25c510 — Environment-variable access.
repo/packages/env/src/app.ts:4 
const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd4a3476215a2ccc — Environment-variable access.
repo/packages/env/src/app.ts:11 
  if (process.env.VERCEL_ENV === 'production' && process.env.VERCEL_PROJECT_PRODUCTION_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7006c1b6bad5a867 — Environment-variable access.
repo/packages/env/src/app.ts:12 
    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e19c59ae8d4d945b — Environment-variable access.
repo/packages/env/src/app.ts:14 
  if (process.env.VERCEL_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22a83484f56d0023 — Environment-variable access.
repo/packages/env/src/app.ts:15 
    return `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6a9ffefa5700ff9 — Environment-variable access.
repo/packages/env/src/app.ts:17 
  return `https://${process.env.VERCEL_BRANCH_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65fa69412d70a146 — Environment-variable access.
repo/packages/env/src/app.ts:20 
const APP_URL = process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d419b4087bf5428 — Environment-variable access.
repo/packages/env/src/app.ts:21 
  ? process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97b157250edae2e3 — Environment-variable access.
repo/packages/env/src/app.ts:24 
    : process.env.NODE_ENV === 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1279581a66ce26 — Environment-variable access.
repo/packages/env/src/app.ts:25 
      ? `http://localhost:${process.env.PORT || 3010}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdbbd19e63b2e6af — Environment-variable access.
repo/packages/env/src/app.ts:26 
      : `http://localhost:${process.env.PORT || 3210}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9d0fbf59ab586cc — Environment-variable access.
repo/packages/env/src/app.ts:30 
const INTERNAL_APP_URL = process.env.INTERNAL_APP_URL || APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e53433bb2edb69f4 — Environment-variable access.
repo/packages/env/src/app.ts:92 
      NEXT_PUBLIC_ENABLE_SENTRY: !!process.env.NEXT_PUBLIC_SENTRY_DSN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c784abf914a7739 — Environment-variable access.
repo/packages/env/src/app.ts:94 
      AGENTS_INDEX_URL: !!process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #860fccfbd858caed — Environment-variable access.
repo/packages/env/src/app.ts:95 
        ? process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48b0f4c0dbad907b — Environment-variable access.
repo/packages/env/src/app.ts:98 
      DEFAULT_AGENT_CONFIG: process.env.DEFAULT_AGENT_CONFIG || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58f459b312362d28 — Environment-variable access.
repo/packages/env/src/app.ts:99 
      SYSTEM_AGENT: process.env.SYSTEM_AGENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4a627d32c5938e8 — Environment-variable access.
repo/packages/env/src/app.ts:101 
      PLUGINS_INDEX_URL: !!process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c658c960371af13 — Environment-variable access.
repo/packages/env/src/app.ts:102 
        ? process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d47c5b1e6857f269 — Environment-variable access.
repo/packages/env/src/app.ts:105 
      PLUGIN_SETTINGS: process.env.PLUGIN_SETTINGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74c3cbf012a6ba96 — Environment-variable access.
repo/packages/env/src/app.ts:107 
      VERCEL_EDGE_CONFIG: process.env.VERCEL_EDGE_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea825ebe53b834f — Environment-variable access.
repo/packages/env/src/app.ts:111 
      MIDDLEWARE_REWRITE_THROUGH_LOCAL: process.env.MIDDLEWARE_REWRITE_THROUGH_LOCAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12161c7917821ab6 — Environment-variable access.
repo/packages/env/src/app.ts:113 
      CUSTOM_FONT_FAMILY: process.env.CUSTOM_FONT_FAMILY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ab39219ec01ea49 — Environment-variable access.
repo/packages/env/src/app.ts:114 
      CUSTOM_FONT_URL: process.env.CUSTOM_FONT_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9dce005b380be23f — Environment-variable access.
repo/packages/env/src/app.ts:115 
      CDN_USE_GLOBAL: process.env.CDN_USE_GLOBAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13c79ceb98b7cdbb — Environment-variable access.
repo/packages/env/src/app.ts:117 
      SSRF_ALLOW_PRIVATE_IP_ADDRESS: process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c23785b7a3c18e7 — Environment-variable access.
repo/packages/env/src/app.ts:118 
      SSRF_ALLOW_IP_ADDRESS_LIST: process.env.SSRF_ALLOW_IP_ADDRESS_LIST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #183129ce8533b62a — Environment-variable access.
repo/packages/env/src/app.ts:119 
      MARKET_BASE_URL: process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f820db43ebfc7128 — Environment-variable access.
repo/packages/env/src/app.ts:121 
      MARKET_TRUSTED_CLIENT_SECRET: process.env.MARKET_TRUSTED_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23a83369d8184252 — Environment-variable access.
repo/packages/env/src/app.ts:122 
      MARKET_TRUSTED_CLIENT_ID: process.env.MARKET_TRUSTED_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc68d8799da84c1d — Environment-variable access.
repo/packages/env/src/app.ts:124 
      AGENT_GATEWAY_SERVICE_TOKEN: process.env.AGENT_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d84da76e4ca72006 — Environment-variable access.
repo/packages/env/src/app.ts:125 
      ENABLE_AGENT_GATEWAY: process.env.ENABLE_AGENT_GATEWAY === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ce3161dfb623e95 — Environment-variable access.
repo/packages/env/src/app.ts:126 
      AGENT_GATEWAY_URL: process.env.AGENT_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a83541f27588d0d1 — Environment-variable access.
repo/packages/env/src/app.ts:127 
      enableQueueAgentRuntime: process.env.AGENT_RUNTIME_MODE === 'queue',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16592e9c12129d20 — Environment-variable access.
repo/packages/env/src/app.ts:128 
      TELEMETRY_DISABLED: process.env.TELEMETRY_DISABLED === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ceb93fc93c360713 — Environment-variable access.
repo/packages/env/src/auth.ts:202 
      AUTH_EMAIL_VERIFICATION: process.env.AUTH_EMAIL_VERIFICATION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8ec9dd4505b3580 — Environment-variable access.
repo/packages/env/src/auth.ts:203 
      AUTH_ENABLE_MAGIC_LINK: process.env.AUTH_ENABLE_MAGIC_LINK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6507074e4481ccaf — Environment-variable access.
repo/packages/env/src/auth.ts:204 
      AUTH_SECRET: process.env.AUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223f4fac4d18c0e9 — Environment-variable access.
repo/packages/env/src/auth.ts:205 
      AUTH_SSO_PROVIDERS: process.env.AUTH_SSO_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd9c98871ffbda65 — Environment-variable access.
repo/packages/env/src/auth.ts:206 
      AUTH_TRUSTED_ORIGINS: process.env.AUTH_TRUSTED_ORIGINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3541a741488f739d — Environment-variable access.
repo/packages/env/src/auth.ts:207 
      AUTH_ALLOWED_EMAILS: process.env.AUTH_ALLOWED_EMAILS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92b820c72026ab04 — Environment-variable access.
repo/packages/env/src/auth.ts:208 
      AUTH_DISABLE_EMAIL_PASSWORD: process.env.AUTH_DISABLE_EMAIL_PASSWORD === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec7394935201a233 — Environment-variable access.
repo/packages/env/src/auth.ts:211 
      AUTH_COGNITO_DOMAIN: process.env.AUTH_COGNITO_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9024719b7f5894dc — Environment-variable access.
repo/packages/env/src/auth.ts:212 
      AUTH_COGNITO_REGION: process.env.AUTH_COGNITO_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc6b7d635157e648 — Environment-variable access.
repo/packages/env/src/auth.ts:213 
      AUTH_COGNITO_USERPOOL_ID: process.env.AUTH_COGNITO_USERPOOL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2545f357d4638ae8 — Environment-variable access.
repo/packages/env/src/auth.ts:216 
      AUTH_GOOGLE_ID: process.env.AUTH_GOOGLE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e2af8371d68298d — Environment-variable access.
repo/packages/env/src/auth.ts:217 
      AUTH_GOOGLE_SECRET: process.env.AUTH_GOOGLE_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bb8b33f55f67e3f — Environment-variable access.
repo/packages/env/src/auth.ts:219 
      AUTH_APPLE_CLIENT_ID: process.env.AUTH_APPLE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2df308923fc2d365 — Environment-variable access.
repo/packages/env/src/auth.ts:220 
      AUTH_APPLE_CLIENT_SECRET: process.env.AUTH_APPLE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dafd97b6a150bca — Environment-variable access.
repo/packages/env/src/auth.ts:221 
      AUTH_APPLE_APP_BUNDLE_IDENTIFIER: process.env.AUTH_APPLE_APP_BUNDLE_IDENTIFIER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc5771467ac409bf — Environment-variable access.
repo/packages/env/src/auth.ts:223 
      AUTH_GITHUB_ID: process.env.AUTH_GITHUB_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fc0f9e5ff4d6d57 — Environment-variable access.
repo/packages/env/src/auth.ts:224 
      AUTH_GITHUB_SECRET: process.env.AUTH_GITHUB_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3e821e5428243ac — Environment-variable access.
repo/packages/env/src/auth.ts:226 
      AUTH_MICROSOFT_AUTHORITY_URL: process.env.AUTH_MICROSOFT_AUTHORITY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2ef9fe9f8919260 — Environment-variable access.
repo/packages/env/src/auth.ts:227 
      AUTH_MICROSOFT_ID: process.env.AUTH_MICROSOFT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #766a960157f39a4f — Environment-variable access.
repo/packages/env/src/auth.ts:228 
      AUTH_MICROSOFT_SECRET: process.env.AUTH_MICROSOFT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff37424691926377 — Environment-variable access.
repo/packages/env/src/auth.ts:229 
      AUTH_MICROSOFT_TENANT_ID: process.env.AUTH_MICROSOFT_TENANT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #830fd6cc5d1e5e7b — Environment-variable access.
repo/packages/env/src/auth.ts:231 
      AUTH_COGNITO_ID: process.env.AUTH_COGNITO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cdc0cf84ad0dee9 — Environment-variable access.
repo/packages/env/src/auth.ts:232 
      AUTH_COGNITO_SECRET: process.env.AUTH_COGNITO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #449b569db7351855 — Environment-variable access.
repo/packages/env/src/auth.ts:233 
      AUTH_COGNITO_ISSUER: process.env.AUTH_COGNITO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83e416f8130aa82b — Environment-variable access.
repo/packages/env/src/auth.ts:235 
      AUTH_AUTH0_ID: process.env.AUTH_AUTH0_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c3e49fdd791bfee — Environment-variable access.
repo/packages/env/src/auth.ts:236 
      AUTH_AUTH0_SECRET: process.env.AUTH_AUTH0_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3894445b0ddff9b4 — Environment-variable access.
repo/packages/env/src/auth.ts:237 
      AUTH_AUTH0_ISSUER: process.env.AUTH_AUTH0_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c2af04d74f5dd11 — Environment-variable access.
repo/packages/env/src/auth.ts:239 
      AUTH_AUTHELIA_ID: process.env.AUTH_AUTHELIA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #088dcc027dc87d83 — Environment-variable access.
repo/packages/env/src/auth.ts:240 
      AUTH_AUTHELIA_SECRET: process.env.AUTH_AUTHELIA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a92688ca614ab1f — Environment-variable access.
repo/packages/env/src/auth.ts:241 
      AUTH_AUTHELIA_ISSUER: process.env.AUTH_AUTHELIA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d80a4dbfcd4687b — Environment-variable access.
repo/packages/env/src/auth.ts:243 
      AUTH_AUTHENTIK_ID: process.env.AUTH_AUTHENTIK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1157eb5df18117ad — Environment-variable access.
repo/packages/env/src/auth.ts:244 
      AUTH_AUTHENTIK_SECRET: process.env.AUTH_AUTHENTIK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62ead5a85fb6ee4e — Environment-variable access.
repo/packages/env/src/auth.ts:245 
      AUTH_AUTHENTIK_ISSUER: process.env.AUTH_AUTHENTIK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083fe48f3d383e0f — Environment-variable access.
repo/packages/env/src/auth.ts:247 
      AUTH_CASDOOR_ID: process.env.AUTH_CASDOOR_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90e23ad65293f5ab — Environment-variable access.
repo/packages/env/src/auth.ts:248 
      AUTH_CASDOOR_SECRET: process.env.AUTH_CASDOOR_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fa74cb194a478d2 — Environment-variable access.
repo/packages/env/src/auth.ts:249 
      AUTH_CASDOOR_ISSUER: process.env.AUTH_CASDOOR_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73bff2f0d543d919 — Environment-variable access.
repo/packages/env/src/auth.ts:251 
      AUTH_CLOUDFLARE_ZERO_TRUST_ID: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9572ca841d8fd848 — Environment-variable access.
repo/packages/env/src/auth.ts:252 
      AUTH_CLOUDFLARE_ZERO_TRUST_SECRET: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91a1a564a32b77f7 — Environment-variable access.
repo/packages/env/src/auth.ts:253 
      AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e9fff5a187df36e — Environment-variable access.
repo/packages/env/src/auth.ts:255 
      AUTH_FEISHU_APP_ID: process.env.AUTH_FEISHU_APP_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3570917f2a645fe — Environment-variable access.
repo/packages/env/src/auth.ts:256 
      AUTH_FEISHU_APP_SECRET: process.env.AUTH_FEISHU_APP_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d53aa30f89a8be04 — Environment-variable access.
repo/packages/env/src/auth.ts:258 
      AUTH_GENERIC_OIDC_ID: process.env.AUTH_GENERIC_OIDC_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #493c8e34fad34291 — Environment-variable access.
repo/packages/env/src/auth.ts:259 
      AUTH_GENERIC_OIDC_SECRET: process.env.AUTH_GENERIC_OIDC_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #926620068d6535d5 — Environment-variable access.
repo/packages/env/src/auth.ts:260 
      AUTH_GENERIC_OIDC_ISSUER: process.env.AUTH_GENERIC_OIDC_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa95cec487f9386a — Environment-variable access.
repo/packages/env/src/auth.ts:262 
      AUTH_KEYCLOAK_ID: process.env.AUTH_KEYCLOAK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3efe0a93f732d54 — Environment-variable access.
repo/packages/env/src/auth.ts:263 
      AUTH_KEYCLOAK_SECRET: process.env.AUTH_KEYCLOAK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d985750d0d85702d — Environment-variable access.
repo/packages/env/src/auth.ts:264 
      AUTH_KEYCLOAK_ISSUER: process.env.AUTH_KEYCLOAK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #982a20943d68bcd3 — Environment-variable access.
repo/packages/env/src/auth.ts:266 
      AUTH_LOGTO_ID: process.env.AUTH_LOGTO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03b9b39092b03564 — Environment-variable access.
repo/packages/env/src/auth.ts:267 
      AUTH_LOGTO_SECRET: process.env.AUTH_LOGTO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc6c00afd9ab3588 — Environment-variable access.
repo/packages/env/src/auth.ts:268 
      AUTH_LOGTO_ISSUER: process.env.AUTH_LOGTO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0b7ac717c1cb193 — Environment-variable access.
repo/packages/env/src/auth.ts:270 
      AUTH_OKTA_ID: process.env.AUTH_OKTA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #027d6a0f59789031 — Environment-variable access.
repo/packages/env/src/auth.ts:271 
      AUTH_OKTA_SECRET: process.env.AUTH_OKTA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f379b7cde8dfc78 — Environment-variable access.
repo/packages/env/src/auth.ts:272 
      AUTH_OKTA_ISSUER: process.env.AUTH_OKTA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16d109433e136701 — Environment-variable access.
repo/packages/env/src/auth.ts:274 
      AUTH_WECHAT_ID: process.env.AUTH_WECHAT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e2354869c1cd07b — Environment-variable access.
repo/packages/env/src/auth.ts:275 
      AUTH_WECHAT_SECRET: process.env.AUTH_WECHAT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d9a71d9119bea5c — Environment-variable access.
repo/packages/env/src/auth.ts:277 
      AUTH_ZITADEL_ID: process.env.AUTH_ZITADEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e66f9dd38b196a8f — Environment-variable access.
repo/packages/env/src/auth.ts:278 
      AUTH_ZITADEL_SECRET: process.env.AUTH_ZITADEL_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d115bc10ad4978cf — Environment-variable access.
repo/packages/env/src/auth.ts:279 
      AUTH_ZITADEL_ISSUER: process.env.AUTH_ZITADEL_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d49a5b6f2919127 — Environment-variable access.
repo/packages/env/src/auth.ts:282 
      LOGTO_WEBHOOK_SIGNING_KEY: process.env.LOGTO_WEBHOOK_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e785bed99143600c — Environment-variable access.
repo/packages/env/src/auth.ts:285 
      CASDOOR_WEBHOOK_SECRET: process.env.CASDOOR_WEBHOOK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1810f8d306a07cc — Environment-variable access.
repo/packages/env/src/auth.ts:287 
      JWKS_KEY: process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c259a81a8d9fae7 — Environment-variable access.
repo/packages/env/src/auth.ts:288 
      ENABLE_OIDC: !!process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea840e7a5b3fb337 — Environment-variable access.
repo/packages/env/src/auth.ts:291 
      INTERNAL_JWT_EXPIRATION: process.env.INTERNAL_JWT_EXPIRATION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b669b942c790e489 — Environment-variable access.
repo/packages/env/src/debug.ts:16 
  DEBUG_MODE: process.env.NEXT_PUBLIC_DEVELOPER_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e82c70e4bca090 — Environment-variable access.
repo/packages/env/src/debug.ts:19 
  I18N_DEBUG: process.env.NEXT_PUBLIC_I18N_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c08ee8dc4f6a7c32 — Environment-variable access.
repo/packages/env/src/debug.ts:20 
  I18N_DEBUG_BROWSER: process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1f3222a7bebb18d — Environment-variable access.
repo/packages/env/src/debug.ts:21 
  I18N_DEBUG_SERVER: process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cad8f1a558411837 — Environment-variable access.
repo/packages/env/src/email.ts:35 
      SMTP_FROM: process.env.SMTP_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0185e7a2b73b30cc — Environment-variable access.
repo/packages/env/src/email.ts:36 
      SMTP_HOST: process.env.SMTP_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d08a1fb706e397a3 — Environment-variable access.
repo/packages/env/src/email.ts:37 
      SMTP_PORT: process.env.SMTP_PORT ? Number(process.env.SMTP_PORT) : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #043500a1e7835288 — Environment-variable access.
repo/packages/env/src/email.ts:38 
      SMTP_SECURE: process.env.SMTP_SECURE === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc047f3377470b22 — Environment-variable access.
repo/packages/env/src/email.ts:39 
      SMTP_USER: process.env.SMTP_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b78802dc180b398 — Environment-variable access.
repo/packages/env/src/email.ts:40 
      SMTP_PASS: process.env.SMTP_PASS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16c27a571b1f6d19 — Environment-variable access.
repo/packages/env/src/email.ts:41 
      EMAIL_SERVICE_PROVIDER: process.env.EMAIL_SERVICE_PROVIDER

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12f9323af1f86fe3 — Environment-variable access.
repo/packages/env/src/email.ts:42 
        ? process.env.EMAIL_SERVICE_PROVIDER.toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c7f8a0c57f1e54d — Environment-variable access.
repo/packages/env/src/email.ts:44 
      RESEND_API_KEY: process.env.RESEND_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3270a360516d3466 — Environment-variable access.
repo/packages/env/src/email.ts:45 
      RESEND_FROM: process.env.RESEND_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea30f6810292c08f — Environment-variable access.
repo/packages/env/src/file.ts:7 
  if (!!process.env.NEXT_PUBLIC_S3_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6c56c358e35ee98 — Environment-variable access.
repo/packages/env/src/file.ts:13 
  const S3_PUBLIC_DOMAIN = process.env.S3_PUBLIC_DOMAIN || process.env.NEXT_PUBLIC_S3_DOMAIN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #260f9189c9d58370 — Environment-variable access.
repo/packages/env/src/file.ts:25 
      CHUNKS_AUTO_EMBEDDING: process.env.CHUNKS_AUTO_EMBEDDING !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #838b47ebdd9a3ca1 — Environment-variable access.
repo/packages/env/src/file.ts:26 
      CHUNKS_AUTO_GEN_METADATA: process.env.CHUNKS_AUTO_GEN_METADATA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58b39ac6119cac94 — Environment-variable access.
repo/packages/env/src/file.ts:27 
      EMBEDDING_BATCH_SIZE: process.env.EMBEDDING_BATCH_SIZE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2b262efc3b67fa6 — Environment-variable access.
repo/packages/env/src/file.ts:28 
      EMBEDDING_CONCURRENCY: process.env.EMBEDDING_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a18bd43a2ff1c6c — Environment-variable access.
repo/packages/env/src/file.ts:30 
      NEXT_PUBLIC_S3_DOMAIN: process.env.NEXT_PUBLIC_S3_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #097d34028113c949 — Environment-variable access.
repo/packages/env/src/file.ts:31 
      NEXT_PUBLIC_S3_FILE_PATH: process.env.NEXT_PUBLIC_S3_FILE_PATH || DEFAULT_S3_FILE_PATH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54e5a9d1d5dc2ee7 — Environment-variable access.
repo/packages/env/src/file.ts:33 
      S3_ACCESS_KEY_ID: process.env.S3_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f08ce12c6a6af03e — Environment-variable access.
repo/packages/env/src/file.ts:34 
      S3_BUCKET: process.env.S3_BUCKET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #763e3c61bc931daa — Environment-variable access.
repo/packages/env/src/file.ts:35 
      S3_ENABLE_PATH_STYLE: process.env.S3_ENABLE_PATH_STYLE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #553dcf755cecc095 — Environment-variable access.
repo/packages/env/src/file.ts:36 
      S3_ENDPOINT: process.env.S3_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4320645938c5aaca — Environment-variable access.
repo/packages/env/src/file.ts:37 
      S3_PREVIEW_URL_EXPIRE_IN: parseInt(process.env.S3_PREVIEW_URL_EXPIRE_IN || '7200'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a36812f0494464e9 — Environment-variable access.
repo/packages/env/src/file.ts:39 
      S3_REGION: process.env.S3_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7306131d0e5e5681 — Environment-variable access.
repo/packages/env/src/file.ts:40 
      S3_SECRET_ACCESS_KEY: process.env.S3_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e96a60e2b19a3679 — Environment-variable access.
repo/packages/env/src/file.ts:41 
      S3_SET_ACL: process.env.S3_SET_ACL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bab306932ddf5bd7 — Environment-variable access.
repo/packages/env/src/gateway.ts:7 
      DEVICE_GATEWAY_SERVICE_TOKEN: process.env.DEVICE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0085724a7876c38 — Environment-variable access.
repo/packages/env/src/gateway.ts:8 
      DEVICE_GATEWAY_URL: process.env.DEVICE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #849b08f76bf75e3a — Environment-variable access.
repo/packages/env/src/gateway.ts:9 
      MESSAGE_GATEWAY_ENABLED: process.env.MESSAGE_GATEWAY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5ef7af7a0240ba3 — Environment-variable access.
repo/packages/env/src/gateway.ts:10 
      MESSAGE_GATEWAY_SERVICE_TOKEN: process.env.MESSAGE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a389b0eea29af819 — Environment-variable access.
repo/packages/env/src/gateway.ts:11 
      MESSAGE_GATEWAY_URL: process.env.MESSAGE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a57fb0cc1c3bfb78 — Environment-variable access.
repo/packages/env/src/image.ts:9 
      AI_IMAGE_DEFAULT_IMAGE_NUM: process.env.AI_IMAGE_DEFAULT_IMAGE_NUM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d25fb816611c236b — Environment-variable access.
repo/packages/env/src/knowledge.ts:6 
    DEFAULT_FILES_CONFIG: process.env.DEFAULT_FILES_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13ab6c9fb5186083 — Environment-variable access.
repo/packages/env/src/knowledge.ts:7 
    FILE_TYPE_CHUNKING_RULES: process.env.FILE_TYPE_CHUNKING_RULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89858a44f52eb0d2 — Environment-variable access.
repo/packages/env/src/knowledge.ts:8 
    UNSTRUCTURED_API_KEY: process.env.UNSTRUCTURED_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56e6790ed437c303 — Environment-variable access.
repo/packages/env/src/knowledge.ts:9 
    UNSTRUCTURED_SERVER_URL: process.env.UNSTRUCTURED_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b062bf05ef45635b — Environment-variable access.
repo/packages/env/src/langfuse.ts:7 
      ENABLE_LANGFUSE: process.env.ENABLE_LANGFUSE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8618d45b897ba152 — Environment-variable access.
repo/packages/env/src/langfuse.ts:8 
      LANGFUSE_SECRET_KEY: process.env.LANGFUSE_SECRET_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79fb0a80247f8b3a — Environment-variable access.
repo/packages/env/src/langfuse.ts:9 
      LANGFUSE_PUBLIC_KEY: process.env.LANGFUSE_PUBLIC_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49fbfe8b1e615450 — Environment-variable access.
repo/packages/env/src/langfuse.ts:10 
      LANGFUSE_HOST: process.env.LANGFUSE_HOST || 'https://cloud.langfuse.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80c9b2e74369005a — Environment-variable access.
repo/packages/env/src/llm.ts:260 
      API_KEY_SELECT_MODE: process.env.API_KEY_SELECT_MODE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8e4342d0380f8f4 — Environment-variable access.
repo/packages/env/src/llm.ts:262 
      ENABLED_OPENAI: process.env.ENABLED_OPENAI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b33939b66f6da95 — Environment-variable access.
repo/packages/env/src/llm.ts:263 
      OPENAI_API_KEY: process.env.OPENAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7326a43e1f0448d3 — Environment-variable access.
repo/packages/env/src/llm.ts:265 
      ENABLED_AZURE_OPENAI: !!process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5542e3e6fc49a1fa — Environment-variable access.
repo/packages/env/src/llm.ts:266 
      AZURE_API_KEY: process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8246f25c3462fdd9 — Environment-variable access.
repo/packages/env/src/llm.ts:267 
      AZURE_API_VERSION: process.env.AZURE_API_VERSION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e231c5367d78007e — Environment-variable access.
repo/packages/env/src/llm.ts:268 
      AZURE_ENDPOINT: process.env.AZURE_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70bc8378bfe2371a — Environment-variable access.
repo/packages/env/src/llm.ts:270 
      ENABLED_AZUREAI: !!process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #805b5d3f4bd49cb5 — Environment-variable access.
repo/packages/env/src/llm.ts:271 
      AZUREAI_ENDPOINT_KEY: process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8aa3c2fc979e1fc0 — Environment-variable access.
repo/packages/env/src/llm.ts:272 
      AZUREAI_ENDPOINT: process.env.AZUREAI_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76aa856774db94ce — Environment-variable access.
repo/packages/env/src/llm.ts:274 
      ENABLED_ZHIPU: !!process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd34fae8db42b84c — Environment-variable access.
repo/packages/env/src/llm.ts:275 
      ZHIPU_API_KEY: process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #386e0b0907590145 — Environment-variable access.
repo/packages/env/src/llm.ts:277 
      ENABLED_DEEPSEEK: !!process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f939414093b0c51 — Environment-variable access.
repo/packages/env/src/llm.ts:278 
      DEEPSEEK_API_KEY: process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #896ebd41a6afc37e — Environment-variable access.
repo/packages/env/src/llm.ts:280 
      ENABLED_GOOGLE: process.env.ENABLED_GOOGLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0be2adaf6da4ac1 — Environment-variable access.
repo/packages/env/src/llm.ts:281 
      GOOGLE_API_KEY: process.env.GOOGLE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #746cdc28175fb681 — Environment-variable access.
repo/packages/env/src/llm.ts:283 
      ENABLED_VERTEXAI: !!process.env.VERTEXAI_CREDENTIALS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b7f53114ee5313a — Environment-variable access.
repo/packages/env/src/llm.ts:285 
      ENABLED_VOLCENGINE: !!process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cac10efe474f2bb — Environment-variable access.
repo/packages/env/src/llm.ts:286 
      VOLCENGINE_API_KEY: process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #322dfeb0457cbe64 — Environment-variable access.
repo/packages/env/src/llm.ts:288 
      ENABLED_PERPLEXITY: !!process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a84fe18b260aec32 — Environment-variable access.
repo/packages/env/src/llm.ts:289 
      PERPLEXITY_API_KEY: process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76463e6ecbebae8e — Environment-variable access.
repo/packages/env/src/llm.ts:291 
      ENABLED_ANTHROPIC: process.env.ENABLED_ANTHROPIC !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61eaad998a68af52 — Environment-variable access.
repo/packages/env/src/llm.ts:292 
      ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d7e9c95d813b4cd — Environment-variable access.
repo/packages/env/src/llm.ts:294 
      ENABLED_MINIMAX: !!process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fa192b7ec7bb838 — Environment-variable access.
repo/packages/env/src/llm.ts:295 
      MINIMAX_API_KEY: process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f5a2b258d808415 — Environment-variable access.
repo/packages/env/src/llm.ts:297 
      ENABLED_MISTRAL: !!process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abc645ad13b25921 — Environment-variable access.
repo/packages/env/src/llm.ts:298 
      MISTRAL_API_KEY: process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c154eef04f81690 — Environment-variable access.
repo/packages/env/src/llm.ts:300 
      ENABLED_OPENROUTER: !!process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d41d0f04d0b5d34 — Environment-variable access.
repo/packages/env/src/llm.ts:301 
      OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dd3b5dad5c5009d — Environment-variable access.
repo/packages/env/src/llm.ts:303 
      ENABLED_TOGETHERAI: !!process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #792a33fc4217e522 — Environment-variable access.
repo/packages/env/src/llm.ts:304 
      TOGETHERAI_API_KEY: process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b205861ed5073afd — Environment-variable access.
repo/packages/env/src/llm.ts:306 
      ENABLED_FIREWORKSAI: !!process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99ad98c462a824b6 — Environment-variable access.
repo/packages/env/src/llm.ts:307 
      FIREWORKSAI_API_KEY: process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8c5592b81a58a8d — Environment-variable access.
repo/packages/env/src/llm.ts:309 
      ENABLED_MOONSHOT: !!process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b84d0e6ed6062a57 — Environment-variable access.
repo/packages/env/src/llm.ts:310 
      MOONSHOT_API_KEY: process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5c88d82ba2c0476 — Environment-variable access.
repo/packages/env/src/llm.ts:312 
      ENABLED_KIMICODINGPLAN: !!process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0ef1440b042e62e — Environment-variable access.
repo/packages/env/src/llm.ts:313 
      KIMICODINGPLAN_API_KEY: process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff97fa06dbfeb3ba — Environment-variable access.
repo/packages/env/src/llm.ts:315 
      ENABLED_BAILIANCODINGPLAN: !!process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de7595e19e39475b — Environment-variable access.
repo/packages/env/src/llm.ts:316 
      BAILIANCODINGPLAN_API_KEY: process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #452b746170cf9325 — Environment-variable access.
repo/packages/env/src/llm.ts:318 
      ENABLED_GLMCODINGPLAN: !!process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #852425665e2d7cbc — Environment-variable access.
repo/packages/env/src/llm.ts:319 
      GLMCODINGPLAN_API_KEY: process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9340ef9bed1289d8 — Environment-variable access.
repo/packages/env/src/llm.ts:321 
      ENABLED_MINIMAXCODINGPLAN: !!process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c490bd886e75032f — Environment-variable access.
repo/packages/env/src/llm.ts:322 
      MINIMAXCODINGPLAN_API_KEY: process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39b6c2c7d2e509e4 — Environment-variable access.
repo/packages/env/src/llm.ts:324 
      ENABLED_VOLCENGINECODINGPLAN: !!process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf154405717c1dee — Environment-variable access.
repo/packages/env/src/llm.ts:325 
      VOLCENGINECODINGPLAN_API_KEY: process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #463132f6a58177f3 — Environment-variable access.
repo/packages/env/src/llm.ts:327 
      ENABLED_GROQ: !!process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e01dac98433ff39b — Environment-variable access.
repo/packages/env/src/llm.ts:328 
      GROQ_API_KEY: process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f03778e8b7bab8a6 — Environment-variable access.
repo/packages/env/src/llm.ts:330 
      ENABLED_GITHUB: !!process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cb6ef515581c32e — Environment-variable access.
repo/packages/env/src/llm.ts:331 
      GITHUB_TOKEN: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d74971564112547 — Environment-variable access.
repo/packages/env/src/llm.ts:333 
      ENABLED_ZEROONE: !!process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa2b8f4e221f358d — Environment-variable access.
repo/packages/env/src/llm.ts:334 
      ZEROONE_API_KEY: process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93e6d84d8b3a50fc — Environment-variable access.
repo/packages/env/src/llm.ts:336 
      ENABLED_AWS_BEDROCK: process.env.ENABLED_AWS_BEDROCK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68204ab091e0a147 — Environment-variable access.
repo/packages/env/src/llm.ts:337 
      AWS_REGION: process.env.AWS_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #199ee94e21730033 — Environment-variable access.
repo/packages/env/src/llm.ts:338 
      AWS_ACCESS_KEY_ID: process.env.AWS_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50af8794e3655c68 — Environment-variable access.
repo/packages/env/src/llm.ts:339 
      AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e573d4d78fe388cd — Environment-variable access.
repo/packages/env/src/llm.ts:340 
      AWS_SESSION_TOKEN: process.env.AWS_SESSION_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fff278fd03976bd9 — Environment-variable access.
repo/packages/env/src/llm.ts:342 
      ENABLED_WENXIN: !!process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #688dcdde27308c71 — Environment-variable access.
repo/packages/env/src/llm.ts:343 
      WENXIN_API_KEY: process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60fbabd165ec4968 — Environment-variable access.
repo/packages/env/src/llm.ts:345 
      ENABLED_OLLAMA: process.env.ENABLED_OLLAMA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24dce2da750e24df — Environment-variable access.
repo/packages/env/src/llm.ts:346 
      ENABLED_OLLAMA_CLOUD: !!process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cec406dd5303e88 — Environment-variable access.
repo/packages/env/src/llm.ts:347 
      OLLAMA_CLOUD_API_KEY: process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc7e4ab62403994f — Environment-variable access.
repo/packages/env/src/llm.ts:349 
      ENABLED_VLLM: !!process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9e12b3ae2543e14 — Environment-variable access.
repo/packages/env/src/llm.ts:350 
      VLLM_API_KEY: process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe669a28f25f713c — Environment-variable access.
repo/packages/env/src/llm.ts:352 
      ENABLED_XINFERENCE: !!process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5cf7c69924ae8b4 — Environment-variable access.
repo/packages/env/src/llm.ts:353 
      XINFERENCE_API_KEY: process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #308ebc2ffd6ff8c4 — Environment-variable access.
repo/packages/env/src/llm.ts:355 
      ENABLED_LMSTUDIO: !!process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e9bb76033170e57 — Environment-variable access.
repo/packages/env/src/llm.ts:356 
      LMSTUDIO_API_KEY: process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7e8726763a6e974 — Environment-variable access.
repo/packages/env/src/llm.ts:358 
      ENABLED_QINIU: !!process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac6e8b61a699715b — Environment-variable access.
repo/packages/env/src/llm.ts:359 
      QINIU_API_KEY: process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b86765dcd2bf88a — Environment-variable access.
repo/packages/env/src/llm.ts:361 
      ENABLED_QWEN: !!process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5deeed6592b540ca — Environment-variable access.
repo/packages/env/src/llm.ts:362 
      QWEN_API_KEY: process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #327f0b3f80a150aa — Environment-variable access.
repo/packages/env/src/llm.ts:364 
      ENABLED_STEPFUN: !!process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9c1b66610113363 — Environment-variable access.
repo/packages/env/src/llm.ts:365 
      STEPFUN_API_KEY: process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a030aaf055684bef — Environment-variable access.
repo/packages/env/src/llm.ts:367 
      ENABLED_NOVITA: !!process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c66a7dfeff29af4a — Environment-variable access.
repo/packages/env/src/llm.ts:368 
      NOVITA_API_KEY: process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edb8a1a29bb332a1 — Environment-variable access.
repo/packages/env/src/llm.ts:370 
      ENABLED_NVIDIA: !!process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b212034bee2b810 — Environment-variable access.
repo/packages/env/src/llm.ts:371 
      NVIDIA_API_KEY: process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4292c764793be12 — Environment-variable access.
repo/packages/env/src/llm.ts:373 
      ENABLED_BAICHUAN: !!process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db400aacc2671f66 — Environment-variable access.
repo/packages/env/src/llm.ts:374 
      BAICHUAN_API_KEY: process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d1f120dc9aa3aae — Environment-variable access.
repo/packages/env/src/llm.ts:376 
      ENABLED_TAICHU: !!process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #277ddfa883804ac3 — Environment-variable access.
repo/packages/env/src/llm.ts:377 
      TAICHU_API_KEY: process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e2d9be1c45dc476 — Environment-variable access.
repo/packages/env/src/llm.ts:380 
        !!process.env.CLOUDFLARE_API_KEY && !!process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5a4c9c10b7748e2 — Environment-variable access.
repo/packages/env/src/llm.ts:381 
      CLOUDFLARE_API_KEY: process.env.CLOUDFLARE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47cab0cdd40e9f2b — Environment-variable access.
repo/packages/env/src/llm.ts:382 
      CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID: process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d586833b2a4595cc — Environment-variable access.
repo/packages/env/src/llm.ts:384 
      ENABLED_AI360: !!process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6132aeaca399459f — Environment-variable access.
repo/packages/env/src/llm.ts:385 
      AI360_API_KEY: process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #091fbc3ee3f94fcd — Environment-variable access.
repo/packages/env/src/llm.ts:387 
      ENABLED_SILICONCLOUD: !!process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5831c17296d382d — Environment-variable access.
repo/packages/env/src/llm.ts:388 
      SILICONCLOUD_API_KEY: process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2301682b51c2ac9 — Environment-variable access.
repo/packages/env/src/llm.ts:390 
      ENABLED_GITEE_AI: !!process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fc920ebb125de79 — Environment-variable access.
repo/packages/env/src/llm.ts:391 
      GITEE_AI_API_KEY: process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d30f823e35fd7ae0 — Environment-variable access.
repo/packages/env/src/llm.ts:393 
      ENABLED_UPSTAGE: !!process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5101152fb345ff85 — Environment-variable access.
repo/packages/env/src/llm.ts:394 
      UPSTAGE_API_KEY: process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eb18bf410f5f364 — Environment-variable access.
repo/packages/env/src/llm.ts:396 
      ENABLED_SPARK: !!process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e822c3dff856063 — Environment-variable access.
repo/packages/env/src/llm.ts:397 
      SPARK_API_KEY: process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29a9e9fe507eca6d — Environment-variable access.
repo/packages/env/src/llm.ts:399 
      ENABLED_AI21: !!process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5e8d9d7a2f20d80 — Environment-variable access.
repo/packages/env/src/llm.ts:400 
      AI21_API_KEY: process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a9c8998f6e239e4 — Environment-variable access.
repo/packages/env/src/llm.ts:402 
      ENABLED_HUNYUAN: !!process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43d94b7d1b104426 — Environment-variable access.
repo/packages/env/src/llm.ts:403 
      HUNYUAN_API_KEY: process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ac58db0216c57ae — Environment-variable access.
repo/packages/env/src/llm.ts:405 
      ENABLED_HUGGINGFACE: !!process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7f44e47920b1ce4 — Environment-variable access.
repo/packages/env/src/llm.ts:406 
      HUGGINGFACE_API_KEY: process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b319cafc972b2e46 — Environment-variable access.
repo/packages/env/src/llm.ts:408 
      ENABLED_SENSENOVA: !!process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9b0461f734ae819 — Environment-variable access.
repo/packages/env/src/llm.ts:409 
      SENSENOVA_API_KEY: process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dcf0871d96cf593 — Environment-variable access.
repo/packages/env/src/llm.ts:411 
      ENABLED_XAI: !!process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3c65b83300b9304 — Environment-variable access.
repo/packages/env/src/llm.ts:412 
      XAI_API_KEY: process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #435008fede7cd2b4 — Environment-variable access.
repo/packages/env/src/llm.ts:414 
      ENABLED_INTERNLM: !!process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16040690debc7c2c — Environment-variable access.
repo/packages/env/src/llm.ts:415 
      INTERNLM_API_KEY: process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a55f79613724278 — Environment-variable access.
repo/packages/env/src/llm.ts:417 
      ENABLED_HIGRESS: !!process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a48e5a340e201e54 — Environment-variable access.
repo/packages/env/src/llm.ts:418 
      HIGRESS_API_KEY: process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1f12cb626b6e39e — Environment-variable access.
repo/packages/env/src/llm.ts:420 
      ENABLED_TENCENT_CLOUD: !!process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75e5ad90dd92b5d5 — Environment-variable access.
repo/packages/env/src/llm.ts:421 
      TENCENT_CLOUD_API_KEY: process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3eee93f0d716d2c — Environment-variable access.
repo/packages/env/src/llm.ts:423 
      ENABLED_JINA: !!process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b3bf47c5fc4f140 — Environment-variable access.
repo/packages/env/src/llm.ts:424 
      JINA_API_KEY: process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0eb5463201010176 — Environment-variable access.
repo/packages/env/src/llm.ts:426 
      ENABLED_SAMBANOVA: !!process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c85c6a044350833d — Environment-variable access.
repo/packages/env/src/llm.ts:427 
      SAMBANOVA_API_KEY: process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19377f5a1aee9eae — Environment-variable access.
repo/packages/env/src/llm.ts:429 
      ENABLED_PPIO: !!process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92dc9420eced910b — Environment-variable access.
repo/packages/env/src/llm.ts:430 
      PPIO_API_KEY: process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86cbb00f64c0c6c3 — Environment-variable access.
repo/packages/env/src/llm.ts:432 
      ENABLED_SEARCH1API: !!process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f6650e8dc9cdfd5 — Environment-variable access.
repo/packages/env/src/llm.ts:433 
      SEARCH1API_API_KEY: process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27ca2708d7ec11fd — Environment-variable access.
repo/packages/env/src/llm.ts:435 
      ENABLED_COHERE: !!process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab9e19ef8b5c1164 — Environment-variable access.
repo/packages/env/src/llm.ts:436 
      COHERE_API_KEY: process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8ff92c4faf26522 — Environment-variable access.
repo/packages/env/src/llm.ts:438 
      ENABLED_INFINIAI: !!process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36736aa0698290f1 — Environment-variable access.
repo/packages/env/src/llm.ts:439 
      INFINIAI_API_KEY: process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d456bd52aa8e211e — Environment-variable access.
repo/packages/env/src/llm.ts:441 
      ENABLED_FAL: process.env.ENABLED_FAL !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b48afd0989a576b — Environment-variable access.
repo/packages/env/src/llm.ts:442 
      FAL_API_KEY: process.env.FAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1165897ed255a769 — Environment-variable access.
repo/packages/env/src/llm.ts:444 
      ENABLED_BFL: !!process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a9e9098acfaf5e2 — Environment-variable access.
repo/packages/env/src/llm.ts:445 
      BFL_API_KEY: process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94be3cae98a15b7e — Environment-variable access.
repo/packages/env/src/llm.ts:447 
      ENABLED_COMFYUI: process.env.ENABLED_COMFYUI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5350add6a726abac — Environment-variable access.
repo/packages/env/src/llm.ts:448 
      COMFYUI_BASE_URL: process.env.COMFYUI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7e7fde4cb323999 — Environment-variable access.
repo/packages/env/src/llm.ts:449 
      COMFYUI_AUTH_TYPE: process.env.COMFYUI_AUTH_TYPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0deece55a6df3fc6 — Environment-variable access.
repo/packages/env/src/llm.ts:450 
      COMFYUI_API_KEY: process.env.COMFYUI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3230a7d56e946773 — Environment-variable access.
repo/packages/env/src/llm.ts:451 
      COMFYUI_USERNAME: process.env.COMFYUI_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77bf15ee0770bbc7 — Environment-variable access.
repo/packages/env/src/llm.ts:452 
      COMFYUI_PASSWORD: process.env.COMFYUI_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #893003a267500dda — Environment-variable access.
repo/packages/env/src/llm.ts:453 
      COMFYUI_CUSTOM_HEADERS: process.env.COMFYUI_CUSTOM_HEADERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b6c938faf90d26f — Environment-variable access.
repo/packages/env/src/llm.ts:455 
      ENABLED_MODELSCOPE: !!process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58be288df10dc1a3 — Environment-variable access.
repo/packages/env/src/llm.ts:456 
      MODELSCOPE_API_KEY: process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e964a9762d88cf0a — Environment-variable access.
repo/packages/env/src/llm.ts:458 
      ENABLED_V0: !!process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2773799db5e35796 — Environment-variable access.
repo/packages/env/src/llm.ts:459 
      V0_API_KEY: process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83f173af1d28c2a7 — Environment-variable access.
repo/packages/env/src/llm.ts:461 
      ENABLED_VERCELAIGATEWAY: !!process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8077ce2fd5b0202 — Environment-variable access.
repo/packages/env/src/llm.ts:462 
      VERCELAIGATEWAY_API_KEY: process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7862b9301286e42 — Environment-variable access.
repo/packages/env/src/llm.ts:464 
      ENABLED_AI302: !!process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c48d6e73bf10aab — Environment-variable access.
repo/packages/env/src/llm.ts:465 
      AI302_API_KEY: process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bc4279120cfbfb2 — Environment-variable access.
repo/packages/env/src/llm.ts:467 
      ENABLED_AKASHCHAT: !!process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62cc5b1adbf69aae — Environment-variable access.
repo/packages/env/src/llm.ts:468 
      AKASHCHAT_API_KEY: process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f4c5e77a18c5a23 — Environment-variable access.
repo/packages/env/src/llm.ts:470 
      ENABLED_COMETAPI: !!process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26f1c5b1276ed9fb — Environment-variable access.
repo/packages/env/src/llm.ts:471 
      COMETAPI_KEY: process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49f1ab90fae86d6b — Environment-variable access.
repo/packages/env/src/llm.ts:473 
      ENABLED_AIHUBMIX: !!process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #530c9f2991b110ca — Environment-variable access.
repo/packages/env/src/llm.ts:474 
      AIHUBMIX_API_KEY: process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8f7a65846bd81bf — Environment-variable access.
repo/packages/env/src/llm.ts:475 
      AIHUBMIX_PROXY_URL: process.env.AIHUBMIX_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebee77b14e4c39b8 — Environment-variable access.
repo/packages/env/src/llm.ts:477 
      ENABLED_NEWAPI: !!process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f804ff67a892cc71 — Environment-variable access.
repo/packages/env/src/llm.ts:478 
      NEWAPI_API_KEY: process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0cfc239218a2549 — Environment-variable access.
repo/packages/env/src/llm.ts:479 
      NEWAPI_PROXY_URL: process.env.NEWAPI_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae5be60402606240 — Environment-variable access.
repo/packages/env/src/llm.ts:481 
      ENABLED_NEBIUS: !!process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #999f2b31ad0d0347 — Environment-variable access.
repo/packages/env/src/llm.ts:482 
      NEBIUS_API_KEY: process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3ab85831032e2e2 — Environment-variable access.
repo/packages/env/src/llm.ts:484 
      ENABLED_CEREBRAS: !!process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb2127ab8ceb4a4f — Environment-variable access.
repo/packages/env/src/llm.ts:485 
      CEREBRAS_API_KEY: process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87141d361bcde536 — Environment-variable access.
repo/packages/env/src/llm.ts:487 
      ENABLED_ZENMUX: !!process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fca667f50e7f113 — Environment-variable access.
repo/packages/env/src/llm.ts:488 
      ZENMUX_API_KEY: process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2de5a33b9d52536 — Environment-variable access.
repo/packages/env/src/llm.ts:490 
      ENABLED_STRAICO: !!process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6d10318a6c1e4a8 — Environment-variable access.
repo/packages/env/src/llm.ts:491 
      STRAICO_API_KEY: process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #777be07deb981880 — Environment-variable access.
repo/packages/env/src/llm.ts:493 
      ENABLED_LOBEHUB: !!process.env.ENABLED_LOBEHUB,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83a8d7bb560d8004 — Environment-variable access.
repo/packages/env/src/llm.ts:495 
      ENABLED_OPENCODEZEN: !!process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64551283f76e2863 — Environment-variable access.
repo/packages/env/src/llm.ts:496 
      OPENCODEZEN_API_KEY: process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e90c3781db83a06b — Environment-variable access.
repo/packages/env/src/llm.ts:498 
      ENABLED_OPENCODECODINGPLAN: !!process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de1e448b2c6b786a — Environment-variable access.
repo/packages/env/src/llm.ts:499 
      OPENCODECODINGPLAN_API_KEY: process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb2692acb2f016a5 — Environment-variable access.
repo/packages/env/src/llm.ts:501 
      ENABLED_XIAOMIMIMO: !!process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0711272a41bf32b — Environment-variable access.
repo/packages/env/src/llm.ts:502 
      XIAOMIMIMO_API_KEY: process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #688e6686619a6a0a — Environment-variable access.
repo/packages/env/src/llm.ts:504 
      ENABLED_LONGCAT: !!process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57dcd2fa2db84b20 — Environment-variable access.
repo/packages/env/src/llm.ts:505 
      LONGCAT_API_KEY: process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67c53fc058de4b5a — Environment-variable access.
repo/packages/env/src/llm.ts:507 
      ENABLED_STREAMLAKE: !!process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa0f994e4b62b2f9 — Environment-variable access.
repo/packages/env/src/llm.ts:508 
      STREAMLAKE_API_KEY: process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b8f9f143471135b — Environment-variable access.
repo/packages/env/src/llm.ts:510 
      ENABLED_ANTGROUP: !!process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90ecd3f156534cdb — Environment-variable access.
repo/packages/env/src/llm.ts:511 
      ANTGROUP_API_KEY: process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #197dc1cfd6ab9f13 — Environment-variable access.
repo/packages/env/src/python.ts:12 
      NEXT_PUBLIC_PYODIDE_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57f6e4fe53bcc621 — Environment-variable access.
repo/packages/env/src/python.ts:13 
      NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71e5b60e02fb64cf — Environment-variable access.
repo/packages/env/src/redis.ts:23 
      REDIS_DATABASE: parseNumber(process.env.REDIS_DATABASE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50c1cc7e51033758 — Environment-variable access.
repo/packages/env/src/redis.ts:24 
      REDIS_PASSWORD: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93009aa0f162a6d1 — Environment-variable access.
repo/packages/env/src/redis.ts:25 
      REDIS_PREFIX: process.env.REDIS_PREFIX || 'lobechat',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c926cbf251a760a — Environment-variable access.
repo/packages/env/src/redis.ts:26 
      REDIS_TLS: parseRedisTls(process.env.REDIS_TLS),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16d8c4e2fb31a8e9 — Environment-variable access.
repo/packages/env/src/redis.ts:27 
      REDIS_URL: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f2a803b55697990 — Environment-variable access.
repo/packages/env/src/redis.ts:28 
      REDIS_USERNAME: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4f84076fd6d4386 — Environment-variable access.
repo/packages/env/src/sandbox.ts:9 
      ONLYBOXES_BASE_URL: process.env.ONLYBOXES_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5bf7757509b9aa7 — Environment-variable access.
repo/packages/env/src/sandbox.ts:10 
      ONLYBOXES_JIT_ISSUER: process.env.ONLYBOXES_JIT_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7d95442617051fc — Environment-variable access.
repo/packages/env/src/sandbox.ts:11 
      ONLYBOXES_JIT_SIGNING_KEY: process.env.ONLYBOXES_JIT_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #252fce608ab7443d — Environment-variable access.
repo/packages/env/src/sandbox.ts:12 
      ONLYBOXES_JIT_TTL_SEC: process.env.ONLYBOXES_JIT_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b72d58d296d98b5 — Environment-variable access.
repo/packages/env/src/sandbox.ts:13 
      ONLYBOXES_LEASE_TTL_SEC: process.env.ONLYBOXES_LEASE_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55448fe5bf3acfd5 — Environment-variable access.
repo/packages/env/src/sandbox.ts:14 
      SANDBOX_PROVIDER: process.env.SANDBOX_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aff393290986a019 — Environment-variable access.
repo/packages/env/src/tools.ts:13 
      CRAWL_CONCURRENCY: process.env.CRAWL_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0cfcfcb54f95b8a — Environment-variable access.
repo/packages/env/src/tools.ts:14 
      CRAWLER_RETRY: process.env.CRAWLER_RETRY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d109a2967cb6c8f — Environment-variable access.
repo/packages/env/src/tools.ts:15 
      CRAWLER_IMPLS: process.env.CRAWLER_IMPLS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81ecd932052ae8db — Environment-variable access.
repo/packages/env/src/tools.ts:16 
      JINA_USE_CN_DOMAINS: process.env.JINA_USE_CN_DOMAINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bda0e40c6bd5623 — Environment-variable access.
repo/packages/env/src/tools.ts:17 
      SEARCH_PROVIDERS: process.env.SEARCH_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9156e4a399916f87 — Environment-variable access.
repo/packages/env/src/tools.ts:18 
      SEARXNG_URL: process.env.SEARXNG_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b32b18227ad9159e — Environment-variable access.
repo/packages/env/src/tools.ts:19 
      VISUAL_UNDERSTANDING_MODEL: process.env.VISUAL_UNDERSTANDING_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #171064d2141c96fc — Environment-variable access.
repo/packages/env/src/tools.ts:20 
      VISUAL_UNDERSTANDING_PROVIDER: process.env.VISUAL_UNDERSTANDING_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/eval-dataset-parser

npm first-party
expand_more 6 low-confidence finding(s)
low env_fs test-only #a6d14ef9113dd0df — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:11 
  const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14fc7e3ec7a83010 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:29 
  const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7d1938085e07ce2e — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:50 
  const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a38dd36dd9682215 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:68 
    const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4c2818a4ce36b351 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:75 
    const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88b85c6500970b19 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:81 
    const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/file-loaders

npm first-party
expand_more 7 low-confidence finding(s)
low env_fs production #7fac27e9bd1255a8 — Filesystem access.
repo/packages/file-loaders/src/loadFile.test.ts:49 
      await writeFile(file, Buffer.from([80, 75, 3, 4, 0, 0]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bf77e170c5757bd — Filesystem access.
repo/packages/file-loaders/src/loaders/docx/index.ts:19 
      const buffer = await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #065208184939986c — Filesystem access.
repo/packages/file-loaders/src/loaders/excel/index.ts:63 
      const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f246db66dfbab4c7 — Filesystem access.
repo/packages/file-loaders/src/loaders/pdf/index.ts:27 
    const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47b59d8f821a0f38 — Filesystem access.
repo/packages/file-loaders/src/loaders/text/index.ts:16 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a6c863074525888 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:87 
    await writeFile(filePath, 'a'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e15d5c24bbe9183 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:95 
    await writeFile(
      filePath,
      Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00, 0x00, 0x0d]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/llm-generation-tracing

npm first-party
expand_more 8 low-confidence finding(s)
low env_fs production #93a625e6a5c54e19 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:44 
    const raw = await fs.readFile(path.join(dir, jsonFiles[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #962ec8ed4490ebf5 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:65 
    const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ec765b98bfbc44f — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:36 
    await fs.writeFile(filePath, JSON.stringify(record, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52dfbf22251e2736 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:47 
      const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5597d269085ab65 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:63 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f1e9518f20e473d — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:91 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e11d83e28c9c246 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:106 
      const content = await fs.readFile(real, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6eae3e445ed46b5 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:115 
      const content = await fs.readFile(files[0].fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/local-file-shell

npm first-party
expand_more 78 low-confidence finding(s)
low env_fs production #8353592166013532 — Filesystem access.
repo/packages/local-file-shell/src/contentSearch/base.ts:185 
        const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ac004ae862ad089b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:37 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #86597b1cf92c7a92 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:51 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #660a2d150396d819 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:62 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #604347a29731ff1a — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:81 
      await writeFile(filePath, 'const x = 1;');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3b88d7e3ff9505e4 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:89 
      await writeFile(filePath, 'all: build');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #86cdf8fe5bec79bb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:97 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #221d051929d86bd9 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:106 
      await writeFile(filePath, 'A'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b2ea861a28521e88 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:119 
        await writeFile(filePath, 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa5c9d25cb1212c8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:129 
      await writeFile(filePath, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #13a7969977b9c7ff — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:138 
      await writeFile(filePath, 'A'.repeat(27_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69f9b76c65065ba3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:152 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10252bf4f6055bd0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:163 
      await writeFile(filePath, 'a'.repeat(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f9a8eb3a642449b3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:173 
      await writeFile(filePath, "module.exports = { hello: 'world' };\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4f7156ce965bade1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:189 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1aa349ff5c0c8cc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:197 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('nested');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a08c818906ba934d — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:221 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a19f25058fbe70e8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:231 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #346bde74a5266fcb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:239 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #994c88d21421f0a0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:250 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhi again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4b63098452b72d8c — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:255 
      await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5165367610bf6e33 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:269 
      await writeFile(filePath, 'price is $10.00 and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6e1ed306ab8da610 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:279 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('price is $XX.XX and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ab2e11dc22bda0cc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:295 
      await writeFile(filePath, 'line1\nline2\nline3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #20056e5acedd7daa — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:310 
      await writeFile(filePath, 'line1\r\nline2\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aa621e3c787d0282 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:322 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('lineA\r\nlineB\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ddbac7eb22f73918 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:327 
      await writeFile(filePath, 'a\r\nb\r\na\r\nb\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4ea6c2eabc73773 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:338 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('x\r\ny\r\nx\r\ny\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #079a6646d587c413 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:346 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b57356d45e244372 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:347 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d7b8f19446115859 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:361 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8702dac6275b7db7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:362 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41f8520c4258ab37 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:363 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #723c7504ed071ffc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:376 
      await writeFile(path.join(tmpDir, 'small.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #152bbec609caf6d5 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:377 
      await writeFile(path.join(tmpDir, 'large.txt'), 'x'.repeat(1000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #81856738f161e0bc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:389 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a825b2e9928e8c86 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:390 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ac3c32fdb2116113 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:391 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e347be74892d6035 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:431 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0104724b77e9180 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:445 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1dd61b472da9bf1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:471 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eeee6e0fb8d4ef04 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:487 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bbc34f727fa3afd2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:512 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c1d5e04a55ab9e7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:531 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d2da865ee1fb7d8e — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:532 
      await writeFile(path.join(tmpDir, 'b.ts'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fd684b4e2bdf4d87 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:533 
      await writeFile(path.join(tmpDir, 'c.js'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #983f85ca87431e0f — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:544 
      await writeFile(path.join(tmpDir, 'node_modules', 'pkg', 'index.ts'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b663ba474f27d86 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:545 
      await writeFile(path.join(tmpDir, 'src.ts'), 'y');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3ed6a50251914684 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:554 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'ci.yml'), 'name: ci');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #352373fa688fb1f1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:555 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'release.yaml'), 'name: release');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9cf71d9288abbd1b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:569 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0151527161026068 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:577 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8d2aadb99c3df6a2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:589 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6bd3afe5c6fa4c50 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:599 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #93defda33f902433 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:607 
      await writeFile(path.join(tmpDir, 'empty.txt'), 'nothing here');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f124ac884edbe052 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:641 
      await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9279a0d919763153 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:642 
      await writeFile(path.join(tmpDir, 'config.yaml'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c5ce2fa10abf8f3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:643 
      await writeFile(path.join(tmpDir, 'readme.md'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #813fef9d68c66249 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:653 
        await writeFile(path.join(tmpDir, `file${i}.log`), `content ${i}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef6c2b1353b0a24e — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:675 
      await writeFile(path.join(tmpDir, '.env'), 'A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c4fec0c834bfd426 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:676 
      await writeFile(path.join(tmpDir, '.envrc'), 'export A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5a4fd7d8864253f5 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:677 
      await writeFile(path.join(tmpDir, 'env.txt'), 'unrelated');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f5b97130bf26904 — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:17 
    const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5de5d9ff4a1e5f01 — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:61 
    await writeFile(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44084d3e673a6a59 — Filesystem access.
repo/packages/local-file-shell/src/file/search.ts:42 
          const content = await readFile(file.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #408e07558fd00549 — Filesystem access.
repo/packages/local-file-shell/src/file/write.ts:20 
    await writeFile(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #612cab070983b040 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:33 
  await writeFile(path.join(dir, 'a.txt'), 'hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e60bc642476ef7eb — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:104 
    await writeFile(path.join(linked, 'new.txt'), 'new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #90dc987f528fe26d — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:242 
    await writeFile(path.join(repo, 'a.txt'), 'hello\nworld\n'); // modify tracked

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1ec87f33e391416 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:243 
    await writeFile(path.join(repo, 'new.txt'), 'fresh\n'); // untracked add

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #512548b5ac3fd5a5 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:271 
    await writeFile(path.join(repo, 'a.txt'), 'tampered\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #254452b50b03745d — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:273 
    expect(await readFile(path.join(repo, 'a.txt'), 'utf8')).toBe('hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #52c08dbd478d6664 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:277 
    await writeFile(path.join(repo, 'junk.txt'), 'x\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13d123cbc4d3a0f5 — Filesystem access.
repo/packages/local-file-shell/src/git/info.ts:126 
    const head = (await readFile(`${gitDir}/HEAD`, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09d72bddde7d0681 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:12 
    const content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b4014dd95fdca21 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:40 
    const commondir = (await readFile(path.join(gitDir, 'commondir'), 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fdc0b4eb1535f83 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:62 
    const config = await readFile(path.join(commonDir, 'config'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2277e6d9b3f5e722 — Filesystem access.
repo/packages/local-file-shell/src/git/workingTree.ts:238 
    buf = await readFile(absolute);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/memory-user-memory

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs test-only #673747260ee1f015 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 
const baseUrl = process.env.MEMORY_USER_MEMORY_LOBEHUB_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f63abc65434a0e02 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:8 
const benchmarkLoCoMoFile = process.env.MEMORY_USER_MEMORY_BENCHMARKS_LOCOMO_DATASETS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6ba3ecb7d280a5f9 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:9 
const webhookExtraHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #cac9e922b046f6f2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 · flow /tmp/closeopen-yp75nq7n/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 → /tmp/closeopen-yp75nq7n/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 
  const res = await fetch(new URL(path, baseUrl).toString(), {
    body: JSON.stringify(body),
    headers: {
      'Content-Type': 'application/json',
      ...webhookHeaders,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #1cde591331fab1eb — Filesystem access.
repo/packages/memory-user-memory/src/converters/locomo.ts:176 
  const raw = readFileSync(absPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-bank

npm first-party
expand_more 1 low-confidence finding(s)
low env_fs production #b486914121b2aab2 — Filesystem access.
repo/packages/model-bank/src/exports.test.ts:12 
  const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/observability-otel

npm first-party
expand_more 11 low-confidence finding(s)
low env_fs production #56fb98e20e4d32bd — Environment-variable access.
repo/packages/observability-otel/src/node.ts:20 
    'env': process.env.VERCEL_ENV || process.env.NEXT_PUBLIC_VERCEL_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7ea976d4d6f0dd8 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:23 
      process.env.VERCEL_BRANCH_URL || process.env.NEXT_PUBLIC_VERCEL_BRANCH_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8780b5fa272ed48 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:24 
    'vercel.deployment_id': process.env.VERCEL_DEPLOYMENT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0c0f4263872791f — Environment-variable access.
repo/packages/observability-otel/src/node.ts:25 
    'vercel.host': process.env.VERCEL_URL || process.env.NEXT_PUBLIC_VERCEL_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76e9f7d7b67904ea — Environment-variable access.
repo/packages/observability-otel/src/node.ts:26 
    'vercel.project_id': process.env.VERCEL_PROJECT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bc57d2dd3afcc3e — Environment-variable access.
repo/packages/observability-otel/src/node.ts:27 
    'vercel.region': process.env.VERCEL_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25c6b13d23e40b9b — Environment-variable access.
repo/packages/observability-otel/src/node.ts:28 
    'vercel.runtime': process.env.NEXT_RUNTIME || 'nodejs',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e222839251ba7588 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:30 
      process.env.VERCEL_GIT_COMMIT_SHA || process.env.NEXT_PUBLIC_VERCEL_GIT_COMMIT_SHA,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24a74570ee3310da — Environment-variable access.
repo/packages/observability-otel/src/node.ts:32 
    'service.version': process.env.VERCEL_DEPLOYMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a40a928c401ba25 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:39 
    'node.ci': process.env.CI ? true : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e78cf538008bd60a — Environment-variable access.
repo/packages/observability-otel/src/node.ts:40 
    'node.env': process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/openapi

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs production #afb38c86bc89c3c9 — Filesystem access.
repo/packages/openapi/src/helpers/file.ts:118 
          const bin = fs.readFileSync((f as any).filepath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90a915118567a352 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:54 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab828278ee8ec430 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:55 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f2edd4742ab3d15 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:57 
    c.set('userId', process.env.MOCK_DEV_USER_ID || 'DEV_USER');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #742de3ebfe0dc923 — Environment-variable access.
repo/packages/openapi/src/middleware/permission-check.ts:46 
    if (options.skipInDev && process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/python-interpreter

npm first-party
expand_more 4 low-confidence finding(s)
low env_fs production #a862069c5c8afa47 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:77 
        this.pyodide.FS.writeFile(file.name, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0af15b02be68f223 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:79 
        this.pyodide.FS.writeFile(`/mnt/data/${file.name}`, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0f2a185fcc17588 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:95 
      const content = (this.pyodide.FS as any).readFile(filePath, { encoding: 'binary' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #200964c6790e8801 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:175 
      this.pyodide.FS.writeFile(`/usr/share/fonts/truetype/${filename}`, new Uint8Array(buffer));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/ssrf-safe-fetch

npm first-party
expand_more 10 low-confidence finding(s)
low env_fs production #ff8ce6996a69eccd — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:35 
    delete process.env.SSRF_ALLOW_IP_ADDRESS_LIST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cc913db4b2723c8 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:36 
    delete process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #967b1a7bea7a2800 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:106 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7895694dc46af439 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:118 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1,192.168.1.100';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #123e7b54bbf71843 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:167 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae8d3c837f2f5bb5 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:177 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = 'invalid-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c12b0d73331f5b3 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:461 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c49adcf5f52b80a — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:462 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a20a2dd359fd7a2a — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:72 
    const envAllowPrivate = process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ef8057f5bd6b5c9 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:78 
        process.env.SSRF_ALLOW_IP_ADDRESS_LIST?.split(',').filter(Boolean) ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/trpc

npm first-party
expand_more 4 low-confidence finding(s)
low env_fs production #38d30e1b9089a64f — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:122 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #578897ae88aaf707 — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:124 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c137e2f1928b0869 — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:126 
      userId: process.env.MOCK_DEV_USER_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60cc44facf3fc45a — Environment-variable access.
repo/packages/trpc/src/middleware/openTelemetry.test.ts:70 
    process.env.ENABLE_TELEMETRY = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/utils

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs production #e25e39708a331a92 — Environment-variable access.
repo/packages/utils/src/env.ts:1 
export const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #335d2411ca214cae — Environment-variable access.
repo/packages/utils/src/jina.ts:7 
  process.env.JINA_USE_CN_DOMAINS?.trim().toLowerCase() === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cf7805fe610534a — Environment-variable access.
repo/packages/utils/src/server/apiKeyHash.ts:3 
const getApiKeyHashSecret = () => process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@fal-ai/client

npm dependency
high pii_flow dependency Excluded from app score #62235232d12432fc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/npm/@[email protected]/src/request.js:52 · flow /tmp/closeopen-yp75nq7n/pkgs/npm/@[email protected]/src/request.js:29 → /tmp/closeopen-yp75nq7n/pkgs/npm/@[email protected]/src/request.js:52 
            const response = yield fetch(url, Object.assign(Object.assign(Object.assign(Object.assign({}, requestInit), { method, headers: Object.assign(Object.assign({}, requestHeaders), ((_c = requestInit.headers) !== null && _c !== void 0 ? _c : {})) }), (!isCloudflareWorkers && { mode: "cors" })), { signal: options.signal, body: method.toLowerCase() !== "get" && input
                    ? JSON.stringify(input)
                    : undefined }));

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #1e4eedabcec2a59a — Environment-variable access.
pkgs/npm/@[email protected]/src/config.js:26 
        (typeof process.env.FAL_KEY !== "undefined" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #832e13d9040adf15 — Environment-variable access.
pkgs/npm/@[email protected]/src/config.js:27 
            (typeof process.env.FAL_KEY_ID !== "undefined" &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f934b0368396eb4c — Environment-variable access.
pkgs/npm/@[email protected]/src/config.js:28 
                typeof process.env.FAL_KEY_SECRET !== "undefined")));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35c163ab39e92a21 — Environment-variable access.
pkgs/npm/@[email protected]/src/config.js:34 
    if (typeof process.env.FAL_KEY !== "undefined") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78bd06249d03e732 — Environment-variable access.
pkgs/npm/@[email protected]/src/config.js:35 
        return process.env.FAL_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f298ac5dcfb5b86e — Environment-variable access.
pkgs/npm/@[email protected]/src/config.js:37 
    return process.env.FAL_KEY_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #796b647c39b0b345 — Environment-variable access.
pkgs/npm/@[email protected]/src/config.js:38 
        ? `${process.env.FAL_KEY_ID}:${process.env.FAL_KEY_SECRET}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ant-design/icons

npm dependency
expand_more 1700 low-confidence finding(s)
low env_fs dependency Excluded from app score #3a2f14c0d4ef529d — Environment-variable access.
pkgs/npm/@[email protected]/es/components/AntdIcon.js:65 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b83205faa974283 — Environment-variable access.
pkgs/npm/@[email protected]/es/components/AntdIconLight.js:51 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30e1ea7d157773aa — Environment-variable access.
pkgs/npm/@[email protected]/es/components/Icon.js:79 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d40cd9899a7f3788 — Environment-variable access.
pkgs/npm/@[email protected]/es/cssUtils.js:150 
  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eeccac05a5f784ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0411d1442f26213d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c36c57f245a36bb3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bfba31c35c9d79f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AimOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #471e63eddf58df9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8484e5e6f80fba62 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5b26e4ac6fa04ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f07dbff2e22a59e3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlibabaOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fdb41507fe07b54 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignCenterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0414c2fdad6d2cfb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbf1257c78b52df2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d77505aa091315bb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f455d5c1e5bff254 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28ef8389aac321fa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60fa5e91f1422d8c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipaySquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98690fb99a23a58f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliwangwangFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc62e804e2eeb99f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliwangwangOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdcf2d736c36e84f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliyunOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0e0b21a0ed0a013 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80e809c20bb11243 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f0adffe5718f9c7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75e179e172e7f271 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AndroidFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9c7cdb353fe859b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AndroidOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bedc3d1d751a435 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AntCloudOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8fef05e18a874ea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AntDesignOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70761489df81aa73 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AnthropicFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #baaefee09f59489e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApartmentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51ad59c964f4670a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66de2503a0155f39 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8df50cb43cc24913 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b75b8e2e20f52df — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3ac33ce867eabc3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8340a82932ee65a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3ccb9e552eb986e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a6241eb83b9070a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b3d0b70e7ab5b9d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85503b444bc24a11 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AreaChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a754ddab57f8acf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowDownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dab1f4a7a4f3464 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2feee19580e09112 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23dd2f68b8b72bf8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowUpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21a49f6914fe5365 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowsAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8af45a2aa0921a0e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac012e87e0b74879 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioMutedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #251bcc37530ce5ad — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1e6b517feee9635 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75ca2586ec6a7ec9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AuditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc96bf26e1b0836a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76d4e1bdc03e9bb7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38debfb86f42d0ce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BaiduOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b480dea4155a4931 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #651f386adadc6843 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d47cd6fbb9f5032 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c57c15cf1986a00f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f433a88e958d8b4c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarcodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dee9ad4c55edb83 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #157034c49241ae1d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5443a40b2f969dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ed5f162d9b65ac9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #def8883fa607d2a0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66c122c2aa287c52 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8a095dd6ff46792 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cc359d4f50f600a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a767d18dc6267f7e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BgColorsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #358460c975746165 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BilibiliFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e738869e45c35374 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BilibiliOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0446e1ecdccbcda — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BlockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13c5f5aeba7c74d6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8bc40ba1dfe1ba3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ec8357931a91d2e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90a3564679ae28a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42be4a5a6de917cb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderBottomOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c466509dff3834d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderHorizontalOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa26b71bf6c1b5b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderInnerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a170afd235f2d325 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d298eadf61afac18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderOuterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f24264eed0809cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #652f05f793f96c83 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca4ed44852dd349c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f97377ae302940c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderVerticleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a7a5a19402f0956 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderlessTableOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b63b900a621b653 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fd0b33a08e05481 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #885db1566b3e642c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf77a46aa37f1432 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BranchesOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59fb869ae795a428 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c66dc569369a30ad — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #123017c48309d9a7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #021e0967aaa818b4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d055c789c7b4d1d5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d98d0be37cd7fbce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb190981d455daff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fffe0dc6294cd24 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63d9c8adb51af3e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #505fffa718116250 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98c46d3e4ef4e1bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8799b18cdb7b3536 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5df6293dc576072 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0967b753a3cdbe9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34842d0995a9861e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e77ebe0f2473acb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc1cfbf0e74fa704 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b51b6accc994ca9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82f4624871129182 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b92c45f201175c70 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06be7e926fa7206e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82a4740e2d818137 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretDownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1714d7796b4f910 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretDownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5d3c1714f20be53 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretLeftFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b586559e35d05e4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3872f33afeca1757 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretRightFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a11e14ce5771609 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2e124d7d3097f86 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretUpFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #837af1d43a6ddacf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretUpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #884d818ed2fac7fc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e30b80a91a8e69b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62bf2f02aa5d7ccf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aae5b6694f3ef323 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a5a5c3f6c0e3c41 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd1b408bdd97ffc9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4a467d4ecd38d16 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f7b98d45b63fb56 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c8803d7d200d686 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25537c6c6124af87 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #074eda996b0a4ac8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ChromeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23dd28537f72c971 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ChromeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23ecf0fa6bc685b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #218f4b60e8284502 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4c5a46c0b54002d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74f42e0cfac769fd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ce90e2495c2bee2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #465b489da7ecb1f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClaudeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #362e98dca7f9ed44 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClearOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ede4483bd367aabc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #299f797994a04560 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e75a7795e929bfce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24058a01e7d440e4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3d7c03123dcd6c5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec068d7657205c7b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9099cd5ea7072217 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd52744c95e1c3da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6829897791ec229 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cbb94ac2a3eea51 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c47e42513a571a01 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudDownloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c853a9dc7a1a970d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7699d2cb374f22b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c38361971f9ac81 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudServerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a16cf858a3ae4ad — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudSyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5022cd525e05bd7a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #566bcfd08c1e2a4b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudUploadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b589712796488f45 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClusterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f0910b5cc9dd58a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61871dcc048bab81 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac71092ffaa30742 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89901fd1eeba0344 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94afff77b59bd556 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #604be48d9fac83af — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bafbaa5320c457e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d600c1b926d3d29 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da0c4ad06c559d28 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b19e42b8060fc8d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #830e3b7e69a4c3fa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CoffeeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c95ab3258a72ac0d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ColumnHeightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a1d50d10aa8552b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ColumnWidthOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d72a0bd92c799a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CommentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cafae43e19e6808 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a03e0e5214d74983 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa6b7588403d275f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eecb3758430be319 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompressOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f759f2cdafaed31 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ConsoleSqlOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95880216f78e1810 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a459662116c1a460 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #983bd09c491cd9c5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1aaab0271fc21f9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a55f6c8e363114fc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #493cf9ce66ae14b3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edcfe6e2406e823d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #530d75d9d95ad22a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cacc12ab85601e2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c1af70861d4e7dc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99e4bcc719f33924 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46e60aae91a75b1c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1b2079ab2224201 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0650aef176d4edb7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec84b84b235c4634 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ab3b4a15fac1dc8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4b28e208625ad43 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e05e7b21457f487f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #060ca90423534c12 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e38d3f2ba9062cb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #765a8a90913013c2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce08d4ea7572ad4e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87aee0565c2c2a6b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1622b628cd670b46 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #945d0f7f43cca6cb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bccc68b922acf3db — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c68c46761215385 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a547ee11bdd9ce3e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a72dc053abad15b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80361bcf1a772400 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75b7c1e069ff7599 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3e53c6a2309252d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5ff6d4096b9bf5b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8da1aef233343ecf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeepSeekFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84092bbae1318fe8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteColumnOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9056a1d53909da38 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2059c2fef9bab38e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daeda02cd134d995 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteRowOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fc556cb2b1361b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #289b3c9806e3b635 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeliveredProcedureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bea5a2ec3f9bcad — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeploymentUnitOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fccc283e10029cab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DesktopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf91b332384827ce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5a16cc31962ed43 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59fbbd63be8188d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f59f5b8bf3a3d44a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingdingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b80a37db1526ca0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2815c5a0e7832211 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72efeced528ce458 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f693f5602954c80d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DisconnectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aec4c2f6bfb6347c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiscordFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bd7bfab77c9d9bd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiscordOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9207902a3434ee90 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdc9b994fce42d43 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ce7ead294196256 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #810d03ab8a3edb48 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DockerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a28463eadbe3a48 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97c21fec4267aa34 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1433e2fb19362874 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #387cf6da1ab268e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3e2c30a201e6eff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5260a254b88d76cf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DotChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd189dd49ae0016a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DotNetOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #818aab87af799dfc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DoubleLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f61613b564656272 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DoubleRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33c2b4416884398e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #670f361e5e396173 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #074ae51402615d88 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a97559ce39dfb8e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff70e948e394ac3c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab4c100e03061916 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce3a9ff72a582764 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d094c400c3ab383 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4d81007cfafe58e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DragOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce4892df8c72cd80 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4186794dfffe01e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b0d17c7d335e710 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09bc796556b3d4a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaf82b06ec011733 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fef1191d1590570 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a7ccb6a573dae81 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4d089fb335f79a8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97ca500a0f72a761 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51c0d1ce3d31ac0b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #172fcd26f8a506c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ElevenLabsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b17b15ced36bf156 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EllipsisOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2b4b52863274029 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #456a4f9fecdcd385 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #770233d90a68e665 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38b2114fc06781b7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a349d8a576fca35 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22fc5c4bfbc869ff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab2a9807de86f086 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a24ba2b83bf82fa3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65d906f22b097ad6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9c0a8ede2fc9fff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExceptionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba88b0318190fe25 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18de6e14d4f80dbd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96cfc8f64aa8bb4b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fd63f6744e495f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d8760b6f58b3ea4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExpandAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c5438f446bc31f5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExpandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75170b4bdb8c5a76 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa2403c75813b9b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f056f626e1a18107 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6377ce5980e74f3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExportOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bf3bd4f64f056cc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1aabee87a2c16dc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d51ee1ab5755939 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #031627f45dba4f32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbebb3bd52c56b23 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #658515edaa1c43da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7afa1262f60da0e3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FacebookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c224f9f342ffbbb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FacebookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5425c529b8ccad8c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FallOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ef8f2318057866a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastBackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa1ab2edd2abcaa5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastBackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82b431a1139686f4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce46987accde9623 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee25c3f98f279be6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldBinaryOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #688a9cfe1dc66597 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldNumberOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d89b904fc2e99870 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldStringOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a808f6aac00ff5f5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldTimeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e908737035a19d56 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aabf064b844f6680 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #641e17eefe08d422 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #476d16c7ccee8a43 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileDoneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91ad93b1359f914e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dcd6af0dc7204ea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbc2bc1c44d28762 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1acf36d98fa121e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6db087d65d5a3d04 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7af917651fb8052 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b891093b6b73676a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa1bbbeb1c3c510e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileGifOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0788ceeb5f3e968a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b2bb3579042a039 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c3881c12c6c1cfd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58d9386333b6848f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileJpgOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fccd742abd079b5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f2d3e78308d3c21 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ac4cc635664f61 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acedfc395ac6f9ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d095eda2f4a976f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34873cc4aa562f7e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #939418aa43eb8003 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e3c1ffd354100be — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a315fc02b8b551b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30ef42ca30abd0e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23e9628135b4fc51 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileProtectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b7479baa75c7d60 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileSearchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7d350af48e4ff88 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileSyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0ede7dac7bd82c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e39701379a096c25 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #701940718c720b4e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a26e60a2f6e44e7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b172029865302342 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #affeb388ff9a3628 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3900aca73698e2ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e155208dfdcba02 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a2ef80b284b0310 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a60507105e3f15b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f90faa38e76fc89b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d1ee05b6878f896 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #858f7fbc8541d274 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f1534f12db8dafe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #183f851b90b535f8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ee2cc09b55f34aa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f890de5b339f067a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6b46fa8797b58f2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df530a6c3221443e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1543a4893efe951 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3713a50ea281933 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f67b49e0cd5e9f3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed75a3e1d72fe326 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #589a0996de180eab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccd7a450b1e8c03b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65f5696c3ac9159e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6f4a39be05c64b9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e870063527ea8849 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3478eb21dc274d08 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba0d8f304b444a17 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb5a011d93c35b7c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35385f4dba1012b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderViewOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e13090a9f3a41383 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FontColorsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #760acced710bdd64 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FontSizeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #139f69c261e3d556 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35b025439530bd72 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53fbfe50de402128 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormatPainterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecb98f010627345b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormatPainterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ced17d319e82a7d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d886c976cf3198f1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d08f6bdda7a4638a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a79788d24bbdaa5f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17192324e7289c4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a228ae6f4ab7b59 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FullscreenExitOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73dfcfa07141ab3b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FullscreenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #353ff97c311ee159 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunctionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d065ecc812a69b1b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #099e73f0878b216f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85f60c68faff7094 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundProjectionScreenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c487d2d9583c7dbc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #361369723d2968cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundViewOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d99de87565741af8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bfb1cb622685b94 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45598e6d52936cda — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94577a63857fd9d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GatewayOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73da5d46b4ab2f1d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GeminiFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #721c6443d19e39eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GifOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f68f4fb864769ff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6337f4418dd955f3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92540d0a0164fc6b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ea59830bb96b756 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GithubFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #516f946821de0930 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GithubOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #554009ee0a90f256 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GitlabFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c9ce59957d42756 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GitlabOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c15b69f68628081 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GlobalOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2af6a6d053dc7398 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ea4788275053be5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c13fe7a65cd4a5e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83ef838af27594cf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1d69dac7491ff3f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd77b83c96aabe6d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2405d37199f689ff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ddd0cd650a0bc63 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c595f793d939be50 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b793ecd6398d9ee3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a3923d381cd6f33 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GroupOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a0c2c9559d2aacd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HarmonyOSOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a966dd66c60d0d19 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36f662796eb9ee3e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28ff1a27db73f5ce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37a46fc710dfd3bd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #899c836c3970c916 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4533e4deb349488 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b66b9895881e85c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeatMapOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df5a8b8a664066b7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c51baf01b279a9eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dfebd80b269b285 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4550d5e3910fad1c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HistoryOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #375d81bdc095c0c2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HolderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8be2067a30d866d1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84613af29a9d08af — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17ba60405d986329 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #904db6b71be4eb72 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8543c7863e66a3b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68ce93a58ab2a51e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8f20d1adfd5c8a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5Filled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54275a887bef0bba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5Outlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #789c15fd13770a84 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5TwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af754d233a319b73 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HuggingFaceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96feb1d34280b783 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3838a9d23e20162c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01f8aac8202259a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fa76ba3b1dfe85f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c50802a1cdde3ac1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5c8604aecca2727 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #129c783f9018bb71 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ImportOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6bf970809bc815d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ce91052823a9a59 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0175e9d4c35a4e29 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0092edf179afe42 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1deb03146e91e121 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #653f5ebe98197c7a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowAboveOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e9931add36a648a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowBelowOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7b85aa27f4684c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44b896dbdc958418 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5a955c48476489c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InstagramFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2e8da37dfbe02db — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InstagramOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f970ec41e0219a0b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3595250549bf1536 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c54f154a3ac5139f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86d79e482924113b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b86347bb826f9707 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9d4376f1c047bd8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51ae3ef5cfcd06f2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IssuesCloseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe261b71758b6c10 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ItalicOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8af44717b1ae6624 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/JavaOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0d6b3b06f1423be — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/JavaScriptOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27d28da3523dbaea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/KeyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d20c79b2b5949f38 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/KubernetesOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2eb8131773fd875 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LaptopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60f22f77c5750f26 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b357c55b65ca7c87 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3914bd65a7bd91c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5377dbc940408a1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2dfdf625982a26f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #007ab0226e254ea8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6be0b3e970f1228 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb5d56a543673b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4c40b7fd4c3763a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a45a8304f955f50e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9901a228e5d709a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e896ce6e1c7f09ac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6847f71c3ccb9c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcae8055c34ddccc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18079329433215f4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineHeightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0ffc3fb2ed0b88e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b4eb41aeae7bf41 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1c36c2853b223dc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkedinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd3edb5c356bc7a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkedinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32107f0c3ab9a9c3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinuxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a83538e5dfae9b3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Loading3QuartersOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91b91f3099a00d58 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LoadingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b256221044978c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fabbabf78ebd61e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e14b2c627bf1963a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6eedd9810eb87cb5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LoginOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0442b006693a060 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LogoutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f8854cc104becb2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MacCommandFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83df12cca137fcc5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MacCommandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #893a679316e18bed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df7841cad49fe900 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4afe437db38cda6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9c37ee4e6425be1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ManOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #911ee7bd9e9a13b7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MastodonFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dab4a2a6cbf553f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3097a1e9d5fde0dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8af97e30c20e5407 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #462ec43b4c457939 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1ab18b6a7ecd495 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f0f4e1fb4d571dc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59ca07572c4e4912 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumWorkmarkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7bc8fe434f7658d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2153591a7c9d16ca — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fceb8b6c6dd5ce2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3f0e1fec3480c3e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuFoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7aeb1c1d5d4edf5c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27e2d2d75bc68711 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuUnfoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #602ab4d4f6e1c702 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeCellsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0aefcd8cb6bd8f2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #061cd8933a675e0a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea12aeb7e3630452 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97d11753a3aea265 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #425cd3d2a631433d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4742723730a30382 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2e74bf57429c8ef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fd44af48bd0d51e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e023fb8ca276ce9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #535a6fcd7a7e957b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #099ef55e9f71cb90 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beb0b8ccc434b35d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c259300f256e3c19 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MistralFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dac933dba3c1a44 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cea81c0ed2810526 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #065767fa96087e2e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbd9e8224f6a2b89 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7acab3148d360bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfd5d4b7a71f9df9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3fba85bcfa04e65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MonitorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ac3ee2f35aa0399 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoonFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f07528f32ae6751 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #030a9af2fd4f3ce5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoreOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e40c408223c29335 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MutedFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cb168b70e0e9aaf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MutedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25d2e47ca1d82389 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeCollapseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a583f2e3541c784 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeExpandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae0cc84f36c6dc38 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeIndexOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #775b5880ef7bbb29 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62b795a5141b85cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d72177fcac548891 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a78e179cfb1f3aa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NumberOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47b1492f7a006564 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OllamaFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21b6b74e3100f414 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OneToOneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04e8811d74fabc69 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OpenAIFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9922cc8ae77dc015 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OpenAIOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19e13925262c0858 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OrderedListOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8cd0688a3354d08 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PaperClipOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e9b2350ca507d65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PartitionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6e17579c59d2238 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3dfce270c726430 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #817bbbe6d03630c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #835524b59dbb03cf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f89dbf7daf57db7f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0ee299af7eeeec4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5abfab9ef1e5fba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PercentageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5d5dd72b8920117 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PerplexityFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd40c3970c7d5b9b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8deab866b062c696 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b091bcf97e9f36ce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ba2d324907c688f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicCenterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9af4b15a3df161b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eecbc83d74b741bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d43b9781393eff9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c7ecb1fde6925ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bdceb7f8a7a6165 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #252dfffd55a9e6e2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #baf3e7e313918415 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c4945f8f18e8108 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be895f62d9bf86f2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PinterestFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #062aef45852b2ad0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PinterestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #199ae084b3d877b7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58ddd9786e54404b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cab25456ea65897b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #057c63796eba1fb6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2430d021c39ff33 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a5d05da1f0876a1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d74541b7c8e5e8f1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1375d379177eb8d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28cd4cde7de8e05a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d5a39b1a6aafbb6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05349ed4382e8694 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #960fd58e4237803f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c487ab5b81bce072 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fab89ab79b776402 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e158b1f0fbe079d6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a87e110936a7f07 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4ec82d659f53acd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #924e7b467292a6f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoweroffOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #609c6154e1a2b68d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e4df51e79ac0dd1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ce981059fecc7d4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67b079b680fc4ee9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProductFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c07e421fbec22d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProductOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3903dd2aa7d7a884 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #626057bff1adaf04 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73d7d98c7c0bc63a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6defb554959c7149 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ec47d0852e850e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8d6789973e4edff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e287c16fe8c47b4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fabe3d857809b6b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68dd1bfc4216e22c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eea96ac60f928111 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PullRequestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41341961f108b35b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f2bc0217b153f14 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7e4341fe8c050d5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69ecdc4d527ae8bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PythonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb1a838ac398c395 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fe4263ae365ad59 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb682c0c3bc4ed36 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a5ea887d83fa0d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QrcodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3523953c2018f337 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05313fabf7764138 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cceeaf12d120799a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e41a349c2c956dcf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c27e0255acdefb09 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QwenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0c2de5224cd3ed9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadarChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f43fe244d6b645d1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusBottomleftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #598dc85c102a71f3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusBottomrightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9030304759e2a1d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusSettingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd64740dc5918625 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusUpleftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08c435d0dc5c4c35 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusUprightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9924ab04ad7a3989 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReadFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3779475e3b64e00f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ff4b9b460a2a3c8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17b4b500876050c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fadcb24107a5765f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1446f9ac7465cdcc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f4b2f8e40e3dbf4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ea858588e166db8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40a45748fde8f647 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c60e2592f028aabb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #485314a3fe04c1a9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b16755eed132c69 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7a457245afec5d0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee6170b6f1899680 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReplicateFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4a1e6af899d33c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d237e42921f141b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c568859a2164f046 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87523227fb2bb2eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RetweetOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98803c71c9d84e42 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #849d3c01bf671c1f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89ee7d92f06cb4d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce4247cfde25ba42 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ec2cbddda0237af — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1c3c4d15a6bba58 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5684769e99d506ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45afb81cde0b1ac0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RiseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc080d2bd4979c95 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RobotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3502e53ec33775a9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RobotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e726e82d8ffa3bfa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed8f1d071f449de2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11334b6e962ebc3c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #758f3d63390364d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RollbackOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e02b9036aa832b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RotateLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a752b1cf01e00c80 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RotateRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b1797923a1b403d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RubyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #247b61b0a0b0bcb6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98ad38c7cc7a7d08 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #369051eeaa81d2e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3eb33a9ff4c8a481 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21f24b35cb64651f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2db7c8ec65a585d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e876d0966f789798 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f422b235a1e4cb8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e078a548202cc87 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #926eb78924d81e53 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #656b1c617cc739fd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #545d77f35f15f765 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScissorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf1e72d4d54905f9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SearchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ae5edbbf8545bc7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02630ddd19f20671 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84a73cb1952ccab1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d53949c64b07412c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SelectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #345d032bb021e377 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SendOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #007f7a70067465d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55d5670752a181c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #368aa884cf7588d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06588d2cc834942d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShakeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd43e765b00a122a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShareAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2033b829567b6e3a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efa74107c4deed44 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #379aea6118e7a49b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17859536020e9ebd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingCartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95e38c551a850732 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5b0bf8055d62561 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbb7d8f655c1676c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e58062c483d2e97c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShrinkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eead9bd491aa7781 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignalFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9526ca9a544ef761 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignatureFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9112a8c575f3507 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignatureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #268474e9017876f0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SisternodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4374e97f12dd8118 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #214a9d1dcb07d78c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3c78dc11c0f8d68 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb9f2cbb822880a0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #318ea0f38674351a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #272cce899775c660 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb130ae99b3c104a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkypeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b178294bffbd156 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkypeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #948eb37735b34516 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7f6614a111bfa47 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b70a42753c068a0c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fdf63369c8542a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07c52254ae3d742b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f93a8df7aaa74a34 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c6c1957c388ce24 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df09fc99fda611a7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmallDashOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76ac360bea1963ad — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0768a49019f4f089 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6967db9aab5fb9a5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cefeed5c924f2d29 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnapchatFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66fc9ad65716f13c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #474af42b08184516 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f782c894b53e57ab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a61311f3cfc54a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SolutionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b655f0c341881b98 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SortAscendingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a28d508072204dcb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SortDescendingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1329ad94e8ac8d9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13da316e55b62362 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98a424a53580abcb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe985f55a6996f5b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SplitCellsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f287d9f184511e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SpotifyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c89660cc92a8890 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SpotifyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4190d7d9aa1dd6d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #913a13ef102cc30b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4b51982edfeec17 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #488fb5dddce7cace — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepBackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #197da4eda58d6768 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepBackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a9cf91f6805193d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3ffa53ca9469447 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4adf8fa747083dc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f70bb9c0b7f4415 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d46d36cee9bb2c01 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #241bea1ba45946e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6db5ba177c396a19 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StrikethroughOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b884d188e8847160 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SubnodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #559e5a443e4c87d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SunFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea466ae1b2e5ad69 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SunOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd2693210451c17f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a349354b3316496 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7849031515b0cd26 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2fdfe9bf21ba54d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad473a38d211f932 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7611fd657741cbfe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1b1ca86da295fa5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c10e55f33a600527 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TableOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06f68328f02c1909 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c8a61984acf39e1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e357e3998f77b8b4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bb999a12109fa8d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0018b15b7fda736 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fb9806a1ca362e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da78a4bb2434ad4e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a206d8b2db1a4c44 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f3c3ab6112a0af0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16a653e4db355057 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7a763279a0cd96f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d816a49d6eacbc63 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13173c3561c11825 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10a8c4761b3b62cb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TeamOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74f5c8c12da6f955 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TelegramFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9861b12331420867 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThreadsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08dba9eb8078d286 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a323eea00b96c0c6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fea5f41acdefb36c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f45f14ae0629033 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TikTokFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beeab29cbfd5a8e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TikTokOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ac6ab9935d6764b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #888b00ed1b195810 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b0207ef0aff16fd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a169c1ef6bac4cfc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57af9907c20d9478 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afe0e1deaa2c8f4b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5dfa38ee75f8566 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf45e1f45c3156e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36f0100b153b875e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TransactionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f90542ec82572bca — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TranslationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0002abed316343e7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52af67c185183bef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f48f36cab8c62052 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5935b4a18c59c28 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TruckFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd222510df85bca0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TruckOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb3bd78a1c8d7e03 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitchFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46d70bf4ae6c56aa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4877934f0353590d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5e877d612f6f223 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccb23b9e2c42ac4f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4803d67e176f0464 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnderlineOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fbb2479b608d22c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UndoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68a331c522fbcc9f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UngroupOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9548a8787cf52efd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8de99c2b16aa60ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9656d5bf175aac28 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be80a9e460cf428a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnorderedListOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bd37dcef41d83f3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3649edbdf6fd138 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fae0c44039d3fe5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba0162ac17b176eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #786b7397eadf6db4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15ea00309719f640 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #548c9d4ee1b24f08 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f4fd317e4807c56 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UploadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e31132fce257059f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e61ffe057aca4528 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e97c586f9164a9a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e62972429e2d77c2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a1be42005b3c2d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserDeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41b7d3757f661954 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1c1cea36a0e9f09 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserSwitchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fa2cb5bbd73493d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsergroupAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdfe560d67d1cf2c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsergroupDeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ded90e87fa3b256d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerifiedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a57d24221d235945 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignBottomOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb440fa61163bb86 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignMiddleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f536876db48399d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b908d75fe068a7e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bde6e31fb4cca46 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3590617058b4ec29 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #418f944d28ac3533 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b6bde6c9709fa72 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03acc9c80b3f2b4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89709db581e5cf8e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb39331d20efa26a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5022af89c8b219e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9d0b9cddfcc5e22 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb3b5474b41104ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1348f9ce779bf139 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22b39ca610789f80 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12ce1721274a7c58 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3056c8cef549cc31 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatWorkFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e97eb1f750dff76 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatWorkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #492a1d8229bef4a6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #557b1564defc446e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c6e88bd7dd2615d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1f5c13b4afdfd55 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aad55156e44b05ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #948fbdddcf1013ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WhatsAppOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c3ec0271a34cdf9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WifiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62dc038d45d0526e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WindowsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df0401214eeaaf96 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WindowsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62a96fa417477b27 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WomanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce42f1f472d5db64 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/XFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8b2dd052c556b32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/XOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74d4a805de0241e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YahooFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3dd252d3e116904 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YahooOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92911fdfe92b24a5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YoutubeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95417c56c4b5aa72 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YoutubeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ee944f73cd3a4ea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YuqueFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d58306612bc849d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YuqueOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5adbbfa36480f07f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66506bdb2de01171 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c836869de76b08d1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20baaefd087c492f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZoomInOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f744b3720ecd62bd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZoomOutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbb62dae9b3a02fe — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/AntdIcon.js:73 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1247cc2ccf5acded — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/AntdIconLight.js:59 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23d94a9b6d34b315 — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/Icon.js:87 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcf0753feeaa5f56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/cssUtils.js:158 
  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43c1e359721a1823 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5ad68115888e373 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2334a4c3631c3b2b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba33a67dfac49f4d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AimOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc16aa0c89cb13f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e76fabede58a21e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b5c7ff95d8ac026 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80efb666c1b01aa7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlibabaOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef8162cff8176667 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignCenterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bba9938379f6c86 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a03dc475817559a4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ee82dfddb5b5d8f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dafefecc886eac34 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0417453a11fce5a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #257613b5f6996ce7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipaySquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e98af42011a8b6a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliwangwangFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ed0a04007f7b6f5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliwangwangOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf7759a5b8605bd7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliyunOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b849314a58e0d94 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcd447e73256e221 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78b4077aecb7beb4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5399957bbbe6c172 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AndroidFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #025d3757bd7165af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AndroidOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8686ce8c09bdf304 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AntCloudOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0a3483bdecbb0da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AntDesignOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc7f1f82deeee8d8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AnthropicFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a87fca19e988e559 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApartmentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d904c839812ad7f1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #804727bc1fd6290a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd1848751f8923d5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dda06e5e404eb709 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec30c1ee568179d8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #684850a54a11421f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27d097f17fd8337b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06ca12efd40dabd8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9be50fdc6ef4b775 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc2f95db2851df68 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AreaChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aeb67c4935350fea — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowDownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29359b624dd88c4d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47b609a365f3a3a6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #210bf20c81566b49 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowUpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54d57ebebcfb245f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowsAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #234c72403dafaaf4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cad9d2ab9a1f158 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioMutedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f92efeedc9871276 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #782a1ab097760067 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b686fddfbfffcfe9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AuditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf11cb3cf186ab1f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fa30923b333839f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cbead96409a07b2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BaiduOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb94c68d6aacaf32 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5135bf7404684725 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8e04fb4b8df9cc8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3254483bf19e202b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21ddc53658dc4ee5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarcodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3d26f205f085689 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0554a6f5881683e4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0da69d53bd422d7f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29ecf58a6f2e6d8d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38772f215907715b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22bd3a6f006349b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75b0ea9b27f54f80 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c28d2ad4b2c19e8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72ebc49d646a4a41 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BgColorsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04e89c8bcb60ec6a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BilibiliFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f4112e95030b389 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BilibiliOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94d9f532480adc50 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BlockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd11d8033043768c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa79c686323b7dc1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42e093743190f983 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47ef223001a8943d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #425c68773bac6251 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderBottomOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01b5648f74d0f29c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderHorizontalOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52d7d8522c958aba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderInnerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aea419aaf3cc2cd8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fbe1cc4ea948a8d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderOuterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91791e572f223ba3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69d4c76aa46760db — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3474aaf2c6f27405 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a77c1a0c323f8f2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderVerticleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a3e7746f2796c33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderlessTableOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3e69ee934107e9b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4342036f827dfc43 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #726f619c37c83136 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6db80e16d5f5b953 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BranchesOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b48c7305484ec34 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9602c428538c839b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99a5c7358a05ab88 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8926b7859461ce3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #531ad4fea949314a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91094e3c3793d9ed — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5360d438533cc58a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3506836a9173e772 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1445cc9c42faab90 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75337fbb5d982783 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55b5237894d4c1a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a57ce50c2cb4bc3b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #066c8736ccd4d92c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6002fa3253254998 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe10f8d3966a722e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #166b897d1b99858d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c52d4d294df27ab — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8c8d51de0b5622f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3aa2eb97129a2fc4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93712f529f08b473 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38dd143aae05fbfc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #794c130691a5906c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretDownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a420aa906782edd9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretDownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1430bf2b55d584a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretLeftFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44e231ee2da73ece — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07ed6f2bde6c8a9e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretRightFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38be073197928ab9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ea36bdda96a6554 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretUpFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad36443a2b1487c9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretUpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0abb665086189493 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a57f3b4f2333b54 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b2d57c54935470d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ed6d6bee5e6d81c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95cfde34232d5a4f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ceaa068288ad7dd3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d33a3eb5862125e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd420bab82c41413 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04d27355c4e540ca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b068c888f0e1d403 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9bdf0b9ee0cccf8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ChromeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9753ca51444776af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ChromeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2733e4bad0b0e68 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cc3fa0e578f1ae6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3f54d2c2cf95ebe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d9abeffc96c0fbb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e376d973d54908d2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ce4afd12796163c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClaudeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf541c650de52fd2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClearOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00b15a1cecbff2dd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b67ea0f7dc97fb9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e301f7c204de499e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97942f9d79fbb071 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7b864566aa56863 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a9b429a0b8ac336 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05d9ad825e1cdd6e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92feb439426587e7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3a4174f0d8c3f60 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #193d03494a6d14d2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7790538bdebeaed — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudDownloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09a056237fd64729 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a0330fdeaea2208 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebcc48cb7c25aeb0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudServerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06b0300fa6ff5ca7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudSyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #472203de8c50ee13 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7676c07a6b7bb3d3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudUploadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07130c83946307eb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClusterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c55132a98f1f427f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c67513006484e8f3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be6390139c83f94b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #650b1159bf6016dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bce94a9e3283fd6b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f674dd9535515ca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4de3aff5e14c516 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #706bf322a20e2383 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f930db72659175e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96bbe0f0f7187833 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29a23cab741b82ee — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CoffeeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db2b666d303e56b2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ColumnHeightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #346f2def49148bda — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ColumnWidthOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #692b261ac97d131e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CommentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #402df9a7c5d2685f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c470e5efb4bd15e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11c89cf068e84d56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #138ccbaf4c637ff1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompressOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b024468609ea6fa8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ConsoleSqlOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79781b9980788c2f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #766f82288ee024d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46cd6bc15652b580 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73d06eed3a742802 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d0a5d2b2c56a39c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea8ca5851995cb33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ba75e15aedb413d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a48c64b8a10cd655 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43814027af526c70 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #507ac9d742d5818b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1fc5bf94a4806dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d6f7c01a53fd0da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e3249d0e4cafa5a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e692bfe53b0c7c67 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac12bfc27b2cf717 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e4b2c5e02995d14 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #771169e885414229 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #946838cf34db210b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aeddc74131092d0f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c9c8cd6aff5602f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a75d93e322352132 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8826a14f0187a25 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #146fc04d6c42bbf5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50d019a9a4c9507e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5249630805bd07a1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7c59806b7d163eb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b51f591bbc244e5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff6e61592ea2e038 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42bf29dd895fd12d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2ad2237e6b23e7f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fae7b60cce3c2e73 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed95d6ea8cee6c1a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2831d9ab4ddfd28c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa80ce74fd18dae8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeepSeekFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e97b35a863d8c42a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteColumnOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5f47367c311c43a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c75a7f5649392f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc15d09814fdebc8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteRowOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aac34c31fe1a7e6f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e288dd314edd0fd6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeliveredProcedureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7708e07cf6a4ebc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeploymentUnitOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #246e2152e276eff1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DesktopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #398ef4ead5e7d7d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fd8af25aadf3ce9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d66bd2f1240d7df — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85aa2f0ba45e69c8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingdingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69219ddd4a91d215 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c64e5b5e35d95c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dae83bf7c5ea7902 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e30921bccdffb7e2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DisconnectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cdb6192ba53eda2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiscordFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #769c42c44635d3eb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiscordOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d845bc77d9a97c4a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71b7951ae571ab78 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a964392a2cec68e7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e2ac5a36b06b186 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DockerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96e1bb5763bf1b38 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a50e97c5469e41a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fadd069ca722c1fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03d544460d949de2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #777ccb282170b143 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #592f3a21e4c5779a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DotChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fddd674d3c278090 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DotNetOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2edd3c37cc80377 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DoubleLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0888ae4a0fddd4d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DoubleRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #259272f9e7525e76 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14e6d3855b0f09ad — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2b4cf3aea47267a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #665ac09fd8544029 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93fac83d5fc1a25c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b48d480e7ba1150 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c7ec041e84e3fff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc0f2100a7bbd139 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec0e7f99803a28a4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DragOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f1b45fbca869bb4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78443ad19ec87005 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e4778ab1639fa92 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1b81c94c9dcf0d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cec22a67596b8c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #479edb275c402e39 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6736b931911f8832 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b23300ed8163bd7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c77cef39229e6b9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c8281dd2097fb1c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af0f7d67ae709968 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ElevenLabsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2b26c99a2d22840 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EllipsisOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ad6c06cde946b6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #942cd77ce32f97a8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df71a38549a4fddd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00580cea3e9763aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45a9ec82a35e0ae3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97ec9a0c78c41e03 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cabd088b7d4f657 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0df918b2779646fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb9b81ac80374d9a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d42b8d08d7a3ed8c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExceptionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f229add0998427d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4d90c590c7b95e8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7c5afba1a7659dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8238569213668b69 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76ac2dfe081e1804 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExpandAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b16e6316ded55fae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExpandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d73ba23a07e76458 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d74059582e7f385 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b464ca071a92f161 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54fb4f1989a0de81 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExportOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8164bbdbd657e1d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cc5c2553399866d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6670223a262997c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e6a21429ff4a3f5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #108103da04e74c23 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86acf1feb56115b2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6bdedbc4c4610ca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FacebookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89e835c71f4423b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FacebookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eeb264292d5fb2ff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FallOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c23ee3eb22578fae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastBackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdd35494e29b1b97 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastBackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbee97e19885ed8c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e63d2d9f33718d0b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf21c7f97c8018a6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldBinaryOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cd6225a6b7eedaa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldNumberOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff7f505c99891b7e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldStringOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1bacb0685ac4295 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldTimeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78795efd7991c276 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b32c2bc5f9b4c362 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f003474dac64bdd3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2684f0605b026020 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileDoneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7fe268d679caaf2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb1b809961ef7034 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec2d76d20b8d6fe9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10728da8cfa9ba39 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99d22ac36e8574a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee8e0bf47415fb69 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83e5a7b7a8da2333 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dfd3803e280291e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileGifOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8772b2800403e9d2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a30f1d5f57336b1b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dea205a299d1aefa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0625cc95bce80a1e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileJpgOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8b17c91dd7967fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a0719603fbbc45b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee5c98e6c14f8370 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #435f1a7604352587 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31b4de7bbd2d4f5f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8a335726c4208bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41f34fdb05666631 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc83df7956286480 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2def5378077aded5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #956ac114b3c42dce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee16208e7a2e32af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileProtectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #417f6e7992ccb6b0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileSearchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41064302367588a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileSyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a24803cff3fbe23 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1a513f7b71a07b4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29639aa445eb02cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64ed92e62cb5aae4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba78f476530a9f3f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d14635560240f9d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aaf044d4f49c95f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d88326cb2a9bb839 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07bfb15192e27049 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a47d70977d29947 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c435b378c8a618d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8bed704384c5683 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3a7dc4a16b94a28 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a12bf946f3ed7b1c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4639902dcd1c1366 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11124c24028ab54f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4fef489871a3157 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccfe93f3234a7e74 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3e67b5e7182e9e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a719537edf6d0add — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c022aafc38cd1643 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1366ec757de35d13 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b18737a019623ba9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc0575e5cd8d1bcb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3eb9853f5f249e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18748a13d87174d6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9593df3de5b99e5b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a50997ae66e24f61 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b3d99ed779d2b40 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6967338c42372468 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beb8d92c4ecb9be7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b315da5814d69f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderViewOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8da0b2c9907bd438 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FontColorsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f2ca296080d6e36 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FontSizeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55fe396c75cb1fc3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6315b3e1c76c5a7b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #473695cff6222218 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormatPainterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78260ded4cf10724 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormatPainterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e41f0cf8b65eac4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bec7f1acbcb83fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b138663a59e35c8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3f80b72637de98b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b1e07acc892c075 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d03976429998c569 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FullscreenExitOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2eb7bc47afc95348 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FullscreenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f25e352b4d9986e5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunctionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4dd2bf3a8e7bdcbc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a9a3ce32ecc77ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b0258db82d53396 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundProjectionScreenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ccd329cb96294e4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41361f17ee22100e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundViewOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08bcc89d2da40a8c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6150ea8c14d47825 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb35c38c8da1bb48 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8b835173796f656 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GatewayOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e6f8d6d4cf4ebcb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GeminiFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f5847b5367a165e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GifOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc917de15d7549b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad5c5623a224af16 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22d4f21e4e9f7f4f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12397a6489905ecf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GithubFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8cc0c7fbbdeb686d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GithubOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4810c5ee2762093f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GitlabFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15cd0a41fe97a8a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GitlabOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98b64005c26377af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GlobalOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f919646f41b73d7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4ee6b9a27bfa0d7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2cb3fd052859d5b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13edae3149517033 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6bb204621d95c01 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b3a6973976abaa3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9096295035b9ef35 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6b67b3b910d7c26 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #286a1efd5fe999cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd8d8559bef084f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd74f48707fdc47a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GroupOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #488c495fb35f3b8e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HarmonyOSOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efe89979eb8a14f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c9326085fb99981 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #879673db8cde5c2f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e6e16205f57e45f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25716796b1df2b00 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf3bb443e56a6edc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b77ace19c0400daf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeatMapOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b2ea441e9fab8b8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1970f5f230c4339d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4c66378381e37c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #169d1ad59059bb8c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HistoryOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #097aa440e711a863 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HolderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54c2d2446484a0dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1738f14049794cc4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b8430051a4d03bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf0e4e346d787b54 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57a4f3b4e96daef1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7300f0352ad8146 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37932ca0499f54a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5Filled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95ac2687bb2f9a77 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5Outlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a1a85c5c858192f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5TwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a25a0d3160511907 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HuggingFaceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a173dc72f40dd97 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be74ecbfdf0560ff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5c8e53c43d1a0da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b610df35c08fc01 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30bec544320dac0e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f14ee7021d91512a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dea96b7a47091328 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ImportOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afea5cc0afa82eb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a380705c4da588d5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #103b333a6f1c9c63 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #041ebdd89c8ca63d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5e92f2d2b1a6506 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6f59e042e93c9ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowAboveOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #273ae4dafc9ad35c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowBelowOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #320d6bda39f64937 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4117196ae03fd583 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c72935952547142 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InstagramFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #864a0f9e1074a191 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InstagramOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5951b68e3996c2ca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccbf910097aa6945 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebf6a754cea66230 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbb46557e35af2e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e653dcbfe885ea33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25bb7734027708bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb3d76286e601439 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IssuesCloseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad3f754ccff2a55e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ItalicOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd7d94707854abbc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/JavaOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffde6e0fb04bd700 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/JavaScriptOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73e4cfd7cf23ae2c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/KeyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #650b0bc0ad791b0c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/KubernetesOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b34e303044db7c60 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LaptopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5ed09f2f923ea72 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #418f18113301e6b2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a2757afadb079a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6734688ce08b6f3c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #431979da47c814da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea43135bd7a17fef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93c9b8763eb6da80 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13b12612751bd1a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2eb5200081fa56de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bba0f37d8e25dfec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b0bad1d328d0517 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d57ccf38f6155e5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #140b1016d19819b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2f6635661ab31c8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4e2df7e5e999110 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineHeightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d56c275ab5a1309e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b264b39d16d845b0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e58da6e626b31af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkedinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b6743d7ee6f14bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkedinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cb3a673e2751761 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinuxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f13ab494ff86694 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Loading3QuartersOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84e2658130d34b47 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LoadingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bc41016ff233b6c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b16e4d5afe36b0c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f8db8617309043d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4adf0bbb01a47b32 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LoginOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8815e4bd06a12153 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LogoutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ed39fa021a68219 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MacCommandFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c39e6252683bdb4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MacCommandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #548296def5f6bb87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9759f2d232c7789 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94223092d5daa811 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #772068e9155e0260 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ManOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f00086b9ad23b37 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MastodonFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de58ce279c2e1b21 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e15c5037ce1c9d18 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e8a830cc8f54478 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39c8123a0a2f32fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5665f8a394d05fb4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1262025c27c2f7d0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #255e228b4fb186ff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumWorkmarkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ef77362c5429495 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #603cb80acc7e7074 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a69febb1b3ec941 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8deb29db77a535e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuFoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c753c7bf9e2aee53 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1356873f35ec9b87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuUnfoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7836b40f490b05b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeCellsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23989d535a11e41d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b2157ba168677e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e7510c302064118 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f29d34c0dac56404 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36bb7837dd080003 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6889b38dd51f365 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd5daddf538582a5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2edbb29aa704a6c1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #530ce976c0bc53a1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3302008172af935e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50d3dc8eb24b5dc0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbca39c7fca17471 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d74805259029a99a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MistralFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6ac088f912de1c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d65127a4ccba4f92 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b99096495ca59914 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #504f7ebafacd4b77 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e53c7b835edccac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f827f784edc9171 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eeae0ed498ef1356 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MonitorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bf34c5c17727978 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoonFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f53d84139d427228 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0a495ac9023846c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoreOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6f84a2ad6fa37e9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MutedFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26b02474e9fa416a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MutedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e02bd8160203d5d3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeCollapseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #385dffc52dee1986 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeExpandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8443410223cc6d51 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeIndexOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #470952b16d7dee6c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4fb4a7e320e9620 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e19cca5cb5bb7c1c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8926128f7fcd4c93 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NumberOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b26f81121766663 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OllamaFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc83f410fee0ddc9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OneToOneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44c1691d54b7680f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OpenAIFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e565100d89b5cf9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OpenAIOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e355393f3258673 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OrderedListOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d3c5f123b8fe420 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PaperClipOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eeb314929cf0bee6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PartitionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3766b148c599e1bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #316785ccfe83f5fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #615c93201936a06f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d6140ef4ff1271f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79f25030fbf44fdb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da1d812ca2760933 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9e800ff3a9af8ec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PercentageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e937b47723e9226 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PerplexityFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fce8ffb31e3f061f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #011bb9dd302ae953 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #852379457f9f4b53 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e23e67c3361194c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicCenterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c35041ac328c85d9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48b03049739305bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0634a3515bf6e0d0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b889aae3d0367d94 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e6adb49044a6b44 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b15d76e8223a68a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ed638b1330944aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13ae349a15bd64fc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9d92b42cc6e8ea2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PinterestFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7d31cc5f713d0b4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PinterestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fb155658f4e0c58 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08463f0c13c08459 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0e6b8df664fdfce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80db8feab3e7983b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2de793d31afe6491 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #331f975449f4ca35 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb1a5c7092949753 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2bd53846e23e0a9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2b6149b559b83c1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abd9191a1b36b074 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be7f195c629d1681 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9cfe6d0ca567b1f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a614777a4b601a4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab7e69c97bb55a6a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68bb1adb15fbcb54 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac563627f6edc964 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96bd94f3ee7c6a29 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68abfb674398d5d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoweroffOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d571b2b325e8c59 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08b687046367a961 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe6a37a41a69e6a9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f65ff6b1ebe71b76 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProductFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff1bd857f9581099 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProductOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1967da3a34762672 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da456d51ae5e601c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #015e2e4b3038e614 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a82712f595ca42f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #130435c482db4b91 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #111f4f93b97e5a8a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cf1a7161f37ec93 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f03a16c18966cc32 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e7028dd404a0ded — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db3143d2206b41ec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PullRequestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61a61bb267267555 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cb3b7e37666f6f6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #284795dfc256bf67 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f58f1fad76b4b6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PythonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3abdd756208b9df3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb34710aa6af1879 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe1534c5db30fa00 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a87c2e25bf5b619e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QrcodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0e81b8e3a0a9893 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e762950aa4ce618e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aff1f269f309b98f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b5b266165a6eb0f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2783a0084c71fd9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QwenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1013a9978aef75b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadarChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1b2061998c9e1df — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusBottomleftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7036fea001e297a1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusBottomrightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13b7d5ffa0ce7f39 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusSettingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa14683c5977e07b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusUpleftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3aa54bfbd38b7a8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusUprightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa528bd013bca6c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReadFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db93f7f0a4812a94 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78293a636b534a45 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff7e3965ee8b7155 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e78a262f9eb153d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ce0de535190e1c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5ad120d565f890e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5fa454c9d6450a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57cc7d6b82380baa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d3f22b98d6f00a9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef592a73f30d4598 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42487df7290d6ae7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b8027f8dd576ae3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd6a975248c1b59e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReplicateFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7df846d67b7c4f61 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0801c052963d9538 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #267bbe4e4f7745f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fd2a5af2a802c45 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RetweetOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccb1c97bbbc56fb9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fef958753d744f27 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #971500eef5056541 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cebb124db1561ca5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a395e6b041e3af2a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e706d5536f2008f3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #132bbe9c5638cd02 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96e50268eef59b8a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RiseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35a96f06984e58dd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RobotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c8e0238ffff293f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RobotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d75a7a7b5cfd4a7d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5539cb9d30b27448 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a279b81e58cf6256 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d62f7321813b7bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RollbackOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a359022e2f206214 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RotateLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #700ee5d50214dc31 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RotateRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5094467e4ecad55 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RubyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea55174d9b845760 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9726c2f34db8080c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65cdcd202fc97f54 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c0d387a3b98dd22 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38c6c406078a7f79 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d33e90f3757ef9bd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #374823d739942656 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bbc460bab87f70b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fa95f0a4ff4df33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67c53e11de60493c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f856d6248b7c4b59 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #077c2d726a8e3b6f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScissorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79c0bf5944da3251 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SearchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ee1c27b6fe42025 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a78372b9ede47682 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #966bdd03c426fc2d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3aed6fc770856c00 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SelectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11c447d3e05b9133 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SendOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c5f682614a483f9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed0d3ca7a4d53dff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cb12e7756f3207f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6db2996865d6974 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShakeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a4337f286f6f75c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShareAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17fe8118885fa2b8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fea17b0675af54c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d927ed9508555339 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dad47df93ed836b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingCartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e02b3f16fddc53e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75017c75feafe405 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b4b231f1c8bba35 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdaadd9de16226c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShrinkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2bfdcf2c0082896 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignalFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42be12cab58f7e4d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignatureFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4659c8a36183f9b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignatureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #440eca44900bef47 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SisternodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d7f2e67f34b26c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7130563bdc7656fe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0af59fc7da4c17cf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3874c191dc6c1105 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6710353e699e6fb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95aa2798cee9a853 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65a34c0ed41fc695 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkypeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c0e0858a0a93f34 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkypeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #123004479ca05861 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfba3f9745baf443 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #294c1740e41d2e78 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d798ad2e45ca9de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ead557eba821edfe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03bca088aa9e0ed8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb2f2e61ac812e0c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ebc20be850da286 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmallDashOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6824a77a3edab63f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7f56d8e16f36e28 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da6d9bd2bdc54261 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #072fad55ed85eac2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnapchatFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d57187f17670b830 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19c77c0d19d75d03 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c80891792203927a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c24b70bf35186932 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SolutionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db0b47f6660d301c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SortAscendingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a481f2248e45c728 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SortDescendingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb1e66cb2db8b9a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90dd36b3242593c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7aaaa444c01e96b0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #274c94321e0518b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SplitCellsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8240c044ee93d2b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SpotifyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8df6b7c50f3be84e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SpotifyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03202476a10bb41a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06a65b34491f5064 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e70663eebc11f83 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fed492ff7a8f158c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepBackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2c2716c353e8769 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepBackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc971a288acaf63c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32446cd84b1daebb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f76b666326bed224 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7df992e37103929 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b1a030986759b55 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cac748757a551f2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2f2b369291c2666 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StrikethroughOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31129ca8311c1979 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SubnodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bcded7b1ff814c0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SunFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf4f7bf13f1022bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SunOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69e30b33ef857e3e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #943bf247d99c57bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a7650b1d8a5880d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c4c673e497c6dd6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46803a154a1e70cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89b558c13cca50ea — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8731a6a431276f63 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af3ebd8acee08006 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TableOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #027821dae09b97b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99b6144052e041e2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73070b549520a07f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b054ea2cafe7109f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #062c56c74a7aaa77 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #580b58a0c614d013 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ceb0af7025fa85e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83f1aa5a71394ee5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3161bf40a85f04a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d0e75c4734fe62e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a94838d7c0e93ea — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e24cd45c9ee2bf2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea42032ef80e7b27 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcdd93a62cfdd6f3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TeamOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b35b426f120cc27d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TelegramFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdea175d4ae81fbe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThreadsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd6bb53447028b20 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e36dace58ff130f6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36ac226262625cb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfc296445210fef6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TikTokFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f5a06730dda68f9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TikTokOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #497d7442d1e920ca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #867a228920557637 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25a05f37c7acb047 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6879e7fbf9065702 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #563b8165938cd9e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a2e9cdd1a4d5135 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a8fc0556d9241bf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39117a6912f9cb43 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b60cb70585522f12 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TransactionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63bd5973a3bbf58d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TranslationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17c9a44aa09822aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78a7c888deec6d74 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #816387322196b2af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ab3c8d02503e2ed — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TruckFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #438d5f3a7e014c65 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TruckOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #714d361af8a99670 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitchFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #659b3d4fba1aa4df — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0137458ddcf833a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a552686708e4dc2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22777c2eb7bb85e4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50661516c543803d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnderlineOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d66f5902a8da5dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UndoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fd00c3ca6db633b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UngroupOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #683b68db31f58203 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e6dd960bffc5fc6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #611ab4f93fc47fe0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abf1c0afa80869fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnorderedListOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48267a88aa938e72 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3aa17d4104d82df0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3c786b19e7216c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95c94a9a1ca60c72 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #868a6535b2fffb8d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cf422eed33e630c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #866b05b0d57ba206 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee70dc995868abb8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UploadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa385d601057f6ed — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aeca3639bca9385b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31145b96bccc2add — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d5f30b685893f24 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a68ade1c8589f08a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserDeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5932045b8c027987 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96736160fad8fe87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserSwitchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5e26d2fcd9bb9cd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsergroupAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b791a0c4edffb567 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsergroupDeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #045ecdaf6249c734 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerifiedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4106bc86981ffff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignBottomOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ec0417a6d8f6e30 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignMiddleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99d33c263a94eb8c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e87568595edf88dd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7ab7b974041d49e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be7dd7143b07d171 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49576c39dfb0869e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #437e5f9b39e7f8c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acd0b24bf35a80b4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a74b7a2430df0324 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f6de6c2ce209aa7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70fdee2d23b8fa67 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e47f93c2d91cd003 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2f63efa3ab71cf3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e53a42bc60278145 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f908286d803e0c9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19c026594e4f3a17 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea8ac18c25f69887 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatWorkFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ec24c68b6ec5a1c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatWorkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb0124c20d92c24d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e6bb909bed2472e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6769d2d0c12a5f44 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cb81fe3b5ee5efe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f41317049378c1cf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e25c8f02d48d2bcf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WhatsAppOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ccc9cd85d708516 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WifiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08e2b5c90d2f9cb0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WindowsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #036a4ca19cf37641 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WindowsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f19ee5d9bf259cf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WomanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94bd9d09e06fd8d0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/XFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb197aca20201e2c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/XOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #525bb8fa882ffc33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YahooFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a08fe52d68b160f9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YahooOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84353f89cff4094a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YoutubeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98d59e4668fd3d4a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YoutubeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e68344c8074ec4cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YuqueFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7754b46846a8f72 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YuqueOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #688ffa2b1bfa3b5d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #980d6af72dac9d4a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d10bfcb59fdbeac8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #130eb80b18442a56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZoomInOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9170fc4b7ed40860 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZoomOutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@anthropic-ai/sdk

npm dependency
expand_more 44 low-confidence finding(s)
low env_fs dependency Excluded from app score #6cb3b5bd73ff6e36 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:110 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf7cbf9fcc51de40 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:210 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0878218737c53437 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:308 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #606fbbecb269d9fc — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:73 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfa74d1359dbccfb — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:172 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfb6d1c6ff6c1b80 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:268 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04dad1625f9bde69 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.js:203 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8486235617e60de8 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.mjs:166 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f80da5779679ce5 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.js:51 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33a28b82e3b3d841 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.mjs:14 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a9bbca483223c6a — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.js:195 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df852b2b807bc1ff — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.mjs:154 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #384327ffe321c9ea — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:56 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e30469a8d04c672d — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:20 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1557cac9fec0596 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:154 
    configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b86184aac5601179 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:258 
    raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #669b44be0a2b7ec1 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:372 
    return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffed0948aade76ad — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/credential-chain.ts:250 
      const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b2f5e6a11a3a367 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/identity-token.ts:17 
      content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dfd8f0514b347bc — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/types.ts:222 
      await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cffca36f49508a11 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:45 
      raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1cd3ef5358f419c0 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/fs-util.ts:112 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f908d14b1251a1c2 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:457 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8e48e04fae31ff06 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:533 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2946e7d483c24404 — Environment-variable access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:806 
  const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1564083cd9f891dd — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:4 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #57364c66ec697b2c — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:52 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e3b5ca11cae5bdd4 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:101 
    return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #49b76a2fb7091b16 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:256 
      await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c10c55948a661307 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.js:115 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f2573de71dfb5bbe — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.mjs:107 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #de6e9dd06215c5d1 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:390 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fa1cd2b86c430a59 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:469 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #6f99276a89989d08 — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:755 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7c5a54ee9ec446c5 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:375 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5b8c2dec8f4513f4 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:454 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #81a68294b16a7239 — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:740 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #16e14ac096c98cd9 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:43 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #6d063847a104b3c7 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:91 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #412666e0d87c0fb5 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:213 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9f45afd835f724e7 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #557e55df9407b3ab — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:38 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #3472b21d145c57a6 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:86 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #06b2828b6f0b97a3 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:208 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@cfworker/json-schema

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #bf7e22d401c4169e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/dereference.ts:75 
    : new URL('https://github.com/cfworker');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@composio/core

npm dependency
expand_more 15 low-confidence finding(s)
low env_fs dependency Excluded from app score #990f4d615ad01bd1 — Filesystem access.
pkgs/npm/@[email protected]/src/models/RemoteFile.ts:169 
    platform.writeFileSync(savePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ee0bf6b8521481b — Filesystem access.
pkgs/npm/@[email protected]/src/models/ToolRouterSessionFileMount.ts:135 
      const content = platform.readFileSync(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bd9baaec03db77e — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:47 
      const buf = fs.readFileSync(filePath, { encoding: null });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe1830f9fc7dbe39 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:52 
    const str = fs.readFileSync(filePath, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73ba26d6b8412462 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:62 
      fs.writeFileSync(filePath, content, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #041f5500fe2e3ef6 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:64 
      fs.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1bfd21896f2a863 — Environment-variable access.
pkgs/npm/@[email protected]/src/services/pusher/Pusher.ts:28 
    this.apiKey = client.apiKey ?? process.env.COMPOSIO_API_KEY ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #fa7eb4898d7038eb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:14 
      const result = await fetch(`${TELEMETRY_URL}/metrics/invocations`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3987c9a46fea68ba — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:35 
      const result = await fetch(`${TELEMETRY_URL}/errors`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #13bf8beb004ff043 — Environment-variable access.
pkgs/npm/@[email protected]/src/utils/env.ts:6 
    return process.env[name] || defaultValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfd2cc619e4ed77f — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:135 
    const content = platform.readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a51c835c4dd6ce91 — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:448 
      platform.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3fc911b36736745 — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:450 
      platform.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b701b54d6d18b67b — Filesystem access.
pkgs/npm/@[email protected]/src/utils/sdk.ts:34 
    const data = platform.readFileSync(dataPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #863b5e166d193976 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/utils/version.ts:46 
    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@floating-ui/react

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #5f675ecd609dc6ff — Environment-variable access.
pkgs/npm/@[email protected]/utils/floating-ui.react.utils.esm.js:236 
    if (process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aca8b6cfc4ee8e2a — Environment-variable access.
pkgs/npm/@[email protected]/utils/floating-ui.react.utils.esm.js:422 
      if (process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@lexical/utils

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #8bc4f1b66632a2c6 — Environment-variable access.
pkgs/npm/@[email protected]/src/index.ts:99 
const __DEV__ = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@lobehub/editor

npm dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #be3f2fcac2938e40 — Environment-variable access.
pkgs/npm/@[email protected]/es/headless.js:256 
process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06ffd96427cea5a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/utils/debug.js:188 
				const envDebug = typeof process !== "undefined" ? process.env.DEBUG : void 0;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4772fb658ba23327 — Environment-variable access.
pkgs/npm/@[email protected]/es/utils/debug.js:204 
				enabled: (typeof process !== "undefined" ? process.env.DEBUG : void 0) || false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9cd357d00d4c9c8f — Environment-variable access.
pkgs/npm/@[email protected]/scripts/postinstall-lexical-patch.cjs:165 
  const override = process.env.LOBE_EDITOR_LEXICAL_ROOT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e866422b30d54985 — Filesystem access.
pkgs/npm/@[email protected]/scripts/postinstall-lexical-patch.cjs:181 
    fs.readFileSync(path.join(lexicalRoot, 'package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #50e9896634aab69d — Filesystem access.
pkgs/npm/@[email protected]/scripts/postinstall-lexical-patch.cjs:191 
  const patchText = fs.readFileSync(PATCH_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0d2a6732ad790354 — Filesystem access.
pkgs/npm/@[email protected]/scripts/postinstall-lexical-patch.cjs:202 
    const currentContent = fs.readFileSync(targetPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #4650271151aebb45 — Filesystem access.
pkgs/npm/@[email protected]/scripts/postinstall-lexical-patch.cjs:224 
    fs.writeFileSync(
      targetPath,
      restoreLineEndings(patchedContent, detectLineEnding(currentContent)),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@lobehub/ui

npm dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #b0d1c8081888d2be — Environment-variable access.
pkgs/npm/@[email protected]/es/base-ui/ContextMenu/ContextMenuHost.mjs:21 
		const DEV = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e49a825be2cb26dc — Environment-variable access.
pkgs/npm/@[email protected]/es/base-ui/Popover/context.mjs:4 
const PopoverContext = createContext({ close: process.env.NODE_ENV === "production" ? () => void 0 : () => {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9e6afc272ca0549 — Environment-variable access.
pkgs/npm/@[email protected]/es/base-ui/zIndex/manager.mjs:12 
	if (process.env.NODE_ENV !== "production" && !warnedMainOverflow && mainTop >= Z_INDEX_LAYER.toast) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e48ee4c904c9541e — Environment-variable access.
pkgs/npm/@[email protected]/es/mdx/Mdx/index.mjs:21 
const runtime = process.env.NODE_ENV === "production" ? jsxRuntime : jsxDevRuntime;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c31f609c9026bb5d — Environment-variable access.
pkgs/npm/@[email protected]/es/mdx/Mdx/index.mjs:65 
					development: process.env.NODE_ENV !== "production",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfb09006b131c6d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/utils/devSingleton.mjs:2 
const DEV = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • @atlaskit/pragmatic-drag-and-drop prod — dist-only: no readable source
  • @azure-rest/ai-inference prod — dist-only: no readable source
  • @azure/core-auth prod — dist-only: no readable source
  • @better-auth/expo prod — dist-only: no readable source
  • @better-auth/passkey prod — dist-only: no readable source
  • @chat-adapter/discord prod — dist-only: no readable source
  • @chat-adapter/slack prod — dist-only: no readable source
  • @chat-adapter/state-ioredis prod — dist-only: no readable source
  • @chat-adapter/telegram prod — dist-only: no readable source
  • @codesandbox/sandpack-react prod — dist-only: no readable source
  • @discordjs/rest prod — dist-only: no readable source
  • @dnd-kit/core prod — dist-only: no readable source
  • @dnd-kit/sortable prod — dist-only: no readable source
  • @dnd-kit/utilities prod — dist-only: no readable source
  • @emoji-mart/react prod — dist-only: no readable source
  • @google/genai prod — dist-only: no readable source
  • @lobechat/agent-gateway-client prod — registry 404
  • @lobechat/agent-mock prod — registry 404
  • @lobechat/agent-runtime prod — registry 404
  • @lobechat/agent-signal prod — registry 404
  • @lobechat/agent-templates prod — registry 404
  • @lobechat/builtin-agents prod — registry 404
  • @lobechat/builtin-skills prod — registry 404
  • @lobechat/builtin-tool-activator prod — registry 404
  • @lobechat/builtin-tool-agent-builder prod — registry 404
  • @lobechat/builtin-tool-agent-documents prod — registry 404
  • @lobechat/builtin-tool-agent-management prod — registry 404
  • @lobechat/builtin-tool-agent-signal prod — registry 404
  • @lobechat/builtin-tool-brief prod — registry 404
  • @lobechat/builtin-tool-calculator prod — registry 404
  • @lobechat/builtin-tool-claude-code prod — registry 404
  • @lobechat/builtin-tool-cloud-sandbox prod — registry 404
  • @lobechat/builtin-tool-creds prod — registry 404
  • @lobechat/builtin-tool-group-agent-builder prod — registry 404
  • @lobechat/builtin-tool-group-management prod — registry 404
  • @lobechat/builtin-tool-knowledge-base prod — registry 404
  • @lobechat/builtin-tool-lobe-agent prod — registry 404
  • @lobechat/builtin-tool-lobe-delivery-checker prod — registry 404
  • @lobechat/builtin-tool-local-system prod — registry 404
  • @lobechat/builtin-tool-memory prod — registry 404
  • @lobechat/builtin-tool-message prod — registry 404
  • @lobechat/builtin-tool-notebook prod — registry 404
  • @lobechat/builtin-tool-page-agent prod — registry 404
  • @lobechat/builtin-tool-remote-device prod — registry 404
  • @lobechat/builtin-tool-self-iteration prod — registry 404
  • @lobechat/builtin-tool-skill-maintainer prod — registry 404
  • @lobechat/builtin-tool-skill-store prod — registry 404
  • @lobechat/builtin-tool-skills prod — registry 404
  • @lobechat/builtin-tool-task prod — registry 404
  • @lobechat/builtin-tool-topic-reference prod — registry 404
  • @lobechat/builtin-tool-user-interaction prod — registry 404
  • @lobechat/builtin-tool-verify prod — registry 404
  • @lobechat/builtin-tool-web-browsing prod — registry 404
  • @lobechat/builtin-tool-web-onboarding prod — registry 404
  • @lobechat/builtin-tools prod — registry 404
  • @lobechat/business-config prod — registry 404
  • @lobechat/business-const prod — registry 404
  • @lobechat/business-model-bank prod — registry 404
  • @lobechat/business-model-runtime prod — registry 404
  • @lobechat/chat-adapter-feishu prod — registry 404
  • @lobechat/chat-adapter-imessage prod — registry 404
  • @lobechat/chat-adapter-line prod — registry 404
  • @lobechat/chat-adapter-qq prod — registry 404
  • @lobechat/chat-adapter-wechat prod — registry 404
  • @lobechat/config prod — registry 404
  • @lobechat/const prod — registry 404
  • @lobechat/context-engine prod — registry 404
  • @lobechat/conversation-flow prod — registry 404
  • @lobechat/database prod — registry 404
  • @lobechat/desktop-bridge prod — registry 404
  • @lobechat/device-gateway-client prod — registry 404
  • @lobechat/edge-config prod — registry 404
  • @lobechat/editor-runtime prod — registry 404
  • @lobechat/electron-client-ipc prod — registry 404
  • @lobechat/electron-server-ipc prod — registry 404
  • @lobechat/eval-dataset-parser prod — registry 404
  • @lobechat/eval-rubric prod — registry 404
  • @lobechat/fetch-sse prod — registry 404
  • @lobechat/file-loaders prod — registry 404
  • @lobechat/heterogeneous-agents prod — registry 404
  • @lobechat/llm-generation-tracing prod — registry 404
  • @lobechat/local-file-shell prod — registry 404
  • @lobechat/markdown-patch prod — registry 404
  • @lobechat/memory-user-memory prod — registry 404
  • @lobechat/model-runtime prod — registry 404
  • @lobechat/observability-otel prod — registry 404
  • @lobechat/openapi prod — registry 404
  • @lobechat/prompts prod — registry 404
  • @lobechat/python-interpreter prod — registry 404
  • @lobechat/shared-tool-ui prod — registry 404
  • @lobechat/ssrf-safe-fetch prod — registry 404
  • @lobechat/tool-runtime prod — registry 404
  • @lobechat/utils prod — registry 404
  • @lobechat/web-crawler prod — registry 404
  • @lobehub/analytics prod — dist-only: no readable source
  • @lobehub/desktop-ipc-typings prod — registry 404
  • @lobehub/market-sdk prod — dist-only: no readable source
  • @modelcontextprotocol/sdk prod — scan budget exceeded
  • @napi-rs/canvas prod — scan budget exceeded
  • @neondatabase/serverless prod — scan budget exceeded
  • @next/third-parties prod — scan budget exceeded
  • @opentelemetry/auto-instrumentations-node prod — scan budget exceeded
  • @opentelemetry/exporter-jaeger prod — scan budget exceeded
  • @opentelemetry/resources prod — scan budget exceeded
  • @opentelemetry/sdk-metrics prod — scan budget exceeded
  • @opentelemetry/winston-transport prod — scan budget exceeded
  • @pierre/trees prod — scan budget exceeded
  • @react-pdf/renderer prod — scan budget exceeded
  • @react-three/drei prod — scan budget exceeded
  • @react-three/fiber prod — scan budget exceeded
  • @saintno/comfyui-sdk prod — scan budget exceeded
  • @t3-oss/env-core prod — scan budget exceeded
  • @t3-oss/env-nextjs prod — scan budget exceeded
  • @tanstack/react-query prod — scan budget exceeded
  • @trpc/client prod — scan budget exceeded
  • @trpc/next prod — scan budget exceeded
  • @trpc/react-query prod — scan budget exceeded
  • @trpc/server prod — scan budget exceeded
  • @upstash/qstash prod — scan budget exceeded
  • @upstash/workflow prod — scan budget exceeded
  • @vercel/analytics prod — scan budget exceeded
  • @vercel/edge-config prod — scan budget exceeded
  • @vercel/functions prod — scan budget exceeded
  • @vercel/speed-insights prod — scan budget exceeded
  • @virtuoso.dev/masonry prod — scan budget exceeded
  • @xterm/xterm prod — scan budget exceeded
  • @zumer/snapdom prod — scan budget exceeded
  • ahooks prod — scan budget exceeded
  • antd prod — scan budget exceeded
  • antd-style prod — scan budget exceeded
  • async-retry prod — scan budget exceeded
  • bcryptjs prod — scan budget exceeded
  • better-auth prod — scan budget exceeded
  • brotli-wasm prod — scan budget exceeded
  • buffer.js prod — scan budget exceeded
  • chat prod — scan budget exceeded
  • chroma-js prod — scan budget exceeded
  • class-variance-authority prod — scan budget exceeded
  • cmdk prod — scan budget exceeded
  • cookie prod — scan budget exceeded
  • countries-and-timezones prod — scan budget exceeded
  • d3-dsv prod — scan budget exceeded
  • dayjs prod — scan budget exceeded
  • debug prod — scan budget exceeded
  • dexie prod — scan budget exceeded
  • diff prod — scan budget exceeded
  • discord-api-types prod — scan budget exceeded
  • drizzle-orm prod — scan budget exceeded
  • drizzle-zod prod — scan budget exceeded
  • epub2 prod — scan budget exceeded
  • es-toolkit prod — scan budget exceeded
  • expo-server-sdk prod — scan budget exceeded
  • fast-deep-equal prod — scan budget exceeded
  • fflate prod — scan budget exceeded
  • ffmpeg-static prod — scan budget exceeded
  • file-type prod — scan budget exceeded
  • fuse.js prod — scan budget exceeded
  • gray-matter prod — scan budget exceeded
  • hono prod — scan budget exceeded
  • html-to-text prod — scan budget exceeded
  • i18next prod — scan budget exceeded
  • i18next-browser-languagedetector prod — scan budget exceeded
  • i18next-resources-to-backend prod — scan budget exceeded
  • immer prod — scan budget exceeded
  • ioredis prod — scan budget exceeded
  • jose prod — scan budget exceeded
  • js-sha256 prod — scan budget exceeded
  • jsondiffpatch prod — scan budget exceeded
  • jsonl-parse-stringify prod — scan budget exceeded
  • langfuse prod — scan budget exceeded
  • langfuse-core prod — scan budget exceeded
  • lexical prod — scan budget exceeded
  • lucide-react prod — scan budget exceeded
  • mammoth prod — scan budget exceeded
  • marked prod — scan budget exceeded