Close Open Privacy Scan

link https://github.com/modelcontextprotocol/servers
bolt Snapshot: commit d31124c
science engine v3
schedule 2026-07-08T11:06:52.601139+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

Incomplete scan — only 7/14 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

97 /100
Low privacy risk

Low risk · 196 finding(s)

Dependency score: 97 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 196 low
First-party packages: 5
Dependency packages: 2
Ecosystem: npm

swap_horiz Application data flows

No high- or medium-confidence application data-flow findings in this scan.

</> First-Party Code

first-party (npm)

npm first-party
expand_more 97 low-confidence finding(s)
low env_fs test-only #1dd0e5fce7c7980b — Environment-variable access.
repo/src/everything/__tests__/tools.test.ts:164 
      process.env.TEST_VAR_EVERYTHING = 'test_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b33e8ccecea2fd57 — Environment-variable access.
repo/src/everything/__tests__/tools.test.ts:173 
      delete process.env.TEST_VAR_EVERYTHING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cc0564a87e88bd0 — Filesystem access.
repo/src/everything/resources/files.ts:4 
import { readdirSync, readFileSync, statSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a61e15dc915520e — Filesystem access.
repo/src/everything/resources/files.ts:85 
    return readFileSync(path, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdd3d54afca9d105 — Filesystem access.
repo/src/everything/resources/index.ts:6 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3090c9ce927092f2 — Filesystem access.
repo/src/everything/resources/index.ts:31 
    instructions = readFileSync(filePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4b10b075ef885b0 — Environment-variable access.
repo/src/everything/tools/gzip-file-as-resource.ts:12 
  process.env.GZIP_MAX_FETCH_SIZE ?? String(10 * 1024 * 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00cba51d5827148a — Environment-variable access.
repo/src/everything/tools/gzip-file-as-resource.ts:17 
  process.env.GZIP_MAX_FETCH_TIME_MILLIS ?? String(30 * 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e3b243ab99e5ab5 — Environment-variable access.
repo/src/everything/tools/gzip-file-as-resource.ts:21 
const GZIP_ALLOWED_DOMAINS = (process.env.GZIP_ALLOWED_DOMAINS ?? "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9cc22128a371310 — Environment-variable access.
repo/src/everything/transports/sse.ts:74 
const PORT = process.env.PORT || 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eccd75e77d9b7da6 — Environment-variable access.
repo/src/everything/transports/streamableHttp.ts:201 
const PORT = process.env.PORT || 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9252f497d1cfd048 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b7f1e3e6c3de256a — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:64 
        await fs.writeFile(path.join(testDir, '.env'), 'SECRET=value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad4d16792a8ac200 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:65 
        await fs.writeFile(path.join(testDir, '.env.local'), 'LOCAL_SECRET=value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #951c72af6b0d1027 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:66 
        await fs.writeFile(path.join(testDir, 'src', 'index.js'), 'console.log("hello");');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fefb42005769b020 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:67 
        await fs.writeFile(path.join(testDir, 'package.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0f4a5d40da3c66a1 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:68 
        await fs.writeFile(path.join(testDir, 'node_modules', 'module.js'), 'module.exports = {};');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d94ff93216ee037 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:69 
        await fs.writeFile(path.join(testDir, 'nested', 'node_modules', 'deep.js'), 'module.exports = {};');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #04afb9b354045876 — Filesystem access.
repo/src/filesystem/__tests__/lib.test.ts:2 
import fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e72ffc625d766fdf — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:3 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #11f52de739b5553c — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:16 
    await fs.writeFile(targetFile, 'test');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c165fb2fb7ca28bc — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:468 
        await fs.writeFile(targetPath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4837a64e3664af4 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:503 
        await fs.writeFile(targetFile, 'TARGET_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b42e805f6619706c — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:533 
        await fs.writeFile(targetFile, 'FILE_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #015e51e2e9602738 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:576 
        await fs.writeFile(targetFile, 'FILE_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #99ccc3c9be640e3d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:618 
        await fs.writeFile(actualTarget, 'FINAL_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7bbf268491b80fd4 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:662 
      await fs.writeFile(targetFile, 'ORIGINAL CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03f4fce9337dfd02 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:692 
      await fs.writeFile(testPath, 'MODIFIED CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #05e097d19523544a — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:694 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59e06b5d76149049 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:755 
      await fs.writeFile(testPath, 'NEW CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #821a2c84316c8461 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:756 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #625556d4e64e757b — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:800 
      await fs.writeFile(deepPath, 'CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #804761302366f274 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:821 
      await fs.writeFile(targetFile, 'ORIGINAL CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f949b0052f42bd47 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:832 
        fs.writeFile(racePath, 'NEW CONTENT', { encoding: 'utf-8', flag: 'wx' })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b4e5b4025f980a96 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:836 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7d54660061079dec — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:850 
      await fs.writeFile(legitFile, 'ORIGINAL', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #afae850d023bda6e — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:860 
      const content = await fs.readFile(legitFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1f5fe62730609ff1 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:876 
      await fs.writeFile(targetFile, 'TARGET CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dfb00c89eb53aaff — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:890 
      const symlinkContent = await fs.readFile(symlinkPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #00cff19594c09a4a — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:891 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3724ecf50ef3980 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:908 
      await fs.writeFile(legitFile, 'LEGIT CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dcee0e901a8bf999 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:911 
      await fs.writeFile(targetFile, 'FORBIDDEN CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2d922ee443dfac3d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:928 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa08b148feaa8b3d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:944 
      await fs.writeFile(legitFile, 'PUBLIC CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9f3c88e7efcfa2d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:947 
      await fs.writeFile(secretFile, 'SECRET CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d9a2a46375b2d4e — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:957 
      const content = await fs.readFile(legitFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #35500132b1667dab — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:977 
      await fs.writeFile(forbiddenTarget, 'ORIGINAL CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e7c0eafe213f7e5a — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:983 
      await fs.writeFile(tempFile, 'NEW CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e3076f74ea7e9ea7 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:991 
      const targetContent = await fs.readFile(targetSymlink, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5f94b583828c20cd — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:992 
      const forbiddenContent = await fs.readFile(forbiddenTarget, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f54a68953e658f0b — Filesystem access.
repo/src/filesystem/__tests__/roots-utils.test.ts:3 
import { mkdtempSync, rmSync, mkdirSync, writeFileSync, realpathSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1532676744eb1cdd — Filesystem access.
repo/src/filesystem/__tests__/roots-utils.test.ts:22 
    writeFileSync(testFile, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9940b4fb94ab9602 — Filesystem access.
repo/src/filesystem/__tests__/startup-validation.test.ts:4 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eef54ca8970a7574 — Filesystem access.
repo/src/filesystem/__tests__/startup-validation.test.ts:89 
    await fs.writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3116d812c60a816b — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1f7d3a56cd70f8cb — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:28 
    await fs.writeFile(path.join(testDir, 'test.txt'), 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ba7f374bb2ce6ec4 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:30 
    await fs.writeFile(path.join(testDir, 'subdir', 'nested.txt'), 'nested content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0fe59598713dfede — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:174 
      await fs.writeFile(pngPath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #731255dbaeffa651 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:196 
      await fs.writeFile(mp3Path, mp3Bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb6c28b5da783534 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:213 
      await fs.writeFile(binPath, binBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9fbf931837c5b8f6 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:244 
      await fs.writeFile(fancyPath, Buffer.from([0x10, 0x20, 0x30]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98b470f7946a785c — Filesystem access.
repo/src/filesystem/index.ts:9 
import fs from "fs/promises";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e524a2e793781a16 — Filesystem access.
repo/src/filesystem/index.ts:10 
import { createReadStream } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7390a3acfc052a76 — Filesystem access.
repo/src/filesystem/lib.ts:1 
import fs from "fs/promises";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f62254178825705e — Filesystem access.
repo/src/filesystem/lib.ts:158 
  return await fs.readFile(filePath, encoding as BufferEncoding);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #451b90c7e2b87aae — Filesystem access.
repo/src/filesystem/lib.ts:165 
    await fs.writeFile(filePath, content, { encoding: "utf-8", flag: 'wx' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #735097a321655e58 — Filesystem access.
repo/src/filesystem/lib.ts:173 
        await fs.writeFile(tempPath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e9d130325edf1a — Filesystem access.
repo/src/filesystem/lib.ts:200 
  const content = normalizeLineEndings(await fs.readFile(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e243b22e2be5ba4c — Filesystem access.
repo/src/filesystem/lib.ts:271 
      await fs.writeFile(tempPath, modifiedContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2501ab8fa7b68a7 — Filesystem access.
repo/src/filesystem/roots-utils.ts:1 
import { promises as fs, type Stats } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8df9aae929c4cd17 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:2 
import { promises as fs } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2bbc58bf1ddd371 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:16 
    originalEnv = process.env.MEMORY_FILE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6aed3dd862d92f38 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:18 
    delete process.env.MEMORY_FILE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4bf4e4873abeccf5 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:24 
      process.env.MEMORY_FILE_PATH = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27e8ddf575fa0c6e — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:26 
      delete process.env.MEMORY_FILE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a50cf6ec810fcba1 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:45 
      process.env.MEMORY_FILE_PATH = absolutePath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #06aa26f7d0d6459a — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:54 
      process.env.MEMORY_FILE_PATH = relativePath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #92011e38eafc85c2 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:64 
      process.env.MEMORY_FILE_PATH = windowsPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c6fa66301731c467 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:86 
      await fs.writeFile(oldMemoryPath, '{"test":"data"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb0f393d98133e5d — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:114 
      await fs.writeFile(oldMemoryPath, '{"old":"data"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c5d689586616488e — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:115 
      await fs.writeFile(newMemoryPath, '{"new":"data"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed7906b195138352 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:138 
      await fs.writeFile(oldMemoryPath, testContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9171db19e806d738 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:142 
      const migratedContent = await fs.readFile(newMemoryPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #40ecf68c95556e36 — Filesystem access.
repo/src/memory/__tests__/knowledge-graph.test.ts:2 
import { promises as fs } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb4c5ee61547abc2 — Filesystem access.
repo/src/memory/__tests__/knowledge-graph.test.ts:421 
      const fileContent = await fs.readFile(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d65a2273e9d6c862 — Filesystem access.
repo/src/memory/__tests__/knowledge-graph.test.ts:440 
      const fileContent = await fs.readFile(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1673f7067b32841b — Filesystem access.
repo/src/memory/index.ts:7 
import { promises as fs } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2380d491480b7271 — Environment-variable access.
repo/src/memory/index.ts:16 
  if (process.env.MEMORY_FILE_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdb79e53b71f0aa2 — Environment-variable access.
repo/src/memory/index.ts:18 
    return path.isAbsolute(process.env.MEMORY_FILE_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #568f3bb32a54ab20 — Environment-variable access.
repo/src/memory/index.ts:19 
      ? process.env.MEMORY_FILE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dafb4529dfdd96d — Environment-variable access.
repo/src/memory/index.ts:20 
      : path.join(path.dirname(fileURLToPath(import.meta.url)), process.env.MEMORY_FILE_PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca5713beca40aee8 — Filesystem access.
repo/src/memory/index.ts:74 
      const data = await fs.readFile(this.memoryFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d39248fbf6ae5637 — Filesystem access.
repo/src/memory/index.ts:117 
    await fs.writeFile(this.memoryFilePath, lines.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #af432813c9034115 — Environment-variable access.
repo/src/sequentialthinking/__tests__/lib.test.ts:21 
    process.env.DISABLE_THOUGHT_LOGGING = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ebc82e44821a8bc — Environment-variable access.
repo/src/sequentialthinking/__tests__/lib.test.ts:259 
      delete process.env.DISABLE_THOUGHT_LOGGING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d097ac76d660b12 — Environment-variable access.
repo/src/sequentialthinking/__tests__/lib.test.ts:265 
      process.env.DISABLE_THOUGHT_LOGGING = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #553997556b14660e — Environment-variable access.
repo/src/sequentialthinking/lib.ts:21 
    this.disableThoughtLogging = (process.env.DISABLE_THOUGHT_LOGGING || "").toLowerCase() === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): src/everything

npm first-party
expand_more 11 low-confidence finding(s)
low env_fs test-only #1dd0e5fce7c7980b — Environment-variable access.
repo/src/everything/__tests__/tools.test.ts:164 
      process.env.TEST_VAR_EVERYTHING = 'test_value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b33e8ccecea2fd57 — Environment-variable access.
repo/src/everything/__tests__/tools.test.ts:173 
      delete process.env.TEST_VAR_EVERYTHING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cc0564a87e88bd0 — Filesystem access.
repo/src/everything/resources/files.ts:4 
import { readdirSync, readFileSync, statSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a61e15dc915520e — Filesystem access.
repo/src/everything/resources/files.ts:85 
    return readFileSync(path, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdd3d54afca9d105 — Filesystem access.
repo/src/everything/resources/index.ts:6 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3090c9ce927092f2 — Filesystem access.
repo/src/everything/resources/index.ts:31 
    instructions = readFileSync(filePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4b10b075ef885b0 — Environment-variable access.
repo/src/everything/tools/gzip-file-as-resource.ts:12 
  process.env.GZIP_MAX_FETCH_SIZE ?? String(10 * 1024 * 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00cba51d5827148a — Environment-variable access.
repo/src/everything/tools/gzip-file-as-resource.ts:17 
  process.env.GZIP_MAX_FETCH_TIME_MILLIS ?? String(30 * 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e3b243ab99e5ab5 — Environment-variable access.
repo/src/everything/tools/gzip-file-as-resource.ts:21 
const GZIP_ALLOWED_DOMAINS = (process.env.GZIP_ALLOWED_DOMAINS ?? "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9cc22128a371310 — Environment-variable access.
repo/src/everything/transports/sse.ts:74 
const PORT = process.env.PORT || 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eccd75e77d9b7da6 — Environment-variable access.
repo/src/everything/transports/streamableHttp.ts:201 
const PORT = process.env.PORT || 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): src/filesystem

npm first-party
expand_more 59 low-confidence finding(s)
low env_fs test-only #9252f497d1cfd048 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b7f1e3e6c3de256a — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:64 
        await fs.writeFile(path.join(testDir, '.env'), 'SECRET=value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad4d16792a8ac200 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:65 
        await fs.writeFile(path.join(testDir, '.env.local'), 'LOCAL_SECRET=value');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #951c72af6b0d1027 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:66 
        await fs.writeFile(path.join(testDir, 'src', 'index.js'), 'console.log("hello");');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fefb42005769b020 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:67 
        await fs.writeFile(path.join(testDir, 'package.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0f4a5d40da3c66a1 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:68 
        await fs.writeFile(path.join(testDir, 'node_modules', 'module.js'), 'module.exports = {};');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d94ff93216ee037 — Filesystem access.
repo/src/filesystem/__tests__/directory-tree.test.ts:69 
        await fs.writeFile(path.join(testDir, 'nested', 'node_modules', 'deep.js'), 'module.exports = {};');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #04afb9b354045876 — Filesystem access.
repo/src/filesystem/__tests__/lib.test.ts:2 
import fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e72ffc625d766fdf — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:3 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #11f52de739b5553c — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:16 
    await fs.writeFile(targetFile, 'test');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c165fb2fb7ca28bc — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:468 
        await fs.writeFile(targetPath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4837a64e3664af4 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:503 
        await fs.writeFile(targetFile, 'TARGET_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b42e805f6619706c — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:533 
        await fs.writeFile(targetFile, 'FILE_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #015e51e2e9602738 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:576 
        await fs.writeFile(targetFile, 'FILE_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #99ccc3c9be640e3d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:618 
        await fs.writeFile(actualTarget, 'FINAL_CONTENT');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7bbf268491b80fd4 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:662 
      await fs.writeFile(targetFile, 'ORIGINAL CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03f4fce9337dfd02 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:692 
      await fs.writeFile(testPath, 'MODIFIED CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #05e097d19523544a — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:694 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59e06b5d76149049 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:755 
      await fs.writeFile(testPath, 'NEW CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #821a2c84316c8461 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:756 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #625556d4e64e757b — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:800 
      await fs.writeFile(deepPath, 'CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #804761302366f274 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:821 
      await fs.writeFile(targetFile, 'ORIGINAL CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f949b0052f42bd47 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:832 
        fs.writeFile(racePath, 'NEW CONTENT', { encoding: 'utf-8', flag: 'wx' })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b4e5b4025f980a96 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:836 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7d54660061079dec — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:850 
      await fs.writeFile(legitFile, 'ORIGINAL', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #afae850d023bda6e — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:860 
      const content = await fs.readFile(legitFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1f5fe62730609ff1 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:876 
      await fs.writeFile(targetFile, 'TARGET CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dfb00c89eb53aaff — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:890 
      const symlinkContent = await fs.readFile(symlinkPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #00cff19594c09a4a — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:891 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3724ecf50ef3980 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:908 
      await fs.writeFile(legitFile, 'LEGIT CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dcee0e901a8bf999 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:911 
      await fs.writeFile(targetFile, 'FORBIDDEN CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2d922ee443dfac3d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:928 
      const targetContent = await fs.readFile(targetFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa08b148feaa8b3d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:944 
      await fs.writeFile(legitFile, 'PUBLIC CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9f3c88e7efcfa2d — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:947 
      await fs.writeFile(secretFile, 'SECRET CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d9a2a46375b2d4e — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:957 
      const content = await fs.readFile(legitFile, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #35500132b1667dab — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:977 
      await fs.writeFile(forbiddenTarget, 'ORIGINAL CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e7c0eafe213f7e5a — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:983 
      await fs.writeFile(tempFile, 'NEW CONTENT', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e3076f74ea7e9ea7 — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:991 
      const targetContent = await fs.readFile(targetSymlink, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5f94b583828c20cd — Filesystem access.
repo/src/filesystem/__tests__/path-validation.test.ts:992 
      const forbiddenContent = await fs.readFile(forbiddenTarget, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f54a68953e658f0b — Filesystem access.
repo/src/filesystem/__tests__/roots-utils.test.ts:3 
import { mkdtempSync, rmSync, mkdirSync, writeFileSync, realpathSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1532676744eb1cdd — Filesystem access.
repo/src/filesystem/__tests__/roots-utils.test.ts:22 
    writeFileSync(testFile, 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9940b4fb94ab9602 — Filesystem access.
repo/src/filesystem/__tests__/startup-validation.test.ts:4 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eef54ca8970a7574 — Filesystem access.
repo/src/filesystem/__tests__/startup-validation.test.ts:89 
    await fs.writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3116d812c60a816b — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1f7d3a56cd70f8cb — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:28 
    await fs.writeFile(path.join(testDir, 'test.txt'), 'test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ba7f374bb2ce6ec4 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:30 
    await fs.writeFile(path.join(testDir, 'subdir', 'nested.txt'), 'nested content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0fe59598713dfede — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:174 
      await fs.writeFile(pngPath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #731255dbaeffa651 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:196 
      await fs.writeFile(mp3Path, mp3Bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb6c28b5da783534 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:213 
      await fs.writeFile(binPath, binBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9fbf931837c5b8f6 — Filesystem access.
repo/src/filesystem/__tests__/structured-content.test.ts:244 
      await fs.writeFile(fancyPath, Buffer.from([0x10, 0x20, 0x30]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98b470f7946a785c — Filesystem access.
repo/src/filesystem/index.ts:9 
import fs from "fs/promises";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e524a2e793781a16 — Filesystem access.
repo/src/filesystem/index.ts:10 
import { createReadStream } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7390a3acfc052a76 — Filesystem access.
repo/src/filesystem/lib.ts:1 
import fs from "fs/promises";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f62254178825705e — Filesystem access.
repo/src/filesystem/lib.ts:158 
  return await fs.readFile(filePath, encoding as BufferEncoding);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #451b90c7e2b87aae — Filesystem access.
repo/src/filesystem/lib.ts:165 
    await fs.writeFile(filePath, content, { encoding: "utf-8", flag: 'wx' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #735097a321655e58 — Filesystem access.
repo/src/filesystem/lib.ts:173 
        await fs.writeFile(tempPath, content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e9d130325edf1a — Filesystem access.
repo/src/filesystem/lib.ts:200 
  const content = normalizeLineEndings(await fs.readFile(filePath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e243b22e2be5ba4c — Filesystem access.
repo/src/filesystem/lib.ts:271 
      await fs.writeFile(tempPath, modifiedContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2501ab8fa7b68a7 — Filesystem access.
repo/src/filesystem/roots-utils.ts:1 
import { promises as fs, type Stats } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): src/memory

npm first-party
expand_more 23 low-confidence finding(s)
low env_fs test-only #8df9aae929c4cd17 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:2 
import { promises as fs } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2bbc58bf1ddd371 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:16 
    originalEnv = process.env.MEMORY_FILE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6aed3dd862d92f38 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:18 
    delete process.env.MEMORY_FILE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4bf4e4873abeccf5 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:24 
      process.env.MEMORY_FILE_PATH = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27e8ddf575fa0c6e — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:26 
      delete process.env.MEMORY_FILE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a50cf6ec810fcba1 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:45 
      process.env.MEMORY_FILE_PATH = absolutePath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #06aa26f7d0d6459a — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:54 
      process.env.MEMORY_FILE_PATH = relativePath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #92011e38eafc85c2 — Environment-variable access.
repo/src/memory/__tests__/file-path.test.ts:64 
      process.env.MEMORY_FILE_PATH = windowsPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c6fa66301731c467 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:86 
      await fs.writeFile(oldMemoryPath, '{"test":"data"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb0f393d98133e5d — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:114 
      await fs.writeFile(oldMemoryPath, '{"old":"data"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c5d689586616488e — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:115 
      await fs.writeFile(newMemoryPath, '{"new":"data"}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed7906b195138352 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:138 
      await fs.writeFile(oldMemoryPath, testContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9171db19e806d738 — Filesystem access.
repo/src/memory/__tests__/file-path.test.ts:142 
      const migratedContent = await fs.readFile(newMemoryPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #40ecf68c95556e36 — Filesystem access.
repo/src/memory/__tests__/knowledge-graph.test.ts:2 
import { promises as fs } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb4c5ee61547abc2 — Filesystem access.
repo/src/memory/__tests__/knowledge-graph.test.ts:421 
      const fileContent = await fs.readFile(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d65a2273e9d6c862 — Filesystem access.
repo/src/memory/__tests__/knowledge-graph.test.ts:440 
      const fileContent = await fs.readFile(testFilePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1673f7067b32841b — Filesystem access.
repo/src/memory/index.ts:7 
import { promises as fs } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2380d491480b7271 — Environment-variable access.
repo/src/memory/index.ts:16 
  if (process.env.MEMORY_FILE_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdb79e53b71f0aa2 — Environment-variable access.
repo/src/memory/index.ts:18 
    return path.isAbsolute(process.env.MEMORY_FILE_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #568f3bb32a54ab20 — Environment-variable access.
repo/src/memory/index.ts:19 
      ? process.env.MEMORY_FILE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dafb4529dfdd96d — Environment-variable access.
repo/src/memory/index.ts:20 
      : path.join(path.dirname(fileURLToPath(import.meta.url)), process.env.MEMORY_FILE_PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca5713beca40aee8 — Filesystem access.
repo/src/memory/index.ts:74 
      const data = await fs.readFile(this.memoryFilePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d39248fbf6ae5637 — Filesystem access.
repo/src/memory/index.ts:117 
    await fs.writeFile(this.memoryFilePath, lines.join("\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): src/sequentialthinking

npm first-party
expand_more 4 low-confidence finding(s)
low env_fs test-only #af432813c9034115 — Environment-variable access.
repo/src/sequentialthinking/__tests__/lib.test.ts:21 
    process.env.DISABLE_THOUGHT_LOGGING = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ebc82e44821a8bc — Environment-variable access.
repo/src/sequentialthinking/__tests__/lib.test.ts:259 
      delete process.env.DISABLE_THOUGHT_LOGGING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d097ac76d660b12 — Environment-variable access.
repo/src/sequentialthinking/__tests__/lib.test.ts:265 
      process.env.DISABLE_THOUGHT_LOGGING = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #553997556b14660e — Environment-variable access.
repo/src/sequentialthinking/lib.ts:21 
    this.disableThoughtLogging = (process.env.DISABLE_THOUGHT_LOGGING || "").toLowerCase() === "true";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

express

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #20190bebc1d8b0d4 — Environment-variable access.
pkgs/npm/[email protected]/lib/application.js:91 
  var env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

yargs

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #45b2fa69255c61be — Environment-variable access.
pkgs/npm/[email protected]/lib/platform-shims/esm.mjs:29 
    return process.env[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • @modelcontextprotocol/server-everything prod — dist-only: no readable source
  • @modelcontextprotocol/server-memory prod — dist-only: no readable source
  • @modelcontextprotocol/server-filesystem prod — dist-only: no readable source
  • @modelcontextprotocol/server-sequential-thinking prod — dist-only: no readable source
  • @modelcontextprotocol/sdk prod — dist-only: no readable source
  • glob prod — dist-only: no readable source
  • minimatch prod — dist-only: no readable source