Close Open Privacy Scan

bolt Snapshot: commit 9383bf7
science engine v1.22
schedule 2026-07-21T06:10:41.994419+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: anthropic, mcp — detected in dependencies, not a safety judgment.

App Privacy Score

100 /100
Low privacy risk

Low risk · 1 finding(s)

Dependency score: 98 (Low risk)

bar_chart Score Breakdown

No category deductions recorded.

list Scan Summary

0 high 0 medium 1 low
First-party packages: 0
Dependency packages: 1
Ecosystem: java

swap_horiz External domains

::ffff:192.168.0.1acme.comagno-public.s3.us-east-1.amazonaws.comagno.comai.google.devaiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comalembic.sqlalchemy.organgular.devapi-stg.agno.comapi.aimlapi.comapi.anthropic.comapi.cerebras.aiapi.cometapi.comapi.deepinfra.comapi.deepseek.comapi.fireworks.aiapi.github.comapi.ipify.orgapi.jina.aiapi.llama.comapi.moonshot.aiapi.n1n.aiapi.nasa.govapi.neosantara.xyzapi.perplexity.aiapi.sambanova.aiapi.siliconflow.cnapi.slack.comapi.telegram.orgapi.together.xyzapi.tokenfactory.nebius.comapi.us-east-1.langdb.aiapi.v0.devapi.voyageai.comapi.x.aiapp.agno.comarstechnica.combitbucket.orgblog.famzah.netbootlin.comboto3.amazonaws.combrotlipy.readthedocs.iobrowsercookielimits.squawky.netbugs.python.orgchromium.googlesource.comclang.llvm.orgclangd.llvm.orgclaude.googleapis.comclojure.orgcloud.google.comcode.activestate.comcode.google.comcode.visualstudio.comconsole.cloud.google.comconsole.groq.comcore.telegram.orgcryptography.iocx-oracle.readthedocs.iodashscope-intl.aliyuncs.comdask.pydata.orgdatabase.windows.netdataplatform.cloud.ibm.comdatatracker.ietf.orgdev.mysql.comdev.w3.orgdeveloper.apple.comdeveloper.hashicorp.comdeveloper.mozilla.orgdevtools.vuejs.orgdiscord.comdiscordpy.readthedocs.iodiscuss.ocaml.orgdiscuss.python.orgdistributed.dask.orgdoc.qt.iodocs.anthropic.comdocs.astral.shdocs.aws.amazon.comdocs.claude.comdocs.cohere.comdocs.dask.orgdocs.litellm.aidocs.microsoft.comdocs.mistral.aidocs.ollama.comdocs.pydantic.devdocs.python.orgdocs.rsdocs.scipy.orgdocs.vllm.aidocs.zilliz.comdot.netdotnet.microsoft.comdownload-cdn.jetbrains.comdownload.eclipse.orgdownload.oracle.comelixir-lang.orgempty.comen.wikipedia.orgepydoc.sourceforge.neterrors.pydantic.deveu-de.ml.cloud.ibm.comexam_ple.comexample-resource.services.ai.azure.comfacelessuser.github.iofdopen.github.ioflask.palletsprojects.comfonts.googleapis.comfoo.comgenerativelanguage.googleapis.comgist.github.comgit.kernel.orggithub.comgitlab.comgolang.orggoo.glgoogle.aip.devgoogle.comgoogleapis.github.iograph.facebook.comgraph.microsoft.comhelp.github.comhost.docker.internalhtml.spec.whatwg.orghttpbin.orghttpwg.orghuggingface.cohynek.mehypothesis.readthedocs.ioik.imagekit.ioimg.website.comintegrate.api.nvidia.cominternlm-chat.intern-ai.org.cnip-api.comipywidgets.readthedocs.iojoblib.readthedocs.iojson-schema.orgjsonlines.orgjulialang.orglearn.microsoft.comlegacy.python.orglinuxdevcenter.comlists.sourceforge.netllmstxt.orglogin.microsoftonline.comluau-lsp.pages.devmagicstack.github.iomail.python.orgmarketplace.visualstudio.commcp.exa.aimetacpan.orgmicrosoft.github.iomilvus.iomise.jdx.devmodelcontextprotocol.iomsdn.microsoft.commypy.readthedocs.iomysite.cloudinary.commüller.denats.ionixos.orgnodatime.orgnumpy.orgnumpydoc.readthedocs.ioofficial-joke-api.appspot.comollama.comopam.ocaml.orgopen-vsx.orgopenaipublic.blob.core.windows.netopenresponses.orgopenrouter.aioracle.github.iooraios-software.deoraios.github.ioos-api.agno.comos-stg.agno.comos.agno.comother.compackaging.python.orgpeps.python.orgpinia.vuejs.orgpkg.go.devplatform.claude.complatform.openai.complugins.jetbrains.comprojectlombok.orgpydantic-docs.helpmanual.iopymysql.readthedocs.iopypi.orgpypi.python.orgpyrefly.orgpython-devtools.helpmanual.iopython-lz4.readthedocs.iopython-oracledb.readthedocs.iopywebview.flowrl.compyyaml.orgqdrant.github.ioqdrant.techraw.githubusercontent.comreleases.hashicorp.comrequests.readthedocs.iores.cloudinary.comrich.readthedocs.iorouter.requesty.airubygems.orgrustup.rssearch.parallel.aiserverfault.comservices.gradle.orgsethmlarson.devsomepath.imgix.netsourceforge.netspec.openapis.orgsqlalche.mesqlite.orgstackoverflow.comstorage.googleapis.comsubdomain.mysite.comswagger.iotechnet.microsoft.comtechspot.zzzeek.orgtools.ietf.orgtowardsdatascience.comtqdm.github.iotwitter.comurllib3.readthedocs.iov0.devvisualstudioexptteam.gallery.vsassets.ioweb.archive.orgweb.devwheel.readthedocs.iowww.agno.comwww.crummy.comwww.erlang.orgwww.example.珠宝www.freetds.orgwww.gevent.orgwww.github.comwww.googleapis.comwww.haskell.orgwww.iana.orgwww.ibm.comwww.ietf.orgwww.jsonrpc.orgwww.mongodb.comwww.nuget.orgwww.oracle.comwww.perl.orgwww.picloud.comwww.postgresql.orgwww.psycopg.orgwww.pyopenssl.orgwww.python.orgwww.r-project.orgwww.rfc-editor.orgwww.schemastore.orgwww.sqlite.orgwww.systutorials.comwww.w3.orgwww.xudongz.comwww.zetetic.netxn--fiqs8s.icom.museumxn--n3h.netyahoo.comyaml.devyaml.orgziglang.orgzilliz.com

</> Dependencies

cryptography

java dependency
expand_more 1 low-confidence finding(s)
low env_fs tooling Excluded from app score unreachable #a27b09e752dac5f3 Filesystem access.
pkgs/java/[email protected]/docs/development/custom-vectors/rsa-oaep-sha2/VerifyRSAOAEPSHA2.java:71
        m_file_reader = new FileReader(path);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • dotenv prod — no sdist (wheels only)
  • pystray prod — no sdist (wheels only)
  • serde prod — cdn 403
  • tokio prod — cdn 403